Senior Identity & Endpoint Security Engineer - Hybrid

Fortellar; United States; À distance; USD 120 000 - 180 000; Plein temps

Résumé du poste

Fortellar is seeking a Sr. Security Engineer, Identity & Endpoint to design, deploy, and operate identity, privileged access, vulnerability, endpoint, and device trust controls for client engagements.

The role focuses on large-scale remediation with hybrid identity estates, spanning Entra ID and on-prem AD, Intune, and Defender for Endpoint, and requires strong judgment to pilot or halt rollouts when necessary.

Qualifications

• Bachelor’s degree in Computer Science, Information Security or a related field.
• Preferred certifications: SC-300, MD-102, AZ-500, SC-100 or CISSP
• 8+ years in infrastructure or security engineering, including 5+ years in hybrid identity (Entra ID and on-premises AD)
• 4+ years deploying Microsoft Intune and Defender for Endpoint at enterprise scale
• Proven experience designing Conditional Access, phishing-resistant MFA and Privileged Identity Management for 1,000+ users
• 3+ years in a client-facing consulting role, presenting to technical and executive stakeholders
• Track record of leading high-risk changes through formal change management, using pilots, staged rollouts and rollback plans

Responsabilités

• Design and enforce phishing-resistant MFA for administrators and users.
• Reduce privileged directory role membership and clean up dormant accounts.
• Remediate domain-dominance exposure and migrate directory sync connectors.
• Redesign Conditional Access around user/admin personas and RBAC.
• Implement Privileged Identity Management with just-in-time elevation.
• Establish quarterly access recertification as a BAU process.
• Deploy and operate privilege and identity governance capabilities.

Connaissances

Hybrid identity design

Change management

Client-facing communication

Threat remediation

Formation

Bachelor's degree in Computer Science or related field

SC-300, MD-102, AZ-500, SC-100 or CISSP

Outils

Microsoft Entra ID

Active Directory

Microsoft Intune

Defender for Endpoint

Conditional Access

Privileged Identity Management

Description du poste

Fortellar is seeking a Sr. Security Engineer, Identity & Endpoint to design, deploy, and operate identity, privileged access, vulnerability, endpoint, and device trust controls for client engagements.

The role focuses on large-scale remediation with hybrid identity estates, spanning Entra ID and on-prem AD, Intune, and Defender for Endpoint, and requires strong judgment to pilot or halt rollouts when necessary.