IT Security Specialist

IT Security Specialist

Location

Pontiac, MI (2 days a week on site)

Duration

ongoing long term

IT Security Specialist

Job Description

• Systems Administrator – Security Responsible for administering, securing, maintaining, and optimizing enterprise infrastructure across on-premises, virtualized, hybrid, and cloud environments.
• Focuses on vulnerability management, remediation, patch compliance, and security across Windows, Linux, VMware, and cloud platforms.
• Experience with Tanium or similar tools is a plus.

Core Skills

• Security lead for the server/systems administration team, integrated with InfoSec team.
• Focus on maintaining security compliance mainly through Crowdstrike Falcon, EDR/SIEM, FileVantage , etc..
• Vulnerability threat detection , analysis, and monitoring. Remediation planning, testing, and deployment.
• Triage remediation procedures across multiple departments and managing the teams' efforts.
• Implementation and administration of patch management system for all servers.
• PCI DSS (up to current 4.0.1) compliance maintenance for servers , including quarterly scan remediation, evidence

gathering, and tabletop simulations.

• Server builds and server hardening.
• PowerShell scripting automation modification and troubleshooting .
• Windows Server OS advanced troubleshooting. And various other system administration duties relating to Active Directory, VMWare/vSphere, Cloud/AWS, and Windows Server .
• Further manage software: Duo, Okta, Tripwire Enterprise and Log Center, BeyondTrust

Key Responsibilities

• Infrastructure Security: Administer Windows, Linux, VMware, and cloud infrastructure. Implement security baselines, access controls, and hardening standards.
• Vulnerability Management: Identify, prioritize, track, and remediate vulnerabilities across servers, virtual machines, and cloud resources. Validate fixes and coordinate remediation timelines.
• Patching: Coordinate OS and infrastructure patching, validate deployments, maintain compliance, and minimize disruption.
• Security & Compliance: Assess configurations against security standards, correct weaknesses, and support audits and compliance reporting.
• Cloud & Virtualization: Secure and maintain VMware, virtual machines, cloud services, configurations, and access controls across hybrid environments.
• Security Tools: Support asset discovery, endpoint management, vulnerability assessment, patching, and remediation using Tanium or similar platforms.
• Automation: Develop PowerShell, Bash, or Python scripts and workflows to automate patching, remediation, security validation, and reporting.
• Troubleshooting: Resolve infrastructure, configuration, patching, and security issues. Maintain incident and change records in the IT service management system.
• Documentation & Collaboration: Document configurations, security standards, patching, and remediation procedures. Work Schedule: County business hours required; flex time optional. Occasional after-hours work for maintenance, patching, and security remediation.

Environment

Works in a hybrid enterprise environment spanning on-premises, virtualization, and cloud infrastructure, focusing on vulnerability management, security, hardening, and remediation.

Required Experience

• Infrastructure: Windows Server, Linux, troubleshooting, access management, storage, networking, identity, and endpoint systems.
• Security: Vulnerability scanning, remediation tracking, patching, risk prioritization, and configuration compliance.
• Virtualization/Cloud: VMware vSphere, virtual machines, and cloud platforms.
• Tools/Automation: Endpoint management, asset discovery, Tanium or similar tools, PowerShell, Bash, Python, Ansible, and Terraform.
• Operations: Incident/change management, documentation, reporting, and cross-team collaboration.