Remote) (R4653)

Shield AI

9d•$110,000 - $168,000•Remote

About The Position

You will be the technical expert for endpoint security, responsible not just for tools, but for how endpoint security actually works day-to-day: how agents are deployed, how configurations are enforced, how access is controlled, and how drift is detected and remediated. You will design and run the systems that ensure our endpoints stay in a known-good, compliant state across different OSes, environments, and risk profiles. This includes heavy involvement in configuration management, automation, RBAC design, and policy enforcement, especially in environments where traditional MDM solutions fall short.

Requirements

Experience in security engineering, endpoint security, systems administration, or systems security.
Hands-on experience deploying and managing enterprise endpoint security tools.
Strong understanding of Windows, macOS, and Linux internals, hardening techniques, and security controls.
Significant experience with configuration management and enforcement, especially: Ansible or similar, Desired-state or drift-remediation models
Strong scripting and automation skills in Python and Bash (PowerShell experience is a plus).
Experience designing or supporting RBAC models for endpoint or server access.
Ability to work independently, take ownership of complex systems, and drive improvements end-to-end.

Nice To Haves

Bachelorâs degree or equivalent professional certification and experience.

Responsibilities

Own the deployment, configuration, and lifecycle management of endpoint security tooling (EDR/ETR/EPP, host-based controls, hardening frameworks).
Design and enforce security configuration baselines across Windows, macOS, and Linux systems.
Build and manage configuration enforcement mechanisms (Ansible-based or similar) to detect and remediate drift on endpoints, particularly Linux systems.
Develop automation to:
-Deploy endpoint agents and security tooling
-Apply role/group/system-type specific configurations
-Continuously re-apply or enforce desired-state configurations
Partner on RBAC design and implementation for endpoint and server access
Collaborate with IT, Infrastructure, and Security teams to integrate endpoint security with:
-Identity and access controls
-Server and workstation provisioning pipelines
-Incident response and detection workflows
Write and maintain code and infrastructure that supports endpoint security enforcement (Python, Bash, PowerShell, Ansible; Terraform as applicable).
Help define and document endpoint security standards, runbooks, and operational playbooks.
Serve as a a technical voice for endpoint security decisions, tradeoffs, and future roadmap planning.