Endpoint Migration Specialist at IDPP, Remote/Northampton, £500 per day

Endpoint Migration Specialist
Location: Remote/Northampton(as required)
Contract Type: Until the end of the year initially
Rate: £500.00 per day outside IR35

Overview:
A global retail client is seeking an experienced IT contractor to support the migration of its endpoint security solution from Sophos EDR to SentinelOne. The successful candidate will play a critical role in ensuring a seamless, secure transition across 10,500 endpoints, with zero security gaps.

Key Responsibilities/Deliverables:

Endpoint Migration Strategy:

• Develop and execute a detailed migration plan from Sophos EDR to SentinelOne.
• Validate compatibility with existing infrastructure including Active Directory, Group Policy, SCCM, and Intune.

Agent Deployment & Automation:

• Automate SentinelOne agent deployment using PowerShell and Microsoft Intune.
• Configure agent policies for Windows endpoints, including custom exclusions, data collection, web control, Firewall policy, DLP, and performance tuning.

Policy & Configuration Management:

• Design granular policy sets for different business units and apply role-based access control (RBAC) for the SentinelOne console.
• Implement network isolation, script control, device control, and threat protection policies.

Threat Detection & Incident Response:

• Configure heuristic and behavioral detection for advanced threat protection.
• Perform root cause analysis, rollback operations, and containment during security incidents.

Security Hardening:

• Apply zero-trust principles and endpoint hardening best practices.
• Validate SentinelOne deployment against CIS benchmarks and internal client security standards.

Troubleshooting & Post-Migration Support:

• Diagnose complex deployment issues, including network latency and agent conflicts.
• Provide knowledge transfer and technical documentation for the internal IT team.

Desirable Technical Experience:

• Proven experience migrating Sophos EDR or similar EDR/XDR platforms.
• Strong Scripting skills (PowerShell, PatchMyPC) for automation and API integration.
• Familiarity with Active Directory, Intune, and enterprise-scale deployments.
• Deep understanding of EDR/XDR architecture, threat hunting, and incident response workflows.