Endpoint Engineer

Lawrence Berkeley National Lab’s (LBNL ) Information Technology Division has an opening for an Endpoint Engineer to join the team.

 

In this role, you will provide seasoned/experienced computational expertise. The Engineer will use existing infrastructure to develop tools and methods to oversee endpoint access rights and security and apply security policies and tools to reduce the security risk to servers, virtual machines, and workstations for the Lab 4000+ users. The Engineer will also be responsible for the administration of Linux and Windows servers used internally by the team.

 

This position will utilize industry-standard monitoring and management tools, and implement best practices for consistent, repeatable processes, to provide secure, reliable, and efficient computing services. 

 

What You Will Do:

• Implement endpoint solutions for patching, policy enforcement, software distribution, and asset management for Windows, Mac, Linux and Chrome endpoints, using existing Crowdstrike, BigFix, Google, Active Directory, Splunk and JAMF infrastructures.
• Develop scripts and utilities to automate and monitor tasks using common scripting languages such as bash, PowerShell, python, or other common scripting languages.
• Develop scripts and utilities to collect, integrate, and report data from multiple systems.
• Produce clear, well-written documentation or knowledge base articles for applications, processes, procedures, and user training.
• Maintain accurate records of all customer and project work using the ticketing platform.
• Participate in team meetings for the planning and tracking of projects and activities and scheduled meetings with key stakeholders to communicate plans and acquire feedback.
• Evaluate and troubleshoot problems of diverse scope where analysis of data requires evaluation of identifiable factors.
• Identify and evaluate emerging threats, trends, and regulatory requirements, and recommend new products and strategies to manage them.
• Maintain test and production environments for supported applications and help develop long term endpoint management and workstation support strategies.
• Demonstrate good judgment in selecting methods and techniques for obtaining solutions.
• Network with senior internal and external personnel in their own area of expertise.

 

What is Required:

 

• Bachelor’s Degree or equivalent experience and a minimum of five years experience in a professional IT environment.
• Experience planning and executing small technical projects.
• Experience configuring and implementing Crowdstrike platform with an endpoint security and XDR posture.
• Experience developing automations or scripts using one or more of the common scripting languages or no-code automation tools, such as PowerShell, python, bash, etc.
• Experience developing and consuming services via web APIs.
• Experience deploying, configuring, and maintaining Windows, macOS, Linux and Chrome endpoints.
• Knowledge of networking concepts including routing, firewalls, and ACLs.
• Ability to solve problems of diverse scope where analysis of data requires evaluation of identifiable factors.
• Ability to conduct comparative analysis of multiple solutions.
• Ability to write clear and accurate documentation and quickly learn new tools, applications, programming languages, and OS environments.
• Excellent customer service skills, by email, by phone, and in person.
• Experience working with IT support ticketing systems (e.g. Service Now, Jira, Remedy).
• Ability to collaborate with a variety of stakeholders and cross-disciplinary teams, while prioritizing demanding workload.

 

Desired Qualifications:

• Experience developing fixlets for BigFix.
• Experiencing managing Windows domains using Active Directory.
• Familiarity with software packaging, distribution and license management.
• Experience with Antivirus software, such as Sophos.
• Experience with Modern Client Management (MCM) tools.
• Experience with cyber security compliance and enforcement.
• One or more technical certifications, such as CISSP, Linux Professional Institute (LPI), CompTIA A+, Microsoft MCSE, Dell or Apple technician, and Cisco CCNA, or equivalent education and experience.

 

For full consideration, please apply by February 13, 2023.

 

Notes:

• This is a full-time 1 year, term appointment with the possibility of extension or conversion to Career appointment based upon satisfactory job performance, continuing availability of funds and ongoing operational needs.
• This position will be hired at a level commensurate with the business needs and the skills, knowledge, and abilities of the successful candidate.
• The Endpoint Engineer position is expected to pay $116,868.00 - $142,860.00, which fits within the full salary range of $103,896.00 - $175,320.00 for the position. Salary for this position will commensurate with the final candidate’s qualification and experience, including skills, knowledge, relevant education, certifications, plus also aligned with the internal peer group.
• This position may be subject to a background check. Any convictions will be evaluated to determine if they directly relate to the responsibilities and requirements of the position. Having a conviction history will not automatically disqualify an applicant from being considered for employment.
• Work will be performed as full-time telework/remote work position. Work must be performed  within the United States on West Coast hours.

 

Based on University of California Policy - SARS-CoV-2 (COVID-19) Vaccination Program and U.S Federal Government requirements, Berkeley Lab requires that all members of our community obtain the COVID-19 vaccine as soon as they are eligible. As a condition of employment at Berkeley Lab, all Covered Individuals must Participate in the COVID-19 Vaccination Program by providing proof that vaccination requirements have been met or submitting a request for Exception or Deferral. Visit covid.lbl.gov for more information.

 

Berkeley Lab is committed to Inclusion, Diversity, Equity and Accountability (IDEA) and strives to continue building community with these shared values and commitments. Berkeley Lab is an Equal Opportunity and Affirmative Action Employer. We heartily welcome applications from women, minorities, veterans, and all who would contribute to the Lab's mission of leading scientific discovery, inclusion, and professionalism. In support of our diverse global community, all qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or protected veteran status.

Equal Opportunity and IDEA Information Links: Know your rights, click here for the supplement: Equal Employment Opportunity is the Law and the Pay Transparency Nondiscrimination Provision under 41 CFR 60-1.4.