For companies:
For professionals:
For everyone:
For developers:
Responsibilities
EverOps is an AI-native platform operations company focused on delivering outcomes - not tickets. Our TechPods embed directly with customers to operate, scale, and modernize their platforms across cloud, security, and IT.We’re looking for a Senior Endpoint Engineer to design, harden, and operate modern endpoint environments across macOS and Windows at scale. This role sits at the intersection of endpoint engineering, identity, and security, with deep expertise across leading EDR platforms (CrowdStrike Falcon, SentinelOne, and Microsoft Defender for Endpoint) and modern MDM platforms (Intune, Kandji/Iru, and Fleet) to drive automation, visibility, and user experience.The ChallengeMost companies are stuck with fragmented endpoint tooling, reactive support models, and inconsistent security enforcement.You’ll help our customers evolve to a modern, Zero Trust-aligned endpoint strategy, standardizing device lifecycle management, improving end-user experience, and tightly integrating identity, security, and device posture across whichever EDR and MDM stack each customer runs.This means balancing:Security vs. usabilityAutomation vs. flexibilityStandardization vs. real-world edge casesPlatform-specific depth vs. cross-platform fluencyThe MissionAs a Senior Infrastructure Endpoint Engineer, you will join our U.S.-Based Virtual Operating Center, working within a dynamic team to own and evolve enterprise MDM and EDR services across Windows and macOS environments. Your primary mission will focus on modernizing user experience architecture, maturing lifecycle automation, strengthening endpoint and security posture, and integrating automated workflows to improve security, scalability, and user experience.You will be expected to lead by example - architecting solutions across Intune, Kandji (Iru), and Fleet, and operating with deep expertise across CrowdStrike Falcon, SentinelOne, and Microsoft Defender for Endpoint. Beyond hands-on execution, you will own the endpoint and security tooling roadmap, evaluate platform tradeoffs, and drive technical decisions using data - not opinion - while designing automated provisioning workflows tied to Autopilot or Apple Business Manager.What You’ll DoDesign, implement, and manage endpoint platforms using Microsoft Intune, Kandji (Iru), and Fleet across mixed macOS and Windows fleetsOwn device lifecycle management (onboarding, offboarding, compliance, and refresh) across all supported MDM platformsImplement automated provisioning with Autopilot and Apple Business Manager (DEP)Configure and enforce industry-standard hardening baselines for macOS and Windows via Intune, Kandji/Iru, and FleetOwn EDR/XDR platform administration across CrowdStrike Falcon, SentinelOne, and Microsoft Defender for Endpoint - including sensor/agent deployment, policy configuration, prevention policy tuning, and exclusion managementManage vulnerability exposure using CrowdStrike Spotlight, SentinelOne Vulnerability Management, or Microsoft Defender Vulnerability Management, and drive remediation SLAsLead alert triage and investigation workflows across EDR platforms, partnering with the security team on escalations and responseBuild and maintain host groups, device policies, and containment workflows across whichever EDR platform a customer runsOwn and drive the endpoint and security tooling roadmap - evaluating, consolidating, and migrating between EDR/MDM platforms as neededMake and defend platform and architecture decisions (build vs. buy, consolidate vs. diversify) backed by data - cost, risk reduction, and operational impactAdminister Server Patch and Policy Management through WSUS/AWS SSMIntegrate endpoint platforms with Okta, Entra ID, and other identity providersAutomate endpoint configuration and application lifecycle using scripting (PowerShell, Bash, Python)Troubleshoot complex endpoint issues across OS, network, and identity layersSupport secure access workflows (VPN, cert-based Wifi authentication)Build and maintain documentation, runbooks, and standardsPartner with Security, IAM, and Cloud teams to align endpoint strategy with broader platform architecturePresent technical recommendations and roadmap tradeoffs to customer and internal leadership, backed by metrics and dataContribute to continuous improvement within your team and across EverOps’ customer baseYou Have6+ years of experience in endpoint engineering, IT infrastructure, or related field, with demonstrated seniority in owning roadmap and driving technical decisionsDeep, hands-on expertise across MDM platforms:Microsoft IntuneKandji (Iru), JAMFFleetmacOS and Windows administration at enterprise scaleDeep, hands-on expertise across EDR/XDR platforms:CrowdStrike Falcon - administration, policy tuning, Falcon modules beyond EDR such as Identity and vulnerability managementSentinelOne - agent deployment, policy configuration, and Singularity platform administrationMicrosoft Defender for Endpoint - onboarding, policy management, and Microsoft 365 Defender ecosystem integrationSolid understanding of endpoint security (patching, compliance, EDR, vulnerability management, and alert triage)Experience with Okta, Entra ID (Azure AD), or similar identity platformsFamiliarity with Zero Trust principles and conditional accessScripting experience (PowerShell, Bash, or Python)Strong troubleshooting skills across endpoint, identity, and network layersWorking knowledge of AWS and/or Azure environmentsMicrosoft Autopilot and Apple Business ManagerFamiliarity with hybrid identity (Active Directory + Entra ID, GPOs)Proven ability to evaluate, compare, and recommend endpoint/security platform decisions using data - cost, risk, and operational metrics - rather than preference aloneExperience presenting technical strategy and tradeoffs to leadership or customer stakeholdersExtra AwesomeExperience with configuration management tools (Ansible, Puppet, Chef)Experience with infrastructure as code, including TerraformExperience operating in high-growth or SaaS environmentsNetwork troubleshooting experience, including basic concepts of DNS/DHCP/network traffic flow and related protocolsExperience with Nexthink or similar endpoint analytics/DEX toolsExperience leading a platform migration or consolidation (e.g., EDR-to-EDR or MDM-to-MDM) from evaluation through cutoverBenefits100% Remote Workplace: We’ve been remote since Day 1!Unlimited Paid Time Off.Equity: Become a true owner of the company.401k with company contribution and sponsored healthcare.Professional Growth: Access to training and certification programs to accelerate your career.
This job post is closed.