Hybrid Endpoint Engineer: Windows Security & Automation

Lorven Technologies, Inc.; Seattle (WA); Hybrid; USD 100,000 - 140,000; Full time

Job summary

Lorven Technologies, Inc. is seeking an Endpoint Engineer for a hybrid role in the Seattle/Everett area. You will design, deploy, and support enterprise Windows endpoints, focusing on security and reliability in a large-scale environment.

The role emphasizes hands-on administration with Tanium, SCCM/MECM, Defender for Endpoint, AD, and GPO, plus automation via PowerShell and SysTrack monitoring to drive patching, deployment, and incident response.

Qualifications

• Experience with Tanium or SCCM/MECM in a large enterprise.
• Strong PowerShell scripting and automation skills.
• Experience with Defender for Endpoint and endpoint security.
• Proficient AD and GPO administration and config.
• Proven SysTrack monitoring and endpoint analytics experience.
• Hands-on endpoint engineering in a large enterprise.
• Experience patching, software deployment and remediation.
• Experience supporting production environments and on-call incidents.

Responsibilities

• Engineer enterprise Windows endpoints in a large environment.
• Lead patching, deployment, and vulnerability remediation efforts.
• Maintain endpoint security posture and remediation workflows.
• Support production environments and high-severity incidents on-call.
• Utilize Tanium and SCCM/MECM for endpoint management.
• Configure AD and GPO to enforce policies and standards.
• Leverage SysTrack for endpoint analytics and monitoring.

Skills

Endpoint engineering

PowerShell scripting

Automation

On-call support

Incident management

Tools

Tanium

SCCM/MECM

Defender for Endpoint

Active Directory

Group Policy

SysTrack

Job description

Lorven Technologies, Inc. is seeking an Endpoint Engineer for a hybrid role in the Seattle/Everett area. You will design, deploy, and support enterprise Windows endpoints, focusing on security and reliability in a large-scale environment.

The role emphasizes hands-on administration with Tanium, SCCM/MECM, Defender for Endpoint, AD, and GPO, plus automation via PowerShell and SysTrack monitoring to drive patching, deployment, and incident response.