Jobs in the United States

25+ jobs

Save this search

Added 5 mins ago
Sr. Systems Engineer - AI Gateway Platform(Remote)
CrowdStrike
Jefferson City, MO
CrowdStrike is seeking an experienced Systems Engineer to own, scale, and secure our enterprise Kong AI Gateway platform as a core technical pillar of the AI Platform Enablement team. This…
Added 7 mins ago
Senior Geothermal Consultant Job Details | Black & Veatch Family of Companies
Black & Veatch
Kansas City, MO
…ever-evolving world. With over 100 years of innovation in sustainable infrastructure and our expertise in engineering, procurement, consulting and construction, together we are building a…
Added 7 mins ago
Civil Structural Engineer
GPAC
Downers Grove, IL
…design of commercial, industrial, institutional, and public infrastructure projects. You'll work alongside experienced professionals who are committed to mentorship, innovation, and…
Added 8 mins ago
Principal Infrastructure Engineer
Sanford Health
Remote, United States
…Advanced knowledge and experience with in enterprise compute systems, storage arrays, hyperconverged infrastructure, cloud platform as a service, and server virtualization. Proficiency in…
Added 9 mins ago
Senior System Software Engineer - Networking
NVIDIA Corporation
TX · CA · Austin, TX · Santa Clara, CA · Austin · Santa Clara
…complex compute, and AI workloads. As a Networking Software Engineer, you will play a crucial role in delivering high quality customer solutions for advanced networking use…
Added 9 mins ago
Senior Security Firmware Engineer, Data Center Systems
NVIDIA Corporation
Remote, United States
…for the world's most ambitious AI, robotics, and autonomous systems workloads. Today, we are the AI computing company. NVIDIA Data Center Systems, including DGX, HGX, and MGX platforms,…
Added 9 mins ago
Senior Software Engineer, Agentic Systems
NVIDIA Corporation
Remote, United States
We are looking for a Senior Software Engineer to help build NeMo Platform, NVIDIA’s product for developing, evaluating, deploying, and operating AI systems at scale. This role will focus on…
Added 9 mins ago
Security Solutions Architect II
Allied Universal
Wyoming, MI
…Whether you’re an installation technician, service technician, engineer, or project manager, you’ll discover rewarding opportunities to grow your career as part of a valued…
Added 9 mins ago
Data Engineer (Ref# DE115ARS)
Info Services, LLC
Livonia, MI
Info Services, LLC has an opening for the position of Data Engineer (Ref# DE115ARS). Work Location: Livonia, MI and relocation required to various unanticipated locations throughout the…
Added 9 mins ago
Network Engineer, Foundation & Support
Meta
Jefferson City, MO
Meta's Edge & Network Services (ENS) team is actively looking for a Network Engineer to help us tackle the unique set of challenges and opportunities we face, while contributing to our…
Added 9 mins ago
Lead Water System Engineer III / Engineering/Physicist Accelerator III
Michigan State University(MSU)
East Lansing, MI
Working/Functional Title Lead Water System Engineer III ### Position Summary Michigan State University (MSU) operates the Facility for Rare Isotope Beams (FRIB) as a user facility for the…
Added 9 mins ago
AI Engineer
Ford Motor Company
Dearborn, MI
Ford's Industrial Systems Data Platform (ISDP) unifies data from Product Development, Manufacturing, Quality, and Supply Chain applications into a single logical data model. We are building…
Added 9 mins ago
Cybersecurity, Privacy and Forensics - Palo Alto Networks XSIAM Engineer
PwC
Detroit, MI
As a SecOps Engineer specializing in Palo Alto Networks XSIAM or Google technologies, you will play a pivotal role in identifying and analyzing potential threats to an organization's…
Added 9 mins ago
GA
Sr Staff Applications Operations Engineer – Engineering Tools Automation & AI Ops
GE Aerospace
Grand Rapids, MI · Detroit, MI
- $131,000 to $174,000 USD / year
Minimum 5 years of professional experience in Application Operations or systems administration supporting enterprise or engineering applications
Added 9 mins ago
Lead Planning & Optimization Advisor/Engineer
Marathon Petroleum Corporation
Detroit, MI
The Value Chain Optimization (VCO) team has an opening for a Cross-Regional Planning & Optimization Advisor/Engineer. The Cross-Regional Planning & Optimization Advisor/Engineer plays a…
Added 9 mins ago
Data Engineer, Analytics (Technical Leadership)
Meta
Lansing, MI
Data Engineer, Analytics (Technical Leadership) Responsibilities:
Added 9 mins ago
AT
Machine Learning Senior Software Engineer
Akamai Technologies, Inc.
Lansing, MI
- $121,400 to $218,600 USD / year
As an ML Senior Software Engineer, you will build and operate systems responsible for model validation, quantization, and safety across the AIC. You'll develop pipelines that scan models…
Added 10 mins ago
Cloud Engineer
Maximus
Lansing, MI
Maximus is seeking a Cloud Engineer to support a defense client remotely.
Added 10 mins ago
Software Engineer, Machine Learning RecSys
Meta
Lansing, MI
Software Engineer, Machine Learning RecSys Responsibilities:
Added 10 mins ago
AT
Senior Software Engineer
Akamai Technologies, Inc.
Lansing, MI
- $121,400 to $218,600 USD / year
As a Software Engineer Senior, you will be responsible for:
Added 10 mins ago
AI Operations Administrator - Gravitee - Remote US
SitusAMC
Lansing, MI
…with those teams, and design and build of enterprise security infrastructure remains with Information Security Architecture and Engineering. The Administrator does not set or self-attest…
Added 10 mins ago
EG
Cloud Engineer
Eliassen Group
Lansing, MI
- $70 to $88 USD / hour
Our client seeks a senior Cloud Engineer to own and stabilize a legacy GCP and Azure footprint while assisting with conversions and decommissioning. The role will support automation efforts…
Added 10 mins ago
EG
Databricks Data Engineer
Eliassen Group
Lansing, MI
- $150,000 to $154,000 USD / year
Our client seeks a Databricks Data Engineer to design, build, and maintain scalable, reliable, and secure data pipelines, infrastructure, and systems that support consulting services and…
Added 29 mins ago
Network Engineer - Sr. Staff
Lockheed Martin
Colorado Springs, CO
The Network Communications Engineer will design, configure, secure, monitor, and troubleshoot complex, high-performance communication networks supporting mission-critical systems.
Added 29 mins ago
Staff Full Stack Engineer (Infrastructure) - FT telework - EADGE-T
Lockheed Martin
Colorado Springs, CO
EADGE-T is seeking a full stack engineer to join the project team with a focus as an Infrastructure Systems Engineer. In this role, you will:

