About the role
Job Purpose • Deploy, configure, and manage BitLocker across enterprise endpoints. • Monitor encryption compliance and ensure endpoint security standards are maintained. • Implement security baselines, hardening policies, and compliance controls for Windows devices. • Configure and manage Group Policies (GPO), device encryption keys, and recovery processes. • Troubleshoot BitLocker recovery issues, TPM-related issues, and endpoint security incidents. • Maintain documentation for encryption policies, endpoint configurations, and operational procedures. • Investigate and respond to endpoint security incidents, ensuring timely resolution and reporting. • Conduct periodic reviews of BitLocker policies, ensuring alignment with organizational security frameworks and regulatory standards. • Track and escalate error logs from non-compliant or failed encryption machines, coordinating with Microsoft support for resolution. • Manage endpoint protection platforms such as Microsoft Defender for Endpoint, CrowdStrike Falcon. • Integrate endpoint security controls with SIEM and SOC monitoring solutions. • Perform endpoint vulnerability assessments and remediation activities. • Collaborate with IT infrastructure, desktop support, and cybersecurity teams. Duties and Responsibilities A- Minimum required Accountabilities for this role • Engineering / Computer Graduate with 3-5 years of Information / Cyber Security Experience B- Additional Accountabilities pertaining to the role • Relevant Security Certifications like CEH, CISSP, CISM, ISO 27001 Lead Implementer, etc. preferred (Good to Have) Key Decisions / Dimensions • Strategic Decisions • Deciding encryption policies for different device categories (laptops, desktops, servers). • Define the problem clearly • Security Audits preparedness • Deciding compliance enforcement policies for non-compliant or unencrypted devices. Major Challenges • Managing BitLocker encryption compliance across thousands of enterprise devices. • Handling BitLocker recovery key management and recovery incidents securely. • Ensuring endpoint security without impacting user productivity or system performance. • Handling encryption deployment during OS upgrades and device refresh cycles. • Maintaining compliance with organizational and regulatory security standards. • Supporting audit requirements and maintaining accurate security documentation. Required Qualifications and Experience a) Qualifications • Engineering/Computer Graduates with relevant security experience of 3-5years b) Work Experience • Relevant security certifications such as EC-Council CEH, ISC2 CISSP, ISACA CISM, or Microsoft Security certifications are preferred. • Strong knowledge of Endpoint Security, Disk Encryption, Data Protection, and Windows Security Administration. • Hands-on experience in managing and supporting BitLocker across enterprise environments. • Experience in BitLocker deployment, configuration, recovery key management, TPM troubleshooting, and encryption compliance monitoring. • Hands-on experience with Microsoft Intune, Group Policy (GPO), Active Directory, and endpoint management tools. • Experience with endpoint protection and EDR solutions such as Microsoft Defender for Endpoint. c)