Endpoint Services Engineer

SchoolsFirst Federal Credit Union; Tustin (CA); Sur place; USD 69 000 - 103 000; Plein temps

Résumé du poste

SchoolsFirst FCU is seeking an Endpoint Services Engineer to lead the endpoint security program and coordinate security policy development across Windows and macOS environments. The role emphasizes hands‑on implementation, automation, and cross‑functional collaboration.

The ideal candidate will manage endpoint configurations, security hardening, and vulnerability management within a zero‑trust and XDR framework, leveraging PowerShell, Python, Bash, and diverse MDM/MAM tools to optimize the

Qualifications

• Bachelor’s Degree or equivalent years of experience required.
• 5-7 years of prior relevant experience required.
• MD-102 and MS-101 certifications required.
• SC-200 certification required.
• CompTIA Network+ required; Security+ preferred.

Responsabilités

• Lead endpoint security program and provide technical leadership.
• Design and implement advanced endpoint management solutions.
• Automate complex tasks and integrate endpoint systems with core IT systems.
• Support deployment and management across Windows and macOS.
• Collaborate with cross-functional teams on security policies and EPP/EDR strategies.

Connaissances

Endpoint management

PowerShell

Python

Bash

Active Directory

Group Policy

Multi-domain setups

EDR

Zero Trust

Formation

Bachelor’s Degree in a related field

MD-102

MS-101

SC-200

CompTIA Network+

CompTIA Security+

Outils

MDM solutions

Apple deployment tools

Description du poste

We’re always looking for diverse, talented, service-oriented people to join our exceptional team.

Endpoint Services Engineer

The pay range for this position is listed below. Our pay ranges are built to allow for candidates with various levels of skill and experience to be considered, as well as for room for growth and tenure achieved in a role over time. Typical new hire salary offers fall within the minimum to midpoint of a pay range for many candidates. Any offer extended to a candidate will be based upon their unique set of knowledge, skills, education, and experience as well as internal equity.

Pay Range:

$46.90 - $75.04

Scheduled Weekly Hours:

40

What You’ll Be Doing

The Endpoint Services Engineer is a senior individual contributor who provides technical leadership and mentorship to administrators while managing the organization’s endpoint security program. This role is responsible for securing and maintaining the enterprise endpoint and mobile device fleet through our Endpoint Protection Platform (EPP). The position combines strategic oversight with hands-on technical execution to drive standardization of endpoint configurations, security hardening, vulnerability management, and advanced Endpoint Detection and Response (EDR) solutions, all aligned with the company’s zero trust and XDR strategies. The engineer collaborates with cross-functional teams to develop security policies, automate routine management tasks, and support physical and virtual endpoint infrastructure. The ideal candidate will possess deep expertise in endpoint management, scripting, security configuration, and troubleshooting security software.

• Researches, evaluates, and recommends software and hardware products to maintain a stable and consistent end-user environment.
• Designs and implements advanced endpoint management solutions, optimizing processes and systems for the entire endpoint fleet.
• Serves as a project technical lead, providing tasks and technical leadership and executing plans and implementing technical solution projects to refresh supported systems.
• Designs and implements endpoint architecture, network integration, and backend infrastructure to support endpoint deployment and management. Automates complex, organization-wide tasks and integrates endpoint systems with other core IT systems (e.g., networking, identity management).
• Serves as an expert across multiple operating systems (Windows, macOS) and responsible for ensuring seamless integration of devices across diverse platforms.

Additional Job Functions

• Performs other duties as assigned
• Complies with regulatory compliance and assigned training requirements including but not limited to BSA regulations corresponding to their specific job duties. Failure to do so may result in disciplinary and other employment related actions.

Qualifications

• High School Diploma or GED required
• Bachelor’s Degree in a related field or equivalent years of experience required
• 5-7 years of prior relevant experience required
• MD-102, MS-101 required
• SC-200 required
• CompTIA Network+ required
• CompTIA Security+ preferred

Knowledge, Skills, and Abilities

• Technical Core Competencies: Required
• Skilled in managing Apple devices (macOS/iOS) for deployment, configuration, and ongoing support via MDM and MAM solutions in both on-premises and cloud/SaaS environments. Preferred
• Expertise in automated OS deployment, system optimization, and troubleshooting across macOS and Windows platforms.
• Advanced expertise in Active Directory and hybrid identity management, including Group Policy, multi-domain setups, and role-based access controls
• Security and Compliance:
• Expert in designing and maintaining endpoint configurations
• Expert in applying robust security protocols across multi-platform environments.
• Skilled in implementing best practices for identity management within Active Directory and UEM frameworks to support organizational security policies.
• Cloud Integration and Infrastructure:
• Expertise in managing both on-premises and cloud-based infrastructures
• Proficient in implementing scalable device configurations and updates within cloud environments.
• Automation and Scripting:
• Advanced skills in PowerShell with additional proficiency in Python and Bash, developing automation frameworks for application packaging, deployment, inventory management, and system configuration across macOS and Windows.
• Demonstrated experience creating cross-platform automation processes.
• Project Management and Process Improvement:
• Proven ability to lead endpoint lifecycle projects and enhancements, optimizing deployment pipelines and enforcing compliance.
• Skilled in identifying process improvement opportunities within endpoint management, leading initiatives that reduce operational overhead, improve incident response, and elevate system performance.

SchoolsFirst FCU is committed to Diverse, Equitable, and Inclusive Hiring

At SchoolsFirst FCU we are dedicated to building and growing a diverse, inclusive, and authentic Dream Team, so if you’re excited about a position or wanting to make a career change but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. Many skills are transferrable and you may be just the right candidate for the position, or for other roles we are working on.

SchoolsFirst Federal Credit Union is committed to fostering, cultivating, and preserving a culture of diversity and inclusion. SchoolsFirst FCU is an equal opportunity employer and prohibits discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibits discrimination against all individuals based on their race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, political affiliation, or genetic information.

This organization participates in E-Verify.