Availability for occasional pilot-store and after-hours/weekend deployment work
Brief summary of the candidate's largest endpoint security migration, including:
Products migrated from/to
Approximate number of endpoints
What the candidate personally engineered and automated
Project Details
Environment: 20,000+ store endpoints
Role Overview
Client is migrating 20,000+ store endpoints from Trellix to SentinelOne across Windows POS terminals, in-store/back-office servers, and embedded/kiosk devices.
This is a hands-on engineering role, not an advisory/architect position. The engineer will build the automation, package deployments, test in the lab and pilot stores, execute deployment waves, troubleshoot failures, and support stabilization. Non-Negotiable Requirements
8+ years endpoint, security, or systems engineering
At least one enterprise-scale endpoint security agent migration
Deep hands-on Trellix ENS / McAfee + ePO
Policies and modules
Exclusions
Agent-to-ePO communication
Tamper protection
Uninstall and cleanup
Deep hands-on SentinelOne Singularity
Console administration
Sites/groups and policies
Agents and exclusions
Detection/mitigation modes
Quarantine and rollback
Upgrades
Advanced PowerShell scripting plus working Bash
Must personally be able to automate:
Detection → Trellix removal → cleanup → reboot → SentinelOne install/enrollment → validation → logging → remediation/rollback
Strong Windows 10/11, IoT/LTSC and Windows Server endpoint engineering
Enterprise deployment experience with SCCM/MECM, Intune and/or Ivanti
Experience with pilot, QA/UAT, production deployment, change management, and hypercare
Strongly Preferred
Distributed retail, restaurant, or branch endpoint environments