Senior Security Engineer – Identity & Endpoint
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.
Responsibilities:
- Design, deploy, and operate identity, privileged access, vulnerability, endpoint, and device trust controls for Fortellar’s clients
- Support large-scale, multi-workstream security remediation engagements
- Design and enforce phishing-resistant MFA for administrators and MFA for the full user population using FIDO2 security keys, Windows Hello for Business, and passkeys
- Reduce privileged directory role membership and remediate domain-dominance exposure
- Redesign Conditional Access around user and administrator personas and apply role-based access control
- Implement Privileged Identity Management with just-in-time elevation and enforce sign-in frequency and non-persistent administrator sessions
- Evaluate, select, deploy, and operate privileged access management and identity governance capabilities
- Establish quarterly access recertification
- Remediate vulnerabilities with published exploit code or observed exploitation
- Author and publish vulnerability management procedures and workstation patch service levels
- Deploy Windows Autopatch and Microsoft Intune update rings
- Reconcile Active Directory, Intune, and Defender device populations into a single authoritative asset inventory
- Map application dependencies and retire legacy authentication protocols
- Enforce LDAP server signing and channel binding
- Deploy security baselines in staged waves and address end-of-support systems and software
- Manage local administrator credentials and certificate lifecycles
- Review exposure scores, remediation activity, and threat intelligence on a defined cadence
- Enforce BYOD controls, deploy Intune application protection policies, and execute mobile application and device management plans
- Harden SaaS applications, require compliant or hybrid-joined devices, enable remote wipe, and apply unmanaged-browser session controls
- Establish device attestation within joiner, mover, and leaver processes
- Design and operate pilot rings, staged rollouts, rollback procedures, and break-glass accounts
- Prepare and present change records, execute changes during maintenance windows, and halt or defer unsafe rollouts
- Communicate rollout decisions and schedule consequences to engagement leads and clients
Requirements:
- Bachelor’s degree in Computer Science, Information Security or a related field
- 8+ years in infrastructure or security engineering, including 5+ years in hybrid identity (Entra ID and on-premises AD)
- 4+ years deploying Microsoft Intune and Defender for Endpoint at enterprise scale
- Proven experience designing Conditional Access, phishing-resistant MFA and Privileged Identity Management for 1,000+ users
- 3+ years in a client-facing consulting role, presenting to technical and executive stakeholders
- Track record of leading high-risk changes through formal change management, using pilots, staged rollouts and rollback plans
- Preferred certifications: SC-300, MD-102, AZ-500, SC-100 or CISSP
- Must currently live and be authorized to work in the United States
- Applications must be submitted from within the U.S.
- Must be able to travel 10%–20% to client sites
Similar Jobs
Offensive Cybersecurity Engineer – RL Environments for AI Evaluation
Offensive cybersecurity engineers building and hardening reinforcement-learning environments. Evaluating frontier AI models for Terac, a platform connecting vetted experts with AI researchers and labs.
Senior System & Information Security Administrator
Senior administrator owning global servers, networks, security, backups, and end-user support. Coordinating external IT providers for a Bulgaria-based company.
Cybersecurity & Information Assurance Specialist – Federal Health IT
Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.
Information Security System Specialist – ATO Lead
ATO Lead preparing VA records application authority-to-operate packages under the Risk Management Framework. Supporting security controls, continuous monitoring, remediation, and Zero Trust governance remotely.
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Baseline Security Engineer, CIS, STIGs
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.
Senior Security Architect
Senior Security Architect advancing First Hawaiian Bank’s enterprise security architecture. Securing hybrid cloud, on-premises, and AI/ML technologies while supporting regulatory compliance.
Staff Security Engineer – Enterprise Security
Staff Security Engineer securing ServiceNow’s AI-powered enterprise SaaS platform across cloud, on-premises, and isolated infrastructure. Supporting Protected B workloads and Canadian government compliance.
Director of Security, Risk
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.