Operating Systems Security Engineer

Responsible for the design, implementation, management, and support of the firm’s enterprise endpoint and server operating systems and associated security infrastructure.  This engineering position will focus on information security related technologies related to our core operating systems.  In addition to a focus on information security, this role will also ensure the performance, immutability, and high-availability of those technologies and resulting services. 

Serves as a key member of the Computer Security Incident Response Team. Assists in the development and maintenance of processes and procedures around investigating and remediating security incidents involving malware, ransomware and/or data loss.

Assists with the implementation of new or additional endpoint, server and associated security environments to improve infrastructure service, both locally and remotely. Assists with resource and workload management and capacity planning. Effectively manages product life-cycles, providing input for budget preparation.  Monitors and controls processes, and implements systems solutions to provide stable, secure, and optimally performing platforms.
 

About this role:

Provides full requirements in-take, design, planning, configuration, documentation, deployment and top-level support ownership of the following infrastructure technologies:

• Accountable and responsible for Endpoint and Server Security products and projects.  This includes OS and software applications needed to provide a secure and stable desktop and server environment.
• Development of endpoint and server OS and images including OS hardening and configuration control practices.   Use of Citrix technology in conjunction with endpoint and server Operating Systems, and laptop build design.
• Provide support and backup on other desktop technologies as time permits, including Microsoft System Center Configuration Manager, Active Directory, Windows Server Update Services (WSUS) for deployment of patches to workstation.
• Working with the Infrastructure Services Manager develops documented firm standards for endpoint and server security. Ensures that adherence to those standards is monitored and followed by all members of the Systems Infrastructure group.
• Engineers new endpoint and server security build solutions for new hardware releases and to support developing business needs.
• Assists in efforts to optimize infrastructure performance to the end-user.
• Tests and coordinates deployment of Microsoft Security patches for workstations and servers.
• Assists in maintaining a testing environment for development.
• Maintains awareness of technology developments and makes recommendations to Infrastructure Management.
• Develops roadmaps for the adoption of cutting edge endpoint and server security technologies and practices.
• Participates in negotiations of software licensing and support agreements.
• Participates in cross-functional team projects to implement new or updated technology.
• Assists with resolution of escalated incidents and participates in problem management activities.
• Cross-trains other IT staff in the use or maintenance of technology.
• Assumes additional responsibilities as assigned.

Required Skills
What You Will Bring/Your Qualifications:

• Mastery-level knowledge of multiple technology areas, as listed above.
• Knowledge of key endpoint and server operating systems and associated security technologies in use at the firm including Windows 11, Windows Server 2016 and above, Trellix,  SCCM, SentinelOne, Absolute, Windows Security, Microsoft Defender, Third Party Log Management systems (including Splunk and Microsoft Sentinel), associated security services and systems. 
• Strong technical skills and ability to learn new technologies.
• Excellent analytical skills, including the ability to perform advanced research that involves interpretation and analysis from a variety of sources, including sources and/or data that needs to be developed.
• Demonstrated ability to write and edit technical documentation.
• Excellent oral and written communication skills and interpersonal skills as necessary to communicate and coordinate with others on both routine and non-routine matters.
• Ability to effectively lead and develop others in their work and to resolve problems independently in accordance with defined policies and procedures.
• Demonstrated ability to make significant decisions and recommendations on complex issues to achieve long-term results and strategic objectives.
• Experience working in high-pressure professional services organization or other similar organization requiring attention to detail and sensitivity to confidential and proprietary information.

 
Required Experience

Education:

§  BA/BS or equivalent work experience.
Experience:
§  4-8+ years of experience in endpoint and server operating systems, and enterprise systems integration with significant specialization in associated security systems and related areas of technology such as Microsoft operating system and Active Directory.