Platform Administrator, Endpoint Protection

About the Role

Deloitte Global is the engine of the Deloitte network, developing and leading global initiatives and delivering strategic programs and services to unite the organization.

Key Responsibilities

• Provide 4th level support for incidents and requests related to endpoint health, including on-call work when required.
• Monitor and handle tickets assigned to your support queues and be available to support any related major incidents.
• Develop a deep understanding of the endpoint protection products you will be managing.
• Create and maintain knowledge base documents and playbooks outlining end-to-end support procedures and inter-team workflows.
• Support change management activities for product upgrades within the production environment, collaborating with in-house teams and third parties to ensure successful implementation.
• Respond to escalations from Security Policy Management, GNOC, SOC, and Member Firms, assisting them with understanding endpoint protection products and support processes.
• Assist the technical lead/architect and security analyst in testing product upgrades and perform other job-related duties as assigned.

Requirements & Tech Stack

• Endpoint protection platforms (e.g., CrowdStrike, McAfee, Microsoft, admin rights management)
• Security tools (e.g., anti-virus, host intrusion detection)
• Service management framework (e.g., ITIL)
• Security Information and Event Management (SIEM) tools

Qualifications

• Strong multi-tasker with a keen eye for detail and the ability to think ahead.
• Experience with configuration and deployment of endpoint protection platforms.
• Excellent analytical and problem-solving abilities, strong influence, and negotiation skills.
• Strong written and verbal communication and customer service skills.
• Creative and independent thinker with the ability to translate technical requirements and challenges into results.
• Knowledge of configuration, policy, and event workflows and playbooks.
• Motivated self-starter able to work independently without direct supervision.
• Well-organized and able to thrive in fast-paced environments.
• Direct experience in supporting security tools.
• Experience working within a service management framework.
• Knowledge of Security Information and Event Management (SIEM) tools.
• Willingness to travel up to 10%.