Endpoint Security Engineer Contract Contract Fully Onsite Need Local

Duration    6-12 months

Location    Media PA - must be local

External Job Description

• Candidates are assessed on evidence of having done the work, not exposure to it. The following are non-negotiable.
• Eight or more years in endpoint, security, or systems engineering, including at least one enterprise-scale endpoint security agent migration.
• Deep hands-on Trellix ENS and ePO: modules, policies, exclusions, Agent-to-ePO communication, uninstall procedures, tamper protection, and cleanup.
• Deep hands-on SentinelOne Singularity administration: console, sites and groups, agents, policies, exclusions, detection modes, mitigation, quarantine, rollback, and upgrades.
• Advanced PowerShell scripting for automated detection, uninstall, installation, validation, logging, remediation, and rollback, with working Bash proficiency.
• Expert Windows endpoint engineering across Windows 10 and 11, IoT and LTSC, and Windows Server, with strong troubleshooting of application failures, blocked executables, agent conflicts, and networking (DNS, proxy, TLS, certificates).
• Enterprise-scale software deployment through MECM/SCCM, Intune, or Ivanti, and experience within formal change and release management from pilot through QA, UAT, and production.
• Experience supporting distributed retail, restaurant, or branch estates where endpoints are unattended, bandwidth-constrained, and directly tied to revenue.
• Availability for on-site work and for after-hours and weekend deployment windows, which may vary by phase.