Senior Endpoint Security Engineer - Zero Trust & Automation

CriticalRiver Inc.; San Francisco (CA); On-site; USD 170,000 - 230,000; Full time

Job summary

CriticalRiver Inc. is seeking an experienced Endpoint Security Engineer to build, implement, and operate enterprise endpoint security capabilities across the organization.

The role focuses on strong expertise in endpoint security, vulnerability management, device posture enforcement, certificate management, and security automation. You will develop scalable security controls aligned with Zero Trust principles, ensuring compliance, audit readiness, and operational efficiency while collaborating

Qualifications

• 10+ years of experience in Endpoint Security, Security Engineering, or Enterprise Security Operations.
• Strong experience designing and operating vulnerability management and remediation programs.
• Solid understanding of Device Posture Management, Conditional Access, Certificate-Based Authentication, PKI, and Zero Trust security principles.
• Hands-on experience with enterprise endpoint, identity, or network security platforms.
• Experience developing automation solutions using scripting languages such as Python, PowerShell, or Bash.
• Proven ability to implement security controls balancing risk reduction and business requirements.
• Strong analytical, troubleshooting, and problem-solving skills.

Responsibilities

• Design, implement, and maintain enterprise endpoint security standards and controls.
• Establish and manage device posture assessment and conditional access enforcement policies.
• Implement and support endpoint security technologies such as WARP, SCEP, NAC, certificate management, EDR, and device compliance solutions.
• Develop and manage vulnerability identification, prioritization, remediation, and reporting processes.
• Integrate endpoint security controls and telemetry with identity, network security, and endpoint management platforms.
• Automate compliance validation, evidence collection, remediation workflows, and operational processes.
• Define and maintain exception management processes, approval workflows, security procedures, metrics, and audit documentation.
• Collaborate with cross-functional teams to translate business and security requirements into practical technical controls.
• Monitor security posture and continuously improve endpoint protection capabilities.

Skills

Endpoint Security

Security Engineering

Automation scripting

Python/PowerShell/Bash

Tools

Powershell

Python

Bash

PKI

EDR

NAC

Job description

CriticalRiver Inc. is seeking an experienced Endpoint Security Engineer to build, implement, and operate enterprise endpoint security capabilities across the organization.

The role focuses on strong expertise in endpoint security, vulnerability management, device posture enforcement, certificate management, and security automation. You will develop scalable security controls aligned with Zero Trust principles, ensuring compliance, audit readiness, and operational efficiency while collaborating