Endpoint Services Engineer

SchoolsFirst Federal Credit Union; Tustin (CA); On-site; USD 134,388,000 - 215,020,000; Full time

Job summary

SchoolsFirst Federal Credit Union seeks an Endpoint Services Engineer to lead the endpoint security program, mentor admins, and drive standardization across Windows and macOS environments. You will shape security policies, implement EDR and zero‑trust strategies, and automate complex tasks to reduce risk and improve efficiency.

The role requires deep knowledge of AD, MDM/MAM, EPP, and scripting (PowerShell, Python, Bash), with a focus on cross‑functional collaboration and scalable endpoint

Qualifications

• Bachelor's degree or equivalent years of experience in a related field.
• 5–7 years of relevant endpoint security or IT security experience.
• MD-102 and MS-101 certifications or equivalent expertise.
• SC-200 and Network+ certifications are required or preferred.
• Strong scripting (PowerShell, Python, Bash) and cross‑platform support.

Responsibilities

• Lead endpoint security program and mentor administrators.
• Standardize endpoint configurations and security hardening.
• Implement EDR and zero‑trust strategies in multi‑OS environments.
• Automate management tasks and integrate with core IT systems.
• Collaborate with cross‑functional teams on security policies.

Skills

PowerShell

Python

Bash

Active Directory

Hybrid identity management

Endpoint security

Education

Bachelor's Degree in a related field or equivalent years of experience

5-7 years of prior relevant experience

MD-102

MS-101

SC-200

CompTIA Network+

CompTIA Security+ (preferred)

Tools

MDM

MAM

EPP

EDR

macOS

Windows

Group Policy

Active Directory

Job description

We’re always looking for diverse, talented, service-oriented people to join our exceptional team.

Endpoint Services Engineer

The pay range for this position is listed below. Our pay ranges are built to allow for candidates with various levels of skill and experience to be considered, as well as for room for growth and tenure achieved in a role over time. Typical new hire salary offers fall within the minimum to midpoint of a pay range for many candidates. Any offer extended to a candidate will be based upon their unique set of knowledge, skills, education, and experience as well as internal equity.

Pay Range

$46.90 - $75.04

Scheduled Weekly Hours

40

What You’ll Be Doing

The Endpoint Services Engineer is a senior individual contributor who provides technical leadership and mentorship to administrators while managing the organization's endpoint security program. This role is responsible for securing and maintaining the enterprise endpoint and mobile device fleet through our Endpoint Protection Platform (EPP). The position combines strategic oversight with hands‑on technical execution to drive standardization of endpoint configurations, security hardening, vulnerability management, and advanced Endpoint Detection and Response (EDR) solutions, all aligned with the company’s zero trust and XDR strategies. The engineer collaborates with cross-functional teams to develop security policies, automate routine management tasks, and support physical and virtual endpoint infrastructure. The ideal candidate will possess deep expertise in endpoint management, scripting, security configuration, and troubleshooting security software.

• Researches, evaluates, and recommends software and hardware products to maintain a stable and consistent end-user environment.
• Designs and implements advanced endpoint management solutions, optimizing processes and systems for the entire endpoint fleet.
• Serves as a project technical lead, providing tasks and technical leadership and executing plans and implementing technical solution projects to refresh supported systems.
• Designs and implements endpoint architecture, network integration, and backend infrastructure to support endpoint deployment and management. Automates complex, organization-wide tasks and integrates endpoint systems with other core IT systems (e.g., networking, identity management).
• Serves as an expert across multiple operating systems (Windows, macOS) and responsible for ensuring seamless integration of devices across diverse platforms.

Additional Job Functions

• Performs other duties as assigned
• Complies with regulatory compliance and assigned training requirements including but not limited to BSA regulations corresponding to their specific job duties. Failure to do so may result in disciplinary and other employment related actions.

Qualifications

• High School Diploma or GED required
• Bachelor's Degree in a related field or equivalent years of experience required
• 5-7 years of prior relevant experience required
• MD-102, MS-101 required
• SC-200 required
• CompTIA Network+ required
• CompTIA Security+ preferred

Knowledge, Skills, And Abilities

• Technical Core Competencies: Required
• Skilled in managing Apple devices (macOS/iOS) for deployment, configuration, and ongoing support via MDM and MAM solutions in both on-premises and cloud/SaaS environments. Preferred
• Expertise in automated OS deployment, system optimization, and troubleshooting across macOS and Windows platforms.
• Advanced expertise in Active Directory and hybrid identity management, including Group Policy, multi-domain setups, and role-based access controls
• Security and Compliance:
• Expert in designing and maintaining endpoint configurations
• Expert in applying robust security protocols across multi-platform environments.
• Skilled in implementing best practices for identity management within Active Directory and UEM frameworks to support organizational security policies.
• Cloud Integration and Infrastructure:
• Expertise in managing both on-premises and cloud-based infrastructures
• Proficient in implementing scalable device configurations and updates within cloud environments.
• Automation and Scripting:
• Advanced skills in PowerShell with additional proficiency in Python and Bash, developing automation frameworks for application packaging, deployment, inventory management, and system configuration across macOS and Windows.
• Demonstrated experience creating cross-platform automation processes.
• Project Management and Process Improvement:
• Proven ability to lead endpoint lifecycle projects and enhancements, optimizing deployment pipelines and enforcing compliance.
• Skilled in identifying process improvement opportunities within endpoint management, leading initiatives that reduce operational overhead, improve incident response, and elevate system performance.

SchoolsFirst FCU is committed to Diverse, Equitable, and Inclusive Hiring

At SchoolsFirst FCU we are dedicated to building and growing a diverse, inclusive, and authentic Dream Team, so if you’re excited about a position or wanting to make a career change but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. Many skills are transferrable and you may be just the right candidate for the position, or for other roles we are working on.

SchoolsFirst Federal Credit Union is committed to fostering, cultivating, and preserving a culture of diversity and inclusion. SchoolsFirst FCU is an equal opportunity employer and prohibits discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibits discrimination against all individuals based on their race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, political affiliation, or genetic information.

This organization participates in E-Verify.