Director AI Ready Endpoint Infrastructure Security

V2X • UNAVAILABLE, UNAVAILABLE

23h • Onsite

About The Position

The Director of AI-Ready Endpoint Infrastructure & Security is a senior technical leadership role responsible for the strategy, architecture, and operations of the enterprise endpoint ecosystem — built for both human users and AI agents as first-class workloads. Reporting to the VP of Intelligent Automation and IT Operations, this leader will build and operate a modern, automated, and security-hardened endpoint environment as a foundational pillar of the organization’s greenfield IT operational model. This role encompasses unified endpoint management (UEM), endpoint detection and response (EDR), device lifecycle automation, compliance enforcement, and the emerging mandate to provision endpoints as AI compute platforms capable of hosting on-device AI agents and local model inference. The Director will ensure all endpoints are continuously compliant, observable, and resilient — eliminating manual toil through automation, enabling the broader Zero Trust architecture strategy, and preparing the device fleet to serve the AI-First IT model where endpoints host both human users and intelligent agents as collaborators and stakeholders.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Systems Engineering, or related field or an equivalent combination of education and experience from which comparable knowledge and job skills can be obtained. (One year related experience may be substituted for one year of education, if degree is required)
• Ability to obtain and maintain CMMC Level 2 certification.
• A minimum of twelve (12) years of experience in IT operations, systems administration, or endpoint engineering.
• A minimum of five (5) years of experience in a senior or lead technical leadership capacity.
• Demonstrated hands-on experience architecting and operating enterprise UEM platforms (Microsoft Intune and/or Jamf required).
• Direct experience deploying and operating EDR platforms (CrowdStrike, Microsoft Defender for Endpoint, or SentinelOne) at enterprise scale.
• Strong background in automated patch management, vulnerability remediation workflows, and compliance reporting.
• Experience with endpoint automation tooling including Ansible, PowerShell DSC, and scripting (PowerShell, Python, or Bash).
• Ability to travel to project and customer locations as needed.
• U.S. Citizenship required; ability to obtain and maintain a security clearance.
• Deep expertise in UEM platforms, EDR tooling, and enterprise endpoint security architecture.
• Understanding of AI-ready device architecture requirements: on-device AI inference, NPU management, edge compute provisioning.
• Proficiency in endpoint automation and configuration-as-code methodologies.
• Strong understanding of Zero Trust device posture requirements and conditional access frameworks.
• Ability to extend EDR and posture management to monitor and govern AI agents running on endpoint devices.
• Excellent communication skills with the ability to present technical risk and strategy to executive audiences.
• Demonstrated ability to lead cross-functional teams and manage vendor relationships in complex environments

Nice To Haves

• Master’s degree
• Experience in the government contractor/services industry.
• Experience supporting FedRAMP or DoD IL environments.
• Familiarity with privileged access workstation (PAW) design and implementation.
• Experience managing AI agent deployments on endpoint devices, including resource governance and behavioral monitoring.
• Familiarity with on-device AI inference, edge AI compute requirements, or AI agent deployment on endpoints.
• Industry certifications: Microsoft Certified: Endpoint Administrator Associate (MD-102), Jamf Certified Expert, or equivalent.
• Active Secret security clearance

Responsibilities

• Architect and operate a unified endpoint management platform (Microsoft Intune, Jamf, or equivalent) spanning Windows, macOS, iOS, Android, and Linux device types.
• Define and enforce device configuration baselines, compliance policies, and conditional access rules aligned to CIS Benchmarks and organizational security standards.
• Lead the design and automation of the full device lifecycle — from zero-touch provisioning and onboarding through offboarding and secure decommission.
• Implement enrollment programs to enable touchless device deployment for remote and distributed workforces.
• Define and implement the architecture for AI-ready endpoints: provision devices as platforms capable of hosting on-device AI agents, local LLM inference, and edge AI processing workloads.
• Establish device hardware standards and lifecycle criteria that account for AI compute requirements, including NPU availability, memory, and storage for on-device model execution.
• Collaborate with the AI Platform & Fabric Engineer to define the endpoint requirements for running AI agents as first-class workloads — including agent identity, sandboxing, resource limits, and behavioral monitoring on the device.
• Build management and observability capabilities for AI agents running on endpoints: monitor agent resource consumption, enforce policy, and detect anomalous agent behavior.
• Ensure that agent-ready endpoint provisioning is integrated into the zero-touch device lifecycle — agents are deployed, updated, and decommissioned through the same automated pipeline as device operating systems and applications.
• Own the enterprise EDR platform ensuring full coverage, policy enforcement, and continuous monitoring across all managed endpoints.
• Collaborate with the CISO and security operations center (SOC) to ensure endpoint telemetry is integrated into SIEM and XDR platforms for correlated threat detection.
• Drive endpoint hardening initiatives including application control, script block logging, attack surface reduction (ASR) rules, and privileged access workstation (PAW) configurations.
• Extend EDR monitoring to detect and respond to anomalous AI agent behavior on endpoints — including unauthorized model access, unexpected data exfiltration, and agent privilege escalation.
• Lead response efforts for endpoint-originated security incidents, coordinating containment, investigation, and remediation activities.
• Design and operate an automated patch management program covering OS updates, third-party applications, firmware, BIOS/UEFI, and AI runtime environments across all endpoint types.
• Define SLA-driven patch cadences aligned to vulnerability severity classifications and compliance requirements.
• Integrate patch operations with vulnerability management platforms to create a closed-loop remediation workflow.
• Produce executive-level reporting on patch compliance posture, vulnerability age, and remediation velocity.
• Champion automation-first endpoint operations using Ansible, PowerShell DSC, and/or Terraform to manage configuration drift, enforce baselines, and deploy software at scale.
• Build and maintain a software distribution and packaging pipeline for controlled, tested, and auditable application delivery — including AI runtime components and agent packages.
• Develop automated runbooks for common endpoint operational tasks including re-imaging, software remediation, compliance remediation, and AI agent lifecycle management.
• Integrate endpoint management platforms via APIs with ITSM platforms to enable self-service and automated ticket-driven workflows.
• Ensure all managed endpoints — including those hosting AI agents — serve as verified, posture-checked entities within the broader Zero Trust architecture.
• Implement and maintain device compliance signals fed into conditional access policies across Microsoft Entra ID, Okta, or equivalent identity platforms.
• Define and enforce posture requirements for AI agent-hosting devices: agent identity verification, runtime integrity checks, and behavioral anomaly thresholds as conditions of network and application access.
• Enforce CMMC Level 2 and NIST 800-171 endpoint security controls, maintaining audit-ready evidence of compliance across the device fleet.
• Participate in audits, risk assessments, and continuous monitoring programs to validate and demonstrate endpoint compliance posture.
• Build, lead, and mentor a high-performing endpoint engineering and operations team, fostering a culture of automation, continuous improvement, and security-first thinking.
• Manage vendor relationships and contracts for endpoint tooling, licensing, and support agreements.
• Define and track KPIs for endpoint health, patch compliance, EDR coverage, AI agent fleet health, and operational efficiency.
• Translate endpoint risk and operational metrics into clear executive-level narratives and strategic roadmaps.

Benefits

• Healthcare coverage
• Retirement plan
• Life insurance, AD&D, and disability benefits
• Wellness programs
• Paid time off, including holidays
• Learning and Development resources
• Employee assistance resources

What This Job Offers

• Job Type: Full-time
• Career Level: Executive