Endpoint Services Engineer

Schoolsfirst-Federal-Credit-Union; Tustin (CA); On-site; USD 98,000 - 156,000; Full time

Job summary

SchoolsFirst FCU is seeking an Endpoint Services Engineer to lead and mentor admins, securing the enterprise endpoint and mobile fleet via our EPP. You’ll drive standardization, hardening, vulnerability management, and EDR aligned with zero-trust and XDR strategies.

You’ll collaborate with cross‑functional teams to implement security policies, automate tasks, and support hybrid endpoint deployments across Windows and macOS platforms.

Qualifications

• High School Diploma or GED required.
• Bachelor’s Degree in a related field or equivalent years of experience required.
• 5-7 years of prior relevant experience required.
• MD-102, MS-101 required.
• SC-200 required.
• CompTIA Network+ required.
• CompTIA Security+ preferred.

Responsibilities

• Provide technical leadership and mentorship to administrators while managing the organization’s endpoint security program.
• Secure and maintain the enterprise endpoint and mobile device fleet through Endpoint Protection Platform (EPP).
• Design and implement advanced endpoint management solutions, ensuring cross‑platform compatibility across Windows and macOS.
• Automate management tasks and integrate endpoint systems with core IT platforms (networking, identity management).
• Lead endpoint lifecycle projects, deployment pipelines, and compliance initiatives.

Skills

MD-102

MS-101

SC-200

CompTIA Network+

CompTIA Security+

Education

High School Diploma or GED

Bachelor’s Degree in related field or equivalent experience

Job description

We’re always looking for diverse, talented, service-oriented people to join our exceptional team.

Endpoint Services Engineer

The pay range for this position is listed below. Our pay ranges are built to allow for candidates with various levels of skill and experience to be considered, as well as for room for growth and tenure achieved in a role over time. Typical new hire salary offers fall within the minimum to midpoint of a pay range for many candidates. Any offer extended to a candidate will be based upon their unique set of knowledge, skills, education, and experience as well as internal equity. Pay Range: $46.90 - $75.04 Scheduled Weekly Hours: 40

What You’ll Be Doing

The Endpoint Services Engineer is a senior individual contributor who provides technical leadership and mentorship to administrators while managing the organization’s endpoint security program. This role is responsible for securing and maintaining the enterprise endpoint and mobile device fleet through our Endpoint Protection Platform (EPP). The position combines strategic oversight with hands‑on technical execution to drive standardization of endpoint configurations, security hardening, vulnerability management, and advanced Endpoint Detection and Response (EDR) solutions, all aligned with the company’s zero trust and XDR strategies. The engineer collaborates with cross‑functional teams to develop security policies, automate routine management tasks, and support physical and virtual endpoint infrastructure. The ideal candidate will possess deep expertise in endpoint management, scripting, security configuration, and troubleshooting security software. Researches, evaluates, and recommends software and hardware products to maintain a stable and consistent end‑user environment. Designs and implements advanced endpoint management solutions, optimizing processes and systems for the entire endpoint fleet. Serves as a project technical lead, providing tasks and technical leadership and executing plans and implementing technical solution projects to refresh supported systems. Designs and implements endpoint architecture, network integration, and backend infrastructure to support endpoint deployment and management. Automates complex, organization‑wide tasks and integrates endpoint systems with other core IT systems (e.g., networking, identity management). Serves as an expert across multiple operating systems (Windows, macOS) and responsible for ensuring seamless integration of devices across diverse platforms.

Additional Job Functions

Performs other duties as assigned. Complies with regulatory compliance and assigned training requirements including but not limited to BSA regulations corresponding to their specific job duties. Failure to do so may result in disciplinary and other employment related actions.

Qualifications

• High School Diploma or GED required
• Bachelor’s Degree in a related field or equivalent years of experience required
• 5-7 years of prior relevant experience required
• MD-102, MS-101 required
• SC-200 required
• CompTIA Network+ required
• CompTIA Security+ preferred

Technical Core Competencies

Skilled in managing Apple devices (macOS/iOS) for deployment, configuration, and ongoing support via MDM and MAM solutions in both on‑premises and cloud/SaaS environments. Preferred Expertise in automated OS deployment, system optimization, and troubleshooting across macOS and Windows platforms. Advanced expertise in Active Directory and hybrid identity management, including Group Policy, multi‑domain setups, and role‑based access controls.

Security and Compliance

Expert in designing and maintaining endpoint configurations. Expert in applying robust security protocols across multi‑platform environments. Skilled in implementing best practices for identity management within Active Directory and UEM frameworks to support organizational security policies.

Cloud Integration and Infrastructure

Expertise in managing both on‑premises and cloud‑based infrastructures. Proficient in implementing scalable device configurations and updates within cloud environments.

Automation and Scripting

Advanced skills in PowerShell with additional proficiency in Python and Bash, developing automation frameworks for application packaging, deployment, inventory management, and system configuration across macOS and Windows. Demonstrated experience creating cross‑platform automation processes.

Project Management and Process Improvement

Proven ability to lead endpoint lifecycle projects and enhancements, optimizing deployment pipelines and enforcing compliance. Skilled in identifying process improvement opportunities within endpoint management, leading initiatives that reduce operational overhead, improve incident response, and elevate system performance.

Diversity, Equity, and Inclusion

SchoolsFirst FCU is committed to Diverse, Equitable, and Inclusive Hiring. At SchoolsFirst FCU we are dedicated to building and growing a diverse, inclusive, and authentic Dream Team, so if you’re excited about a position or wanting to make a career change but your past experience doesn’t align perfectly with the job description, we encourage you to apply anyway. Many skills are transferable and you may be just the right candidate for the position, or for other roles we are working on. SchoolsFirst Federal Credit Union is committed to fostering, cultivating, and preserving a culture of diversity and inclusion. SchoolsFirst FCU is an equal opportunity employer and prohibits discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibits discrimination against all individuals based on their race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, political affiliation, or genetic information. This organization participates in E‑Verify. We're passionate about living our mission of providing Members with World‑Class Personal Service and financial security.

There's a reason we love coming to work every day. We have the privilege of serving those who build the future: school employees, and the families who make their work possible. Our success is built on our relationships with each other, our Members and the community. We value teamwork and face‑to‑face interactions and believe we’re at our best when we’re collaborating in‑person. We also know the flexibility to work remotely benefits the wellbeing of our team. View the work location information below on the job listing that interests you. 100% on‑site, 0% remote. Including those serving Members in‑person at our branches. Three days a week in the office and up to two days remote. Hybrid teams coordinate on‑site days to collaborate in‑person. Up to 100% remote. Select individual contributor roles may be given the option to work fully remote.