Endpoint Security Engineer (Trellix to SentinelOne migration)

Holistic Partners, Inc; Media (Delaware County); On-site; USD 120,000 - 180,000; Full time

Job summary

Holistic Partners, Inc. is seeking an experienced Endpoint Security Engineer to lead a large-scale migration from Trellix to SentinelOne across 20,000 endpoints. The role involves hands-on engineering, scripting, and automation to ensure a smooth rollout.

You will design migration strategy, build automation, validate functionality, and support deployment through stabilization, including pilot deployments and phased enterprise-wide rollout.

Qualifications

• 8+ years in Endpoint Engineering, Security or related fields.
• Experience migrating enterprise endpoints at scale.
• Hands-on with Trellix ENS/ePO and SentinelOne.
• Scripting for deployment, validation, and rollback.

Responsibilities

• Assess Trellix environment and plan migration to SentinelOne.
• Configure SentinelOne policies, sites/groups, exclusions.
• Develop PowerShell/Bash automation for installs, uninstalls, validation.
• Package deployment via MECM/SCCM, Intune, Ivanti.
• Create test environments and automated validations for removal and install.
• Support pilot deployments and enterprise rollout with monitoring.
• Serve as senior escalation resource during deployment and hypercare.
• Participate in planning, design reviews, and knowledge transfer.

Skills

SentinelOne

Trellix / McAfee ePO

ENS

PowerShell

SCCM / MECM

Ivanti

Windows Endpoint Engineering

Enterprise Software Deployment

Endpoint Security Migration

Tools

SCCM / MECM

Microsoft Intune

Ivanti

Job description

LOCATION: Media, PA (4 days/week ONSITE)

Summary

Our client is seeking an experienced Endpoint Security Engineer to lead the technical execution of a large-scale migration from Trellix to SentinelOne across more than 20,000 endpoints. This environment includes Windows point-of-sale (POS) devices, in-store and back-office Windows servers, as well as embedded and kiosk-class systems.

The consultant will be responsible for the end-to-end engineering effort, including designing the migration strategy, building the automation required to execute it, validating functionality through testing, and supporting deployment through stabilization.

This is a highly hands-on engineering role, not an advisory position. The ideal candidate will have experience writing deployment and remediation scripts, troubleshooting complex endpoint issues, supporting pilot deployments, and driving large-scale enterprise rollouts. The environment consists of business-critical systems that operate continuously, requiring strong operational discipline and attention to deployment quality, rollback procedures, and automated reporting.

Key Responsibilities

• Assess the existing Trellix environment and design the migration approach for various endpoint types while minimizing security exposure during the transition to SentinelOne.
• Configure and administer SentinelOne, including site and group structure, policies, detection and mitigation settings, update rings, connectivity requirements, and application exclusions.
• Develop automation using PowerShell and Bash for silent installs, uninstalls, validation, cleanup, logging, remediation, rollback procedures, and reboot management.
• Package and deploy software through enterprise endpoint management platforms such as MECM/SCCM, Microsoft Intune, and Ivanti, including detection logic, dependencies, retry behavior, and deployment scheduling.
• Build and maintain a representative test environment and develop automated validation procedures to confirm successful Trellix removal, SentinelOne installation, policy assignment, application compatibility, performance, and rollback functionality.
• Support testing efforts by identifying and troubleshooting deployment issues, documenting findings, and providing feedback to the project team throughout the validation process.
• Plan and execute pilot deployments, followed by phased enterprise-wide rollout activities, including real-time monitoring and remediation of deployment issues.
• Act as the senior technical escalation resource during deployment and hypercare phases while partnering with vendor support teams as needed.
• Participate in project planning, design reviews, risk assessments, status meetings, documentation efforts, and knowledge transfer activities.

Required Experience:

• 8+ years of experience in Endpoint Engineering, Security Engineering, Systems Engineering, or a related discipline.
• Experience supporting at least one enterprise-scale endpoint security platform migration.
• Strong hands-on experience with Trellix ENS and ePO, including policies, exclusions, agent communication, uninstall procedures, tamper protection, and cleanup activities.
• Strong hands-on experience administering SentinelOne Singularity, including agents, policies, sites/groups, exclusions, detection and mitigation settings, rollback capabilities, and platform upgrades.
• Advanced PowerShell scripting experience focused on automated deployment, validation, remediation, logging, and rollback processes.
• Working knowledge of Bash scripting.
• Expert-level Windows endpoint administration across Windows 10, Windows 11, Windows IoT/LTSC, and Windows Server environments.
• Strong troubleshooting experience involving endpoint security products, application conflicts, service and driver issues, networking, DNS, certificates, proxies, and TLS communications.
• Experience deploying software at enterprise scale through MECM/SCCM, Microsoft Intune, and/or Ivanti.
• Experience operating within formal change management and release management processes, including testing, QA, UAT, pilot deployments, and production rollouts.
• Experience supporting large distributed environments such as retail, restaurant, hospitality, branch-based, or multi-site enterprise organizations where endpoints are remotely managed and business critical.
• Ability to support occasional after-hours and weekend deployment activities as project phases require.

Must-Have Skills:

• SentinelOne
• Trellix / McAfee ePO
• ENS
• PowerShell
• SCCM / MECM
• Ivanti
• Windows Endpoint Engineering
• Enterprise Software Deployment
• Endpoint Security Migration

Ideal Background:

• Large-scale endpoint migrations
• Retail, restaurant, branch, or distributed environments
• Strong scripting and automation experience
• Hands-on engineering rather than project management or architecture-only backgrounds