Sr Endpoint Management Analyst

Advanced Energy Management Limited; Quezon City; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

Advanced Energy Industries, Inc. is seeking a Senior Endpoint Operating Systems Specialist to own the security, patching, and lifecycle management of enterprise endpoints (Windows and macOS).

The role collaborates with Information Security, Infrastructure Operations, and Platform Operations to drive OS hardening and vulnerability remediation. You will lead modernization efforts, enable automation with PowerShell, MECM/SCCM, JAMF Pro and Defender, and mentor junior staff while developing

Qualifications

• Bachelor's degree in IT or related field.
• 7+ years enterprise endpoint management experience.
• 5+ years Windows and macOS administration at scale.
• Experience implementing OS security baselines and remediation strategies.
• Experience managing enterprise patching and OS lifecycle initiatives.
• Security+, CySA+ or similar cybersecurity certification.
• Experience with vulnerability management platforms (Tenable, Rapid7, Qualys, Tanium).

Responsibilities

• Lead OS vulnerability remediation for Windows and macOS environments.
• Assess and remediate OS vulnerabilities affecting enterprise endpoints.
• Research security advisories and remediation recommendations.
• Develop and execute remediation strategies for Windows and macOS.
• Test and validate security patches and updates.
• Coordinate remediation activities for critical vulnerabilities.
• Own lifecycle management for Windows and macOS platforms.
• Develop OS standards and modernization initiatives.
• Partner with Information Security teams to improve endpoint security posture.
• Create automation solutions using PowerShell and manage MECM/SCCM, JAMF Pro, Intune, Defender.

Skills

Technical leadership

Mentoring

Documentation

Cross-functional collaboration

Education

Bachelor's degree in IT or related field

Tools

MECM/SCCM

JAMF Pro

PowerShell scripting

Microsoft Defender

Microsoft Intune

Tenable

Rapid7

Qualys

Tanium

Job description

Select how often (in days) to receive an alert: Create Alert

About Advanced Energy

Advanced Energy Industries, Inc. (NASDAQ: AEIS), enables design breakthroughs and drives growth for leading semiconductor and industrial customers. Our precision power and control technologies, along with our applications know-how, inspire close partnerships and innovation in thin-film and industrial manufacturing. We are proud of our rich heritage, award-winning technologies, and we value the talents and contributions of all Advanced Energy's employees worldwide.

Position Summary

The Sr Endpoint Management Analyst is responsible for the security, lifecycle management, compliance, patching, vulnerability remediation, and operational health of enterprise endpoint operating systems.

This role serves as the primary technical owner for operating system remediation activities across Windows and macOS environments. The position is responsible for designing, implementing, and maintaining secure endpoint operating system configurations while ensuring vulnerabilities are remediated consistently and efficiently.

Working closely with Information Security, Infrastructure Operations, Platform Operations, and Site Support teams, the Senior Endpoint Operating Systems Specialist drives operating system modernization, vulnerability reduction, platform hardening, compliance initiatives, and endpoint security improvements across the enterprise.

Responsibilities

Operating System Vulnerability Remediation

• Serve as the primary technical owner for operating system vulnerability remediation activities.
• Assess and remediate operating system vulnerabilities impacting enterprise endpoints.
• Research security advisories, CVEs, vendor bulletins, and remediation recommendations.
• Develop and execute remediation strategies for Windows and macOS platforms.
• Test and validate security patches, cumulative updates, and feature releases.
• Coordinate remediation activities for critical and high-risk vulnerabilities.
• Verify successful remediation and vulnerability closure.

Operating System Lifecycle Management

• Own the lifecycle management strategy for Windows and macOS platforms.
• Develop and maintain endpoint operating system standards.
• Lead operating system upgrade and migration initiatives.
• Coordinate technology refresh and modernization efforts.
• Identify and remediate unsupported or end-of-life operating systems.

Endpoint Security and Hardening

• Develop and maintain endpoint security baselines.
• Implement operating system security configurations and hardening standards.
• Support compliance initiatives related to endpoint security.
• Reduce attack surface through secure configuration management.
• Partner with Information Security teams to improve endpoint security posture.

Patch Management

• Develop testing methodologies and deployment rings.
• Coordinate monthly and emergency patching activities.
• Monitor patch compliance and remediation effectiveness.
• Troubleshoot update failures and deployment issues.

Endpoint Management and Automation

• Administer endpoint operating system management through:
  • Microsoft Intune
  • MECM/SCCM
  • JAMF Pro
  • Microsoft Defender
• Create PowerShell-based automation solutions.
• Improve endpoint compliance, monitoring, and reporting capabilities.
• Standardize endpoint configuration management practices.

Technical Leadership

• Serve as the subject matter expert for endpoint operating systems.
• Mentor junior Endpoint Management personnel.
• Develop operational standards and technical documentation.
• Provide escalation support for complex platform issues.
• Recommend strategic improvements to endpoint management practices.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Engineering Technology, or related field.
• 7+ years of enterprise endpoint management experience.
• 5+ years of experience administering Windows and macOS environments at scale.
• Experience implementing operating system security baselines and remediation strategies.
• Experience managing enterprise patching and operating system lifecycle initiatives.
• Security+, CySA+, or similar cybersecurity certification.
• Experience with Tenable, Rapid7, Qualys, Tanium, or similar vulnerability management platforms.

Technical Skills

• Windows 10/11 administration
• Microsoft Endpoint Configuration Manager (MECM/SCCM)
• JAMF Pro
• PowerShell scripting
• Endpoint security and compliance management
• Patch management and vulnerability remediation

As part of our total rewards philosophy, we believe in offering and maintaining competitive compensation and benefits programs for our employees in order to attract and retain a talented, highly engaged workforce. Our compensation programs are focused on equitable, fair pay practices including market-based base pay, an annual pay-for-performance incentive plan, we offer a strong benefits package in each of the countries in which we operate.
Advanced Energy is committed to diversity in its workforce including Equal Employment Opportunity for Minorities, Females, Protected Veterans, and Individuals with Disabilities.
We are committed to protecting and respecting your privacy. We take your privacy seriously and will only use your personal information to administer your application in accordance with the RA No. 10173 also known as the Data Privacy Act of 2012.