North Kansas City Hospital
Endpoint Security Engineer
North Kansas City Hospital, Kansas City, Missouri, United States, 64101
Overview
Summary:
The Endpoint Security Engineer holds a vital position within the IT security and operations team, tasked with the implementation, administration, and enhancement of endpoint security solutions, primarily leveraging Microsoft Intune. This role demands advanced technical proficiency in Microsoft Intune for Mobile Device Management (MDM) and Mobile Application Management (MAM), with experience in Jamf for Apple environments considered advantageous, and the ability to respond to security incidents outside of regular business hours. The incumbent is instrumental in ensuring robust protection, regulatory compliance, and an efficient user experience across a wide array of device platforms. Duties and Responsibilities
Endpoint Security Architecture & Strategy:
Design, deploy, and manage Microsoft Intune environment to support both corporate-owned and BYOD (Bring Your Own Device) scenarios. Administration and Operations Mobile Device & Application Management (Intune Focus)
Configure and optimize Microsoft Intune settings for MDM and MAM across Windows, Android, and iOS devices. Monitor, Incident Response & Threat Mitigation
Monitor endpoint threats, vulnerabilities, and anomalies using security analytics and reporting tools. Investigate and remediate security incidents related to endpoints. Collaborate with the SOC and IT support teams for escalation and rapid response. Compliance, Governance & Reporting
Ensure endpoint security solutions meet regulatory standards and internal governance policies. Generate regular reports on device compliance, application usage, and security events. Produce and maintain comprehensive documentation for security audits, configurations, procedures, and standards. Regularly audit device compliance and generate reports for stakeholders and regulatory bodies. User Training & Support
Develop training materials and conduct workshops for end-users and helpdesk staff regarding device enrollment and security practices. Provide Tier 2/3 support for endpoint-related issues. Collaborate with cross functional IT teams to implement robust endpoint security measures, including conditional access, device compliance, and threat detection. Continuous Improvement & Research
Stay updated on the latest security trends, technologies, and best practices in endpoint management. Recommend and implement improvements to existing security processes and tools. Qualifications
Specific Experience:
3-5 years of experience in Microsoft Intune and Office 365. Experience and Skills:
Strong proficiency in Microsoft Intune, Microsoft Endpoint Manager, and Azure Active Directory. Design & Deployment:
Proven experience in designing, implementing, and supporting Intune MDM/MAM solutions for enterprise environments. Security Concepts:
Strong understanding of endpoint security concepts, including antivirus, EDR, device encryption, and secure access controls. Compliance & Audits:
Experience with compliance frameworks (e.g., HIPAA, GDPR, SOC 2) and associated audit processes. Automation & Deployment:
Familiarity with automation tools (PowerShell, Bash), group policy management, and mobile application deployment. Communication & Collaboration:
Excellent analytical, organizational, and problem-solving skills; ability to manage multiple projects simultaneously. Knowledge of Group Policy Objects (GPO), Active Directory, and remote support tools. Strong interpersonal skills and the ability to work collaboratively in a team environment or independently with minimal supervision. Preferred Experience:
Hands-on expertise in Jamf administration for macOS and iOS device management, including policy configuration. Licenses & Certifications:
Required: Microsoft Certifications, Jamf Certificate. Helpful: ISSAP (Certified Information Systems Security Professional). Education:
Bachelor's degree in Computer Science, Information Security, or related field.
#J-18808-Ljbffr
Summary:
The Endpoint Security Engineer holds a vital position within the IT security and operations team, tasked with the implementation, administration, and enhancement of endpoint security solutions, primarily leveraging Microsoft Intune. This role demands advanced technical proficiency in Microsoft Intune for Mobile Device Management (MDM) and Mobile Application Management (MAM), with experience in Jamf for Apple environments considered advantageous, and the ability to respond to security incidents outside of regular business hours. The incumbent is instrumental in ensuring robust protection, regulatory compliance, and an efficient user experience across a wide array of device platforms. Duties and Responsibilities
Endpoint Security Architecture & Strategy:
Design, deploy, and manage Microsoft Intune environment to support both corporate-owned and BYOD (Bring Your Own Device) scenarios. Administration and Operations Mobile Device & Application Management (Intune Focus)
Configure and optimize Microsoft Intune settings for MDM and MAM across Windows, Android, and iOS devices. Monitor, Incident Response & Threat Mitigation
Monitor endpoint threats, vulnerabilities, and anomalies using security analytics and reporting tools. Investigate and remediate security incidents related to endpoints. Collaborate with the SOC and IT support teams for escalation and rapid response. Compliance, Governance & Reporting
Ensure endpoint security solutions meet regulatory standards and internal governance policies. Generate regular reports on device compliance, application usage, and security events. Produce and maintain comprehensive documentation for security audits, configurations, procedures, and standards. Regularly audit device compliance and generate reports for stakeholders and regulatory bodies. User Training & Support
Develop training materials and conduct workshops for end-users and helpdesk staff regarding device enrollment and security practices. Provide Tier 2/3 support for endpoint-related issues. Collaborate with cross functional IT teams to implement robust endpoint security measures, including conditional access, device compliance, and threat detection. Continuous Improvement & Research
Stay updated on the latest security trends, technologies, and best practices in endpoint management. Recommend and implement improvements to existing security processes and tools. Qualifications
Specific Experience:
3-5 years of experience in Microsoft Intune and Office 365. Experience and Skills:
Strong proficiency in Microsoft Intune, Microsoft Endpoint Manager, and Azure Active Directory. Design & Deployment:
Proven experience in designing, implementing, and supporting Intune MDM/MAM solutions for enterprise environments. Security Concepts:
Strong understanding of endpoint security concepts, including antivirus, EDR, device encryption, and secure access controls. Compliance & Audits:
Experience with compliance frameworks (e.g., HIPAA, GDPR, SOC 2) and associated audit processes. Automation & Deployment:
Familiarity with automation tools (PowerShell, Bash), group policy management, and mobile application deployment. Communication & Collaboration:
Excellent analytical, organizational, and problem-solving skills; ability to manage multiple projects simultaneously. Knowledge of Group Policy Objects (GPO), Active Directory, and remote support tools. Strong interpersonal skills and the ability to work collaboratively in a team environment or independently with minimal supervision. Preferred Experience:
Hands-on expertise in Jamf administration for macOS and iOS device management, including policy configuration. Licenses & Certifications:
Required: Microsoft Certifications, Jamf Certificate. Helpful: ISSAP (Certified Information Systems Security Professional). Education:
Bachelor's degree in Computer Science, Information Security, or related field.
#J-18808-Ljbffr