Endpoint Imaging & Security Engineer

Socket.dev; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Socket.dev is seeking an experienced Endpoint Engineer to design, build, and secure standardized workstation images for Windows and macOS, supporting on-site, remote, and VDI access. You will own imaging lifecycle, patching, automation, validation, rollback, and release processes while maintaining patch workflows with Ivanti, KACE, Intune, and JAMF, and enforcing logging, monitoring, and compliance.

The role requires TS clearance, 8+ years in IT or cybersecurity, and strong governance

Qualifications

• Bachelor's degree in IT, Cybersecurity, or related field preferred; equivalent experience acceptable
• Active Top Secret security clearance (or interim)
• 8+ years in IT, Endpoint Engineering, or Cybersecurity
• 6+ years engineering in enterprise environments
• Experience under formal change control, audit, and security governance processes

Responsibilities

• Design, build, and secure standardized workstation images for Windows and macOS supporting on-site, remote, and VDI access
• Engineer endpoint baselines and controls to reduce risk of discovery, lateral movement, credential misuse, persistence, and evasion
• Own imaging design and lifecycle maintenance including imaging, patching, automation, validation, rollback, and release management
• Maintain OS and application patching, version control, and deployment workflows using Ivanti, KACE, Intune, GPO, JAMF, or equivalent
• Engineer and maintain logging, telemetry, monitoring, and audit capabilities to track endpoint activity and compliance
• Develop validation testing after imaging or major patches to confirm endpoint functionality and VDI connectivity
• Produce Findings Reports, Remediation Plans, Validation Reports, and change documentation
• Create and maintain runbooks, technical standards, and deployment procedures for Service Desk and IRM teams
• Support escalations arising from complex Endpoint, image, patching, telemetry, and device-management incidents

Skills

Security clearance

Endpoint engineering

Imaging automation

Patch management

Education

Bachelor's degree in IT/Cybersecurity

Tools

Ivanti

KACE

JAMF

Intune

GPO

Job description

Socket.dev is seeking an experienced Endpoint Engineer to design, build, and secure standardized workstation images for Windows and macOS, supporting on-site, remote, and VDI access. You will own imaging lifecycle, patching, automation, validation, rollback, and release processes while maintaining patch workflows with Ivanti, KACE, Intune, and JAMF, and enforcing logging, monitoring, and compliance.

The role requires TS clearance, 8+ years in IT or cybersecurity, and strong governance