Fortellar

REMOTE - Sr. Security Engineer - Identity & Endpoint

Remote, United States

$130,000 to $155,000 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $130,000 to $155,000 USD / year
Posting language: English
Posted: Nov 3, 2026

Original job description

About Fortellar We are a boutique IT consulting and business process outsourcing organization supporting mid to enterprise-level organizations. We are a small, but mighty, team of experts who know how to stretch, adapt, and put on any hat required in the moment to make our clients successful and enable Fortellar’s growth. Keys to success at Fortellar include:

Collaboration: You demonstrate excellence in remote collaboration across your Fortellar and client teams.
Growth Mindset: You embrace personal growth and are always learning new things to support your team, your clients, and your personal goals.
Client Success: You have a passion for your client’s success – you don’t just deliver to the contract you ensure that your client’s goals and needs are met.
Humanity First: Honest and transparency are your natural instincts – your actions speak louder than your words and your team members love working with you.
Entrepreneurial: You find a way to get it done, no matter what the challenges or seeming blockers are in front of you

Job Description Summary The Sr. Security Engineer, Identity & Endpoint designs, deploys, and operates identity, privileged access, vulnerability, endpoint, and device trust controls for Fortellar's clients, with primary assignment to large-scale, multi-workstream security remediation engagements. The role typically carries the largest and most dependency-critical share of such a program: the conditional access design this engineer produces is what gates device-compliance enforcement, and that sequence is commonly the longest critical path in the delivery plan. Engagements involve hybrid identity estates spanning Microsoft Entra ID and on-premises Active Directory joined by directory synchronization, managed workstation and Windows Server estates, Microsoft Intune, and Microsoft Defender for Endpoint.

This is a hands-on engineering role with direct client exposure. The engineer is accountable for changes capable of denying access to the client's entire workforce, and is expected to exercise the judgment to pilot, stage, and where necessary halt a rollout, and to explain that decision to client stakeholders directly. The role requires deep Microsoft identity and endpoint expertise, disciplined change management, strong verbal and written communication, and the professional presence to represent Fortellar credibly in front of client technical staff and executives, both in person and virtually.

Must be able to travel 10% - 20% to client sites

Identity and Privileged Access Engineering

Design and enforce phishing-resistant multifactor authentication for administrators and multifactor authentication for the full user population, using modern authentication methods (e.g., FIDO2 security keys, Windows Hello for Business, passkeys).
Reduce privileged directory role membership to a justified minimum, remove dormant and stale accounts from sensitive groups, and produce the privileged-overlap map between Microsoft Entra ID and on-premises Active Directory.
Remediate domain-dominance exposure, including krbtgt account rotation, removal of delegation from privileged accounts, and migration of the directory synchronization connector onto a dedicated least-privilege identity.
Redesign Conditional Access around defined user and administrator personas and apply role-based access control, recognizing that this design is a prerequisite for device trust enforcement elsewhere in the program.
Implement Privileged Identity Management with just-in-time elevation, and enforce sign-in frequency and non-persistent administrator sessions.
Evaluate, select, deploy, and operate privileged access management and identity governance capability, and establish quarterly access recertification as a sustainable business-as-usual process.

Vulnerability, Endpoint, and Asset Management

Remediate, as emergency change, the recommendations carrying published exploit code and observed exploitation in the wild, working within the client's emergency change authority.
Author and publish a vulnerability management procedure and a workstation patch service level matching the standard already operating for servers.
Deploy Windows Autopatch and Microsoft Intune update rings, and reconcile the Active Directory, Intune, and Defender device populations into a single authoritative asset inventory.
Complete application dependency mapping, then retire legacy authentication protocols and enforce LDAP server signing and channel binding, sequencing the work so that dependency discovery precedes enforcement.
Deploy security baselines in staged waves across the managed endpoint estate and remove or formally risk-accept end-of-support systems and software.
Close local administrator credential management gaps across the estate and operate certificate lifecycle management with expiry alerting and unauthorized-software detection.
Review exposure score, remediation activity, and threat intelligence on a defined cadence, prioritizing by exploit availability and observed threat activity rather than by severity score alone.

Device Trust and Mobile Device Management

Enforce the client's ratified bring-your-own-device position, including restriction of corporate content synchronization to managed devices.
Deploy Microsoft Intune application protection policies across the Microsoft 365 mobile applications and execute the mobile application and device management plan across a previously unmanaged mobile estate.
Harden connected software-as-a-service applications, including multifactor authentication enforcement and session timeout configuration.
Require a compliant or hybrid-joined device through Conditional Access, enable remote wipe for devices holding organizational data, and apply session controls for unmanaged browsers.
Establish the device attestation cycle within joiner, mover, and leaver processes, and report on unmanaged access attempts on a defined cadence.

Change Management and Operational Safety

Design and operate pilot rings and staged rollouts for every change capable of denying user or administrator access, with documented rollback and tested break-glass accounts.
Prepare, submit, and present change records to the client's change process, including risk, blast radius, validation steps, and backout plan.
Execute change during scheduled maintenance windows, including evenings and weekends where the change cannot safely be made during business hours.
Halt or defer a rollout where validation is incomplete and communicate that decision and its schedule consequence to the engagement lead and the client without delay.

Experience and Education

Bachelor’s degree in Computer Science, Information Security or a related field
Preferred certifications: SC-300, MD-102, AZ-500, SC-100 or CISSP
8+ years in infrastructure or security engineering, including 5+ years in hybrid identity (Entra ID and on-premises AD)
4+ years deploying Microsoft Intune and Defender for Endpoint at enterprise scale
Proven experience designing Conditional Access, phishing-resistant MFA and Privileged Identity Management for 1,000+ users
3+ years in a client-facing consulting role, presenting to technical and executive stakeholders
Track record of leading high-risk changes through formal change management, using pilots, staged rollouts and rollback plans

This role is open only to candidates who currently live and are authorized to work in the United States. Applications must be submitted from within the U.S. Applications submitted from a location that does not match the candidate’s stated location will not be considered.

Apply About employer

More about this job

Skills

Regulatory compliance
Microsoft Active Directory
Microsoft Windows Server
Change management
Communication skills
Wheel impact load detector
Microsoft Windows
LDAP
Prioritization
Mobile device management
Microsoft 365
Service-oriented modelling
Computer science
Cybersecurity
CISSP
Microsoft Access

Report this job