Engineer

Design, implement, and tune engineering controls to detect and limit initial compromise and lateral movement. Integrate these activities into workstation imaging, device registration, and user registration processes to support secure baseline enforcement and accurate asset inventory management.Design, implement, and maintain standardized endpoint configurations to support the security, compliance, and integrity of user devices and associated assets throughout their lifecycle using approved endpoint management and deployment tools, including Ivanti, KACE, Microsoft Intune, and Windows Autopilot, as applicable. Own engineering design, validation, and lifecycle maintenance of imaging and patching processes to support consistent, secure workstation builds and timely vulnerability remediation. Assess and harden machine identity artifacts, engineer detection for persistence mechanisms, and develop remediation and recovery runbooks. Ensure secure, consistent device enrollment and accurate asset tracking across the environment. Support device provisioning, reassignment, decommissioning, secure wipe, recovery key escrow, and lifecycle visibility. Ensure endpoints produce telemetry required for detection, troubleshooting, and forensics, and that telemetry flows to central systems in a reliable and auditable manner. Follow the assessment-to-remediation workflow by performing technical assessments, producing Findings Reports, submitting Remediation Plans, obtaining required approvals, executing approved remediation during change windows, performing post-change validation, and publishing Validation Reports. Produce engineering documentation, operational playbooks, user-facing runbooks, knowledge-transfer materials, and versioned knowledge-base content to make solutions operationally sustainable by the Service Desk and IRM teams.