Senior Cybersecurity Patch & Endpoint Management Engineer

Tier4 Group; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Tier4 Group in Atlanta, GA is seeking a senior cybersecurity patch and endpoint management engineer to lead enterprise patching, vulnerability remediation, and endpoint security across Windows, Linux, cloud, and mobile environments.

You will design automation workflows with PowerShell, Microsoft Graph, and Azure to streamline remediation, reporting, and device lifecycle, and build dashboards with Defender, Sentinel, Entra ID, and Log Analytics.

Qualifications

• 7+ years in cybersecurity, endpoint or infrastructure engineering.
• Expertise with Intune, Entra ID, Defender XDR, and CrowdStrike Falcon.
• Strong PowerShell automation, vulnerability management, and endpoint security.
• Experience supporting large enterprise environments (3,000+ endpoints).
• Knowledge of PKI, compliance frameworks, cloud tech, and security best practices.

Responsibilities

• Own enterprise patch management and vulnerability remediation programs across Windows, Linux, cloud, and mobile.
• Administer and optimize Intune, Entra ID, Defender XDR, CrowdStrike Falcon, and Windows Autopilot.
• Lead remediation efforts for critical vulnerabilities and improve security posture.
• Design and manage endpoint security, compliance policies, and identity governance.
• Develop PowerShell, Microsoft Graph, and Azure automation workflows to streamline remediation and lifecycle management.
• Build dashboards and analytics using KQL, Defender, Sentinel, and Azure Log Analytics.
• Partner with Security, Infrastructure, Risk, and Compliance teams for regulatory requirements.

Skills

PowerShell automation

Vulnerability management

Endpoint security

Intune

Entra ID

Defender XDR

CrowdStrike Falcon

Windows Autopilot

Azure automation

KQL

Tools

Microsoft Graph

Azure Log Analytics

Azure Automation

Patch My PC

PowerShell

Microsoft Intune

Job description

Senior Cybersecurity Patch & Endpoint Management Engineer

Seeking a senior-level cybersecurity and endpoint engineering professional to lead enterprise patch management, vulnerability remediation, endpoint security, identity management, and automation across a 3,000+ endpoint environment.

Key Responsibilities:

• Own enterprise patch management and vulnerability remediation programs across Windows, Linux, cloud, virtual, and mobile environments.


• Administer and optimize Microsoft Intune, Entra ID, Defender XDR, CrowdStrike Falcon, Windows Autopilot, Azure Update Manager, and Patch My PC.


• Lead remediation efforts for critical vulnerabilities and improve overall security posture.


• Design and manage endpoint security, compliance policies, Conditional Access, and identity governance solutions.


• Develop PowerShell, Microsoft Graph, and Azure automation workflows to streamline remediation, reporting, and device lifecycle management.


• Build dashboards and analytics using KQL, Defender, Sentinel, Entra ID, and Azure Log Analytics.


• Partner with Security, Infrastructure, Risk, and Compliance teams to support NIST, CIS, Zero Trust, and regulatory requirements.

Required Experience:

• 7+ years in cybersecurity, endpoint engineering, systems engineering, or infrastructure engineering.


• Expertise with Intune, Entra ID, Defender XDR, CrowdStrike Falcon, Windows Autopilot, and enterprise patch management.


• Strong PowerShell automation, vulnerability management, and endpoint security experience.


• Experience supporting large enterprise environments (3,000+ endpoints).


• Knowledge of PKI, compliance frameworks, cloud technologies, and security best practices.

Ideal Candidate:

A cybersecurity-focused engineering leader with deep expertise in endpoint management, patching, vulnerability remediation, identity security, automation, compliance, and Microsoft security technologies. The right person thrives on reducing risk, improving security posture, and automating enterprise operations.