Desktop Engineer

Join the Workplace Services Desktop Engineering Team and you'll work at the highest systems level to provide expert advice and counsel to users, management, and IT project teams for systems of the most complex nature (typically crossing function/location lines).

You will be responsible for managing the governance of vulnerability remediation on Windows and macOS workstations partnered with our operations team, Desktop Engineering IT controls, technical debt management, OS & O365 hardening, system accounts to name a few.

Evaluate new technologies and develop departmental standard practices. Recognized as technical expert within the department and demonstrate the ability to provide leadership and guidance to technical and non-technical associates. Identify or react to problems related to the end user technology infrastructure or in support of the software development process. Demonstrate a broad knowledge level across multiple areas of information technology.
- Design, build, and maintain vulnerability Power BI reports and dashboards through API connection with Qualys VDMR and Patch Management solution.
- Establish and drive metrics, analytics, reporting, and a roadmap for continual program improvement.
- Ability to understand, design, and continue the development of vulnerability mitigation strategy, prioritize identified vulnerabilities, and manage risk associated with vulnerabilities.
- Follows standard ITIL processes and procedures related to Incident, Change, Problem Management.
- Work with Security team to ensure system configurations, operating systems and Office 365 hardening are compliant with security policies and controls standards.
- Ability to deal with ambiguity and drive clarity and actions.
- Ability to summarize complex technical and business issues to the appropriate audience.
- Ability to work with a variety of development environments and platforms.
- Ability to participate in teams across organizations to solve business and technical issues.
- Ability to successfully multi-task and prioritize work.

Process management:

- Analyze, optimize and / or automate end-user related IT processes.
- Govern process implementation and adherence with IT Support teams.
- Support new and existing deployments through the analysis of metrics, logs, system alarms etc. to troubleshoot problems and perform preventative maintenance on the various products.
- Conducts highly complex systems automation/scripting and systems support activities, including system integration and monitoring.
- Create design documentation for new products and procedures.
- Maintain existing documentation of systems processes and procedures.
- Responsible for documenting issue summary, perform root cause analysis, and implement remediation actions.
- Thorough understanding of AD, AAD, including replication, GPO and DNS
- Understand and provide expertise for numerous core Microsoft systems & enterprise infrastructure technologies
- Effectively and independently take on and manage tasks / work inside multiple projects simultaneously.
- Work closely with L3 and L2 support groups to develop, plan, and implement system enhancements and upgrades and be available for L3 escalation requests.
- Will be the primary SME on selected windows infra-apps technologies and tools related to Desktop Engineering and responsible for mentoring other members of the team and do periodic knowledge share session often including our L2 and L3 support teams.
- Business fluent English is required.
- Must be comfortable to collaborate and excel in a true global and multicultural environment.
- 3 - 5 years of experience in vulnerability management or a related field
- Proven experience in vulnerability management strategies, standards, procedures and technologies across infrastructure
- Strong technical knowledge and experience required in areas of vulnerability assessment, risk-based analysis, and vulnerability mitigation. Experience with vulnerability scanning and reporting, including analysis of results to effectively prioritize remediation efforts.
- Experience working with automated and open-source vulnerability scanners such as Qualys, Nessus, WebInspect, or Nexpose.
- Experience developing metrics, and reporting for continual program improvement.
- Strong understanding of security concepts (SSL, PKI, IPsec, VPNs, Firewalls, DMZ, Proxy, and cyber-attacks) is required.
- Automation skills are a must, PowerShell, Python, and Bash are preferred.
- The ability to be able to document, diagram, and flowchart complex design is a plus.
- Basic understanding of network concepts (VLANs / Routing / TCP / IP / Load Balancing / Traffic Analysis, etc.) is required.
- Ability to effectively present information in both technical and non-technical terms.
- Strong communication; verbal, written and collaboration skills.

Education Qualification and Certification Requirements:

- Bachelor's Degree in computer science or equivalent area of study.
- Industry certifications in