Endpoint and Identity Senior Engineer

Cherry Bekaert; Raleigh (NC); Hybrid; USD 89,000 - 118,000; Full time

Job summary

Cherry Bekaert is seeking a Senior Endpoint & Identity Engineer to shape and support enterprise endpoint management and identity solutions. This hybrid role can be based in any U.S.

office and involves collaboration with cybersecurity, infrastructure, and IT operations teams to strengthen security posture while enabling scalable employee experiences. You'll lead initiatives in device provisioning, software deployment, patch management, MFA, SSO, RBAC, and governance, and serve as a senior

Qualifications

• Must hold Microsoft Endpoint Administrator Associate (or equivalent).
• 5+ years in endpoint management, IAM, or related IT infrastructure.
• Experience in large-scale enterprise environments is preferred.

Responsibilities

• Provide leadership through coaching, mentoring, and performance feedback.
• Design, implement, and support enterprise endpoint management solutions across platforms.
• Develop and improve IAM capabilities: MFA, SSO, RBAC, and governance.
• Implement endpoint security controls and modern authentication methods.
• Serve as escalation resource for complex endpoint, identity, and security issues.
• Collaborate with cybersecurity, infrastructure, and IT operations teams to drive automation.
• Evaluate emerging technologies and recommend improvements for security and reliability.
• Develop and maintain technical documentation, procedures, standards, and runbooks.
• Identify opportunities for continuous improvement and automation of operations.

Skills

Endpoint management

Identity & access management

Device security

Automation

Documentation

Cross-functional collaboration

Project management

Education

Microsoft Endpoint Administrator Associate

Tools

Microsoft Endpoint Manager (Intune)

Job description

At Cherry Bekaert, we help our people and clients move forward with confidence. As we continue to invest in modern workplace technologies and enterprise security, we are seeking a Senior Endpoint & Identity Engineer to help shape and support the technologies that power a secure, efficient, and scalable employee experience.

This hybrid role can be based out of any of Cherry Bekaert’s U.S. office locations and offers the opportunity to play a key role in endpoint management, identity and access management, device security, automation, and operational excellence. You will work closely with cybersecurity, infrastructure, and IT operations teams to strengthen our security posture while delivering technology solutions that support business objectives and enhance the user experience.

As a Senior Endpoint & Identity Engineer, You Will

• Provide leadership to the team through coaching, mentoring, professional development, and regular performance feedback.
• Design, implement, and support enterprise endpoint management solutions, including device provisioning, configuration management, software deployment, patch management, compliance enforcement, and device lifecycle administration across multiple platforms.
• Develop, administer, and continuously improve identity and access management capabilities, including authentication, authorization, multi-factor authentication (MFA), single sign-on (SSO), role-based access controls (RBAC), and governance processes.
• Implement and maintain endpoint security controls, modern authentication methods, device protection strategies, and technology standards that support a secure and compliant environment.
• Serve as a senior escalation resource for complex endpoint, identity, and security-related issues while supporting incident response and troubleshooting efforts.
• Collaborate with cybersecurity, infrastructure, and IT operations teams to establish standards, drive automation initiatives, improve operational efficiency, reduce technical debt, and support enterprise technology programs.
• Evaluate emerging technologies and recommend enhancements that improve security, scalability, reliability, and overall service delivery.
• Develop and maintain technical documentation, operational procedures, standards, and runbooks to promote consistency and knowledge sharing.
• Identify opportunities for continuous improvement and automation to enhance the employee technology experience and optimize operational processes.

What You Bring To The Role

• Microsoft Endpoint Administrator Associate certification (or equivalent endpoint management certification) required.
• 5+ years of progressive experience in endpoint management, systems engineering, identity and access management, or related IT infrastructure disciplines.
• Advanced knowledge of endpoint management, device lifecycle administration, software deployment, patch management, and endpoint compliance frameworks.
• Demonstrated experience administering endpoint management, device compliance, software deployment, patch management, and identity and access management solutions within a large-scale enterprise environment.
• Strong understanding of identity and access management principles, including authentication, authorization, role-based access controls, governance, and privileged access management.
• Knowledge of endpoint security practices, modern authentication methods, zero-trust principles, vulnerability mitigation, and security compliance requirements.
• Ability to design, implement, and support scalable enterprise technology solutions that align with business and security objectives.
• Strong analytical and problem-solving capabilities with the ability to diagnose and resolve complex technical issues effectively.
• Experience with automation, scripting, system configuration, and process optimization to improve operational efficiency and service delivery.
• Ability to create and maintain technical documentation, operational procedures, standards, and runbooks.
• Strong organizational and project management skills with the ability to manage multiple priorities and initiatives simultaneously.
• Effective verbal and written communication skills with the ability to translate technical concepts for a variety of audiences.
• Demonstrated ability to collaborate across teams and build strong working relationships with cybersecurity, infrastructure, operations, and business stakeholders.
• Commitment to continuous learning, innovation, process improvement, and adoption of emerging technologies and industry trends.

What You Can Expect From Us

• Our shared values that foster inclusion and belonging including uncompromising integrity, collaboration, trust, and mutual respect
• The opportunity to innovate and do work that motivates and engages you
• A collaborative environment focused on enabling you to further your career growth and continuous professional development
• Competitive compensation and a total rewards package that focuses on all aspects of your wellbeing
• Flexibility to do impactful work and the time to enjoy your life outside of work
• Opportunities to connect and learn from professionals from different backgrounds and with different cultures

Benefits Information

Cherry Bekaert cares about our people. We offer competitive compensation packages based on performance that recognize the value our people bring to our clients and our Firm. The salary range for this position is included below. Individual salaries within this range are determined by a variety of factors including but not limited to the role, function and associated responsibilities, a candidate’s work experience, education, knowledge, skills, and geographic location. In addition, we offer a comprehensive, high-quality benefits program which includes annual bonus, medical, dental, and vision care; disability and life insurance; generous Paid Time Off; retirement plans; Paid Care Leave; and other programs that are dedicated to enhancing your personal and work life and providing you and your family with a measure of financial protection.

Pay Range

$88,900 - $117,500 per year

About Cherry Bekaert

Cherry Bekaert, ranked among the largest assurance, tax and advisory firms in the U.S., serves clients across industries in all 50 U.S. states and internationally. For more details, visit https://www.cbh.com/disclosure/

Cherry Bekaert provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, national origin, citizenship status, protected veteran status, disability status, or any other category protected by applicable federal, state or local laws. https://careers.cbh.com/legal-disclosures/ contains further information regarding the firm's compliance with federal, state and local recruitment and hiring laws.

This role is expected to accept applications for at least five calendar days and may continue to be posted until a qualified applicant is selected or the position has been cancelled.

Candidates must demonstrate eligibility to work in the United States.Cherry Bekaert will not provide worksponsorship for this position.

Cherry Bekaert LLP and Cherry Bekaert Advisory LLC are members of Allinial Global, an accountancy and business advisory global association. Visit us at https://careers.cbh.com/ and follow us onLinkedIn,Instagram, Twitterand Facebook.

© 2026 Cherry Bekaert. All Rights Reserved.