Senior Security Engineer – Identity & Endpoint

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $130k - $155k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Fortellar

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

Fortellar is a strategic technology and cybersecurity services firm that helps organizations launch, scale, and secure digital products and operations. It provides cybersecurity advisory and engineering, enterprise data security and privacy, cloud strategy and modernization, AI-enabled governance and automation, and product-led delivery including AI-powered rapid prototyping, site reliability, and product management services. Fortellar embeds security and AI into every engagement to drive measurable business outcomes for regulated enterprises and growth-stage companies.

📋 Description

• Design, deploy, and operate identity, privileged access, vulnerability, endpoint, and device trust controls for Fortellar’s clients • Support large-scale, multi-workstream security remediation engagements • Design and enforce phishing-resistant MFA for administrators and MFA for the full user population using FIDO2 security keys, Windows Hello for Business, and passkeys • Reduce privileged directory role membership and remediate domain-dominance exposure • Redesign Conditional Access around user and administrator personas and apply role-based access control • Implement Privileged Identity Management with just-in-time elevation and enforce sign-in frequency and non-persistent administrator sessions • Evaluate, select, deploy, and operate privileged access management and identity governance capabilities • Establish quarterly access recertification • Remediate vulnerabilities with published exploit code or observed exploitation • Author and publish vulnerability management procedures and workstation patch service levels • Deploy Windows Autopatch and Microsoft Intune update rings • Reconcile Active Directory, Intune, and Defender device populations into a single authoritative asset inventory • Map application dependencies and retire legacy authentication protocols • Enforce LDAP server signing and channel binding • Deploy security baselines in staged waves and address end-of-support systems and software • Manage local administrator credentials and certificate lifecycles • Review exposure scores, remediation activity, and threat intelligence on a defined cadence • Enforce BYOD controls, deploy Intune application protection policies, and execute mobile application and device management plans • Harden SaaS applications, require compliant or hybrid-joined devices, enable remote wipe, and apply unmanaged-browser session controls • Establish device attestation within joiner, mover, and leaver processes • Design and operate pilot rings, staged rollouts, rollback procedures, and break-glass accounts • Prepare and present change records, execute changes during maintenance windows, and halt or defer unsafe rollouts • Communicate rollout decisions and schedule consequences to engagement leads and clients

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Security or a related field • 8+ years in infrastructure or security engineering, including 5+ years in hybrid identity (Entra ID and on-premises AD) • 4+ years deploying Microsoft Intune and Defender for Endpoint at enterprise scale • Proven experience designing Conditional Access, phishing-resistant MFA and Privileged Identity Management for 1,000+ users • 3+ years in a client-facing consulting role, presenting to technical and executive stakeholders • Track record of leading high-risk changes through formal change management, using pilots, staged rollouts and rollback plans • Preferred certifications: SC-300, MD-102, AZ-500, SC-100 or CISSP • Must currently live and be authorized to work in the United States • Applications must be submitted from within the U.S. • Must be able to travel 10%–20% to client sites

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume