Remote Senior Identity & Endpoint Security Engineer

Fortellar; Chicago (IL); Remote; USD 140,000 - 190,000; Full time

Job summary

Fortellar is seeking a Sr. Security Engineer focused on Identity & Endpoint to design, deploy, and operate identity, privileged access, vulnerability, endpoint, and device trust controls for enterprise clients.

You will work hands-on with Microsoft Entra ID, Intune, Defender for Endpoint, and on-prem AD, delivering secure, scalable, and compliant solutions while guiding change management and client communication across multi-workstream engagements.

Qualifications

• Bachelor’s degree in Computer Science, Information Security or a related field.
• Preferred certifications: SC-300, MD-102, AZ-500, SC-100 or CISSP.
• 8+ years in infrastructure or security engineering, including 5+ years in hybrid identity (Entra ID and on-premises AD).
• 4+ years deploying Microsoft Intune and Defender for Endpoint at enterprise scale.
• Proven experience designing Conditional Access, phishing-resistant MFA and Privileged Identity Management for 1,000+ users.
• 3+ years in a client-facing consulting role, presenting to technical and executive stakeholders.
• Track record of leading high-risk changes through formal change management, using pilots, staged rollouts and rollback plans.

Responsibilities

• Design and enforce phishing-resistant multifactor authentication for administrators and for the full user population.
• Reduce privileged directory role membership to a justified minimum and produce the privileged-overlap map.
• Remediate domain-dominance exposure and migrate the directory synchronization connector to least-privilege identity.
• Redesign Conditional Access around user and administrator personas and apply RBAC.
• Implement Privileged Identity Management with just-in-time elevation and sign-in frequency controls.
• Evaluate, deploy, and operate privileged access management and identity governance; establish quarterly recertification.

Skills

Hybrid identity

Entra ID

Active Directory

Microsoft Intune

Defender for Endpoint

Conditional Access

Phishing-resistant MFA

Privileged Identity Management

Change management

Client-facing consulting

Education

Bachelor’s degree in Computer Science, Information Security or a related field

SC-300, MD-102, AZ-500, SC-100 or CISSP

Tools

Entra ID

Active Directory

Microsoft Intune

Defender for Endpoint

Job description

Fortellar is seeking a Sr. Security Engineer focused on Identity & Endpoint to design, deploy, and operate identity, privileged access, vulnerability, endpoint, and device trust controls for enterprise clients.

You will work hands-on with Microsoft Entra ID, Intune, Defender for Endpoint, and on-prem AD, delivering secure, scalable, and compliant solutions while guiding change management and client communication across multi-workstream engagements.