Security Platform Engineer

Our client is looking for Security Platform Engineer to support work on their federal client, the Commodity Futures Trading Commissions (CFTC)’ infrastructure operations, maintenance, and support services. Responsibilities:

• Identify, mitigate, and patch workstations, applications and network vulnerabilities using approved systems and tools
• Create and maintain Windows 10 workstation images and application software packages;
• Provide reconciliation and support of MECM/SCCM deployments including troubleshooting errors/issues, patching, and updates (as needed).
• Endpoint Administration and Engineering
• Create, test, and deploy Windows patches using Windows Server Update Services (WSUS).
• Provide vulnerability management for the IT systems environment (desktop & laptop).
• Using environmental scan reports pro-actively identify the severity of the vulnerability as well as the items affected in accordance with the Vulnerability Management Policy.
• Document and complete the assessment, actionable items, remediation, and reconciliation items for each identified vulnerability in a project ticket within required time frames.
• Assess Nessus reports and address new vulnerabilities; identify IT security vulnerabilities for monitoring, remediation, and reporting
• Review Microsoft Security Tech Center, National Vulnerability Database (NVD), Common Vulnerabilities Exposures (CVE) and other applicable sources to provide Vulnerability Assessment Remediation Plans.
• Open related tasks or deployments and oversee the change requests, including owning the presentation for the internal Change Control Board.
• Communicate with systems owners regarding actions needed to remediate vulnerability.
• Package and manage workstation patching and deployments using MECM/SCCM
• Package COTS application/software and deploy using MECM/SCCM
• Test packages for completeness prior to deployment
• Provide Help Desk coverage; responds to and logs incoming inquiries, independently triages tickets to appropriate support groups.
• Troubleshoots more complex tickets and problems and serves as an escalation point for peers.
• Provide support for staff across multiple locations on a rotational basis as well as a large number of mobile users.
• Performs administrative functions for Windows Deployment Server (WDS), Windows Server Update Services (WSUS), Microsoft System Center Configuration Manager (SCCM), and other tools as defined.
• Performs Active Directory administration, group policy creation, and user provisioning/de-provisioning functions.
• Designs and configures endpoint technologies to support business needs.
• Recommends, designs, and implements new technologies added to technology portfolio.
• Pulled into architectural discussions to represent endpoint requirements for new or upgrade
• May be required to work off hours for planned and unplanned events related to infrastructure support.

• 5 years - Experience in information systems or cyber security
• 6+ years - Experience in hands-on computer support and troubleshooting for a variety of endpoint devices
• 6+ years - Customer service environment.
• Strong understanding of security concepts and tools (authorization, MFA, anti-malware, etc.)
• Proficient in TCP/IP protocols and SSL
• Demonstrates a strong technical background supporting Microsoft products and a variety of applications.
• Experience administrating application deployment, endpoint security and management tools
• Experienced in Active Directory administration, user provisioning/de-provisioning functions.
• Experienced in troubleshooting and maintaining MECM/SCCM
• Advanced Knowledge of MS Windows 10
• Maintaining desktop/laptop Windows 10 images and deployment using MECM/SCCM
• Advanced knowledge of Group Policy Management
• Understanding of registry keys and editing to remediate vulnerabilities
• Utilizing Wise Package Studio (or similar) and MECM/SCCM for UAT validation and deployment of upgrade /security updates /hotfixes to applications
• Associates degree or Bachelor’s in Information Technology, Computer Science, Cyber Security or related field or equivalent professional work experience

• Experience leading without directory authority, coaching/mentoring others.
• Microsoft Deployment Toolkit (MDT) 2008 / 2010
• Creating and deploying software packages in MECM/SCCM
• Proficiency in the use of Microsoft Office Suite
• CompTIA A+
• MCSE
• ITIL v3 Foundations