Endpoint Engineer III

Job Description

Everforth ECS is seeking an Endpoint Engineer III to work remotely
. At ECS Federal, we’re driven by a commitment to excellence and innovation in solving complex challenges. As a premier provider of advanced technology solutions and services, our mission is to secure and optimize the most critical commercial, government, defense, and intelligence projects across the country. Our team is composed of dynamic professionals who thrive in a collaborative and empowering environment, where our team members leverage the latest technologies and insights to make a real-world impact.

Join us and be part of a forward-thinking organization that values your expertise and supports your professional growth. The Endpoint Engineer III is responsible for supporting the engineering, implementation, administration, and optimization of enterprise endpoint security and data protection technologies. This role works closely with the Security Engineering Manager, security operations teams, enterprise IT teams, infrastructure teams, and platform owners to ensure endpoint security controls are effectively deployed, maintained, and integrated across client environments.

The Endpoint Engineer III serves as a senior technical resource for endpoint security along with supporting the Data Loss Prevention (DLP) program, providing advanced troubleshooting, platform administration, policy management, integration support, and technical guidance. The engineer will contribute to the continuous improvement of endpoint protection, data protection, security automation, and operational processes that strengthen the organization’s overall cybersecurity posture.

• Endpoint Security Platform Administration:
  Administer, maintain, configure, and optimize enterprise endpoint security technologies including EDR/EPP, endpoint security agents, device controls, host-based security controls, and related technologies.
• DLP Platform Administration:
  Configure, administer, maintain, and optimize enterprise Data Loss Prevention and data protection platforms across endpoint, cloud, email, web, and other supported channels.
• Endpoint Security Policy Management:
  Develop, implement, maintain, and tune endpoint and data protection security policies and configurations to provide appropriate protection while minimizing unnecessary operational impact.
• Data Protection Engineering:
  Support the implementation and operation of data classification, labeling, encryption, device control, and other technical controls designed to protect sensitive organizational information.
• Platform Deployment & Lifecycle Management:
  Support enterprise deployment, upgrades, migrations, configuration changes, agent/sensor health, and lifecycle management of endpoint security and DLP technologies.
• Platform Integration:
  Collaborate with enterprise IT, cloud, identity, network, infrastructure, and security teams to integrate endpoint security and data protection technologies with enterprise systems and services.
• Advanced Troubleshooting:
  Serve as a senior escalation point for complex endpoint security and DLP platform issues, including agent/sensor problems, policy conflicts, performance issues, integration failures, and unexpected control behavior.
• Security Investigation Support:
  Provide technical expertise during security investigations involving endpoint activity, potential data exposure, DLP policy violations, malware, suspicious activity, and other endpoint security events.
• Policy Tuning & Optimization:
  Analyze endpoint and DLP platform activity to identify false positives, policy gaps, configuration issues, and opportunities to improve security effectiveness and user experience.
• Security Automation Support:
  Develop and maintain scripts, integrations,…