Endpoint Security Engineer

1 Opening
Irvine

Endpoint Security Engineer

Lead I - Cloud Infrastructure Services

Who We Are:

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of 29,000 practical problem solvers and creative thinkers in more than 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you’ll create a boundless impact that transforms your career—and the lives of people across the world.

Visit us at UST.com.

You Are:

UST is looking for an Endpoint Security Engineer (Lead I - Cloud Infrastructure Services) who will design and maintain Microsoft 365 and Windows Servicing standards. Create, design, and maintain deployment documentation for use by Endpoint Engineering, Service Desk, and Technical Services.

The opportunity:

• Support the deployment of next-generation technology.

• Coordinate deployment efforts with various IT teams to ensure solutions are fully tested and deployed company-wide.

• Design, build, test, and document all workstation and endpoint build standards.

• Participate in project teams as a resource representing Endpoint Engineering and IT Operations.

• Ensure OS, security, and application updates are consistently deployed on an ISO-compliant lifecycle.

• Leverage Microsoft Endpoint Manager, Intune, and other data sources to build executive reports to measure compliance.

• Develop processes and procedures related to PC lifecycle management, including new hardware validation, escalated break/fix support, and asset tracking.

• Serve as a subject-matter expert in Microsoft Endpoint Manager and Intune (Reporting, Packaging, Windows Servicing, and Security).

• Utilize expertise in software packaging and deployment to improve the software distribution end-user experience.

• Execute, document, and maintain desktop security standards in line with IT security policies through GPO, Intune policies, and other security tools.

• Define desktop and laptop hardware standards. Create and publish hardware lifecycle support and refresh timelines.

• Gather and analyze project requirements. Build delivery timelines and project plans with delegated tasks that can be executed by other engineers on the team.

• Use data and operational metrics to analyze project and task results. Create reports and charts to track progress and measure trends in the environment. Leverage data and reporting tools to make data-driven decisions about projects and tasks.

• Define enterprise printing standards. Manage the printer fleet using Vasion Print. Ensure that Print is up to date and clients are running a fully supported build.

• Manage the Endpoint Engineering server infrastructure (including Microsoft Endpoint Manager cloud and on-premises distribution points, Cloud Management Gateway).

• Serve as a Tier 3 escalation point for Service Desk and Technical Services teams. Facilitate conversations about improving Endpoint Engineering services used by support teams.

• Engage with other IT support teams including Technical Services, Information Security, Network Engineering, Platform Services, Application Support, and Service Desk to ensure a consistent approach for organizational support across the Enterprise.

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What you need:

• Demonstrates knowledge of, adherence to, monitoring, and responsibility for compliance with state and federal regulations and laws as they pertain to this position.

• Expert knowledge of Group Policy, Active Directory Replication, DNS, DHCP, and Organization Unit design best practices.

• Expertise with Microsoft Endpoint Manager and hybrid integration with Entra ID.

• Hands-on experience packaging and deploying Microsoft 365, OneDrive, and other technologies used to migrate traditional on-premises workloads to the cloud.

• Proficiency with Microsoft 365, including Visio for network and application documentation, and PowerPoint for creating presentations and project summaries.

• Experience with Windows 10/11 Servicing and management using Microsoft Endpoint Manager and Intune.

• Experience delivering endpoint protection, encryption, and cloud policies.

• Significant experience managing remote endpoints on and off the corporate LAN. Ability to troubleshoot complex LAN/WAN issues related to connectivity and physical location.

• Expertise creating Windows images, OSD Task Sequences, and managing configuration and deployment using tools such as Microsoft Endpoint Manager and Intune.

• Microsoft Autopilot, Windows Update for Business experience a plus.

• Deep understanding of the Windows registry, permissions, drivers, and software required to build baseline images.

• Experience creating deployment test plans, test cases, managing deployment groups, and soliciting feedback from pilot users. General understanding of software development, Agile, CI/CD.

• SQL report-writing expertise specific to Microsoft Endpoint Manager reporting a plus.

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: California

Compensation Range: $64,000-$95,000

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.

Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company’s 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.

Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

What we believe:

We proudly embrace the values that have shaped UST since day one. We build our culture of Humility, Humanity, and Integrity. These values inspire us to nurture a people-first, human centric culture that fosters belonging, prioritizes sustainable solutions, and keeps our people and clients at the forefront of all decisions.

Humility:

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity:

Through business, we will better the lives of those less fortunate than ourselves.

Integrity:

We honor our commitments and act with responsibility in all our relationships.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other applicable characteristics protected by law. We will consider qualified applicants with arrest or conviction records in accordance with state and local laws and “fair chance” ordinances.

SQL,Powershell,LAN/WAN