BigFix/Security Engineer Remote

Title: BigFix/Security Engineer

Duration: Fulltime

Responsibilities:

• Provide subject matter expertise to support Security Operations such as access management, patch management, network segmentation, logging and monitoring, configuration management, and malware prevention.
• Design, configure, implement, and deploy BigFix in an enterprise environment.

• Serve as BigFix Architect/SME, lead and support the deployment, integration, and configuration of BigFix Lifecycle, Compliance, and Inventory applications.
• Provide expert level patch management and automation support.
• Understand customer requirements and provide solution to automate the infrastructure/security operations.
• Customize BigFix deployments to meet customer requirements. Develop and manage BigFix custom reporting solutions.
• Perform Patch management tasks to include: maintaining current knowledge of available patches, deciding what patches are appropriate for particular systems, ensuring that patches are installed properly, testing systems after installation, documenting all associated procedures and patch compliance with BigFix.
• Participate in Security assessments, Security audits, and Access reviews.
• Assist in maturity & maintenance of Security/Compliance tools (Bigfix, Tripwire, ChangeGear, LogRhythm, etc).
• Communicate effectively at all levels of the organization, with internal or external customers, in written and oral format.
• Test new releases of products to ensure compatibility and minimize user impact.
• Develop, document, and automate technical processes and procedures as needed.

Requirements:

• Experience architecting/designing BigFix environment.
• 3 years of experience in configuring and administrating the BigFix infrastructure.
• Core IBM BigFix Suite skills including experience with Big Fix administration, OS Security Patching, FixLet/Baseline/Analysis/Task creation execution, Installation and Configuration of agents/Relays.
• Knowledge of BigFix DSA architecture.
• Good understanding of IT infrastructure security.
• Experience/knowledge of security and compliance functions: Access Management, Threat and Vulnerability Management, Security Monitoring, Patch Management, Password Management, Configuration Management and Logging.
• Experience developing automation scripts using shell scripting, Python or any other programming languages.
• Experience in identifying gaps and risks on systems and making recommendation on remediating solutions.
• Experience in generating and compiling vulnerability and threat reporting metrics.
• Experience in systems analysis and problem solving.
• Nice to have: Experience with any security and compliance tools such as Nessus, IP360, ChangeGear, LogRhythm, Splunk, and Tripwire.