Senior Endpoint Security Engineer: Intune, EDR & M365

Vitol; Genf; On-site; CHF 120,000 - 170,000; Full time

Job summary

Vitol is seeking an Endpoint Security Engineer to safeguard endpoints (desktops, laptops, VDIs, mobiles) and the Microsoft 365 footprint across global operations.

You will deploy and refine CrowdStrike, Palo Alto, Tanium, and manage device security via Intune, AirWatch, and Workspace One. You will help advance cloud-native device management and collaborate with CISO, IT and Cloud teams.

Qualifications

• 5+ years of endpoint security engineering in an enterprise environment.
• Hands-on experience with EDR/EPP tooling and policy design.
• Strong knowledge of Intune, Entra ID, and M365 security.
• Experience across Windows, macOS, iOS and Android.
• Familiarity with CIS, NIST, and ISO 27001 frameworks.
• Scripting with PowerShell and Graph API.

Responsibilities

• Deploy, configure, and maintain endpoint protection across the estate.
• Maintain hardening baselines, encryption, patching and vulnerability remediation.
• Engineer Intune for security: compliance, profiles, baselines and app protection.
• Migrate and optimize Intune implementations with policy-as-code.
• Implement Entra ID controls: CA, device health, MFA.
• Apply M365 security and DLP controls for endpoints.
• Integrate EDR/EPP with Intune and Entra ID for posture-driven access.
• Monitor security posture and incidents; drive remediation.

Skills

Endpoint security

EDR/EPP

Intune/OS security

Entra ID

Microsoft 365 security

Hardening & patching

Scripting & automation

Security frameworks

Industry knowledge

Languages: English/French

Education

Bachelor's or Master's in CS/Engineering/InfoSec

Tools

CrowdStrike

Palo Alto

Microsoft Intune

Workspace One

AirWatch

Tanium

Entra ID

Microsoft Graph API

PowerShell

SCCM/Configuration Manager

Job description

Vitol is seeking an Endpoint Security Engineer to safeguard endpoints (desktops, laptops, VDIs, mobiles) and the Microsoft 365 footprint across global operations.

You will deploy and refine CrowdStrike, Palo Alto, Tanium, and manage device security via Intune, AirWatch, and Workspace One. You will help advance cloud-native device management and collaborate with CISO, IT and Cloud teams.