Senior Cybersecurity Patch & Endpoint Automation Engineer

Tier4 Group; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Tier4 Group in Atlanta, GA is seeking a senior cybersecurity patch and endpoint management engineer to lead enterprise patching, vulnerability remediation, and endpoint security across Windows, Linux, cloud, and mobile environments.

You will design automation workflows with PowerShell, Microsoft Graph, and Azure to streamline remediation, reporting, and device lifecycle, and build dashboards with Defender, Sentinel, Entra ID, and Log Analytics.

Qualifications

• 7+ years in cybersecurity, endpoint or infrastructure engineering.
• Expertise with Intune, Entra ID, Defender XDR, and CrowdStrike Falcon.
• Strong PowerShell automation, vulnerability management, and endpoint security.
• Experience supporting large enterprise environments (3,000+ endpoints).
• Knowledge of PKI, compliance frameworks, cloud tech, and security best practices.

Responsibilities

• Own enterprise patch management and vulnerability remediation programs across Windows, Linux, cloud, and mobile.
• Administer and optimize Intune, Entra ID, Defender XDR, CrowdStrike Falcon, and Windows Autopilot.
• Lead remediation efforts for critical vulnerabilities and improve security posture.
• Design and manage endpoint security, compliance policies, and identity governance.
• Develop PowerShell, Microsoft Graph, and Azure automation workflows to streamline remediation and lifecycle management.
• Build dashboards and analytics using KQL, Defender, Sentinel, and Azure Log Analytics.
• Partner with Security, Infrastructure, Risk, and Compliance teams for regulatory requirements.

Skills

PowerShell automation

Vulnerability management

Endpoint security

Intune

Entra ID

Defender XDR

CrowdStrike Falcon

Windows Autopilot

Azure automation

KQL

Tools

Microsoft Graph

Azure Log Analytics

Azure Automation

Patch My PC

PowerShell

Microsoft Intune

Job description

Tier4 Group in Atlanta, GA is seeking a senior cybersecurity patch and endpoint management engineer to lead enterprise patching, vulnerability remediation, and endpoint security across Windows, Linux, cloud, and mobile environments.

You will design automation workflows with PowerShell, Microsoft Graph, and Azure to streamline remediation, reporting, and device lifecycle, and build dashboards with Defender, Sentinel, Entra ID, and Log Analytics.