IT Security Specialist [Pontiac, MI] - ITSS 26-14101

Job Title: IT Security Specialist
Location: Pontiac, MI
Duration: 6 Months
Experience Level: 5+ Years
Work Arrangement: Hybrid – 2 days onsite per week

Job Overview

We are seeking an experienced IT Security Specialist / Systems Administrator – Security to administer, secure, maintain, and optimize enterprise IT infrastructure across on-premises, virtualized, hybrid, and cloud environments.

The ideal candidate will have strong experience in infrastructure security, vulnerability management, patch compliance, security remediation, and system hardening across Windows Server, Linux, VMware, and cloud platforms. This role will focus on identifying and mitigating security risks, maintaining infrastructure compliance, and implementing security best practices to protect enterprise systems and resources.

Experience with Tanium or similar endpoint management, asset discovery, vulnerability assessment, and remediation tools is highly desirable. The successful candidate will also leverage scripting and automation to improve security operations, streamline patch management, and enhance infrastructure reliability.

Key Responsibilities

1. Infrastructure Security and Administration

• Administer, secure, maintain, and optimize Windows Server, Linux, VMware, and cloud infrastructure.
• Implement security baselines, access controls, system hardening standards, and configuration management practices.
• Monitor infrastructure configurations to identify security weaknesses and ensure compliance with established security policies.
• Manage user access, system permissions, and infrastructure security settings.
• Support the security and reliability of enterprise infrastructure across on-premises and hybrid cloud environments.

2. Vulnerability Management and Remediation

• Identify, assess, prioritize, track, and remediate vulnerabilities across servers, virtual machines, endpoints, and cloud resources.
• Evaluate security risks based on severity, business impact, and remediation priorities.
• Coordinate remediation activities with infrastructure, application, and security teams.
• Validate remediation efforts to confirm vulnerabilities have been successfully resolved.
• Track remediation timelines and maintain accurate vulnerability management records.
• Generate reports on vulnerability status, remediation progress, and infrastructure security posture.

3. Patch Management and Compliance

• Plan, coordinate, and execute operating system and infrastructure patching activities.
• Validate patch deployments and ensure systems remain compliant with established patch management policies.
• Identify patching failures, investigate deployment issues, and implement corrective actions.
• Coordinate maintenance activities to minimize operational disruption.
• Maintain patch compliance reports and documentation.
• Support occasional after-hours maintenance, patching, and security remediation activities as required.

4. Security Compliance and Configuration Management

• Assess infrastructure configurations against established security baselines and industry standards.
• Identify configuration weaknesses and implement appropriate corrective measures.
• Support internal and external security audits, compliance assessments, and reporting activities.
• Maintain security documentation, configuration records, and remediation evidence.
• Implement and maintain access controls and hardening standards across infrastructure environments.
• Contribute to continuous improvement of infrastructure security processes and procedures.

5. Cloud and Virtualization Security

• Secure and maintain VMware vSphere environments, virtual machines, and supporting infrastructure.
• Manage security configurations and access controls across virtualized and cloud environments.
• Identify and address vulnerabilities affecting cloud resources and virtual infrastructure.
• Support infrastructure security across on-premises, hybrid, and cloud-based platforms.
• Ensure virtualization and cloud configurations align with established security requirements.

6. Security Tools and Endpoint Management

• Utilize Tanium or similar platforms to support asset discovery, endpoint management, vulnerability assessment, patching, and remediation.
• Monitor infrastructure assets and identify systems requiring security updates or corrective actions.
• Support endpoint security and infrastructure compliance initiatives.
• Optimize security tool configurations and workflows to improve visibility and remediation efficiency.
• Assist with security reporting and asset inventory maintenance.

7. Automation and Scripting

• Develop and maintain scripts using PowerShell, Bash, or Python to automate infrastructure security tasks.
• Automate patching workflows, vulnerability remediation, security validation, and reporting activities.
• Use automation and configuration management tools to improve operational efficiency and consistency.
• Support infrastructure automation using tools such as Ansible and Terraform.
• Identify opportunities to reduce manual effort and improve repeatability across security operations.

8. Troubleshooting and IT Operations

• Diagnose and resolve infrastructure, configuration, patching, access, and security-related issues.
• Investigate system vulnerabilities, failed updates, and configuration inconsistencies.
• Maintain incident and change management records within the IT service management system.
• Follow established change management procedures when implementing infrastructure or security modifications.
• Collaborate with IT operations, infrastructure, cybersecurity, and other technical teams to resolve issues.
• Provide timely updates on incidents, remediation activities, and operational status.

9. Documentation and Collaboration

• Develop and maintain technical documentation covering infrastructure configurations, security standards, patching procedures, and vulnerability remediation processes.
• Prepare compliance reports, operational reports, and security documentation as required.
• Work collaboratively with cross-functional teams to implement security improvements and resolve technical issues.
• Communicate risks, remediation requirements, and technical recommendations effectively.
• Contribute to the continuous improvement of infrastructure management and security operations.

Required Qualifications and Experience

• Minimum of 5 years of relevant IT infrastructure and security experience.
• Strong experience administering and securing Windows Server and Linux environments.
• Hands-on experience with vulnerability scanning, remediation tracking, risk prioritization, and security patch management.
• Experience implementing system hardening, security baselines, access controls, and configuration compliance.
• Knowledge of VMware vSphere, virtual machines, and virtualization security.
• Experience supporting cloud infrastructure and hybrid IT environments.
• Familiarity with endpoint management, asset discovery, vulnerability assessment, and remediation tools.
• Experience using Tanium or comparable infrastructure management and security platforms.
• Scripting experience with PowerShell, Bash, or Python.
• Understanding of networking, storage, identity management, endpoint systems, and infrastructure troubleshooting.
• Experience with incident management, change management, technical documentation, and security reporting.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to collaborate effectively with cross-functional technical teams.

Technical Skills

Infrastructure Administration

• Windows Server
• Linux
• Infrastructure troubleshooting
• Access and identity management
• Storage and networking fundamentals
• Endpoint systems administration

Security and Vulnerability Management

• Vulnerability scanning and assessment
• Vulnerability remediation and tracking
• Security patch management
• Risk prioritization
• Configuration compliance
• Security baselines and system hardening
• Access controls and security validation

Virtualization and Cloud

• VMware vSphere
• Virtual machine administration
• Cloud infrastructure security
• Hybrid infrastructure management

Security Tools and Automation

• Tanium or similar endpoint and infrastructure management tools
• Asset discovery and endpoint management
• PowerShell
• Bash
• Python
• Ansible
• Terraform

IT Operations

• Incident management
• Change management
• Security documentation
• Compliance reporting
• Cross-functional collaboration