IT Security Specialist

IT Security SpecialistLocation: Pontiac, MI (2 days a week on site) Duration: ongoing long termJob Description:Systems Administrator – Security Responsible for administering, securing, maintaining, and optimizing enterprise infrastructure across on-premises, virtualized, hybrid, and cloud environments.Focuses on vulnerability management, remediation, patch compliance, and security across Windows, Linux, VMware, and cloud platforms.Experience with Tanium or similar tools is a plus.Core Skills:Security lead for the server/systems administration team, integrated with InfoSec team.Focus on maintaining security compliance mainly through Crowdstrike Falcon, EDR/SIEM, FileVantage, etc..Vulnerability threat detection, analysis, and monitoring. Remediation planning, testing, and deployment.Triage remediation procedures across multiple departments and managing the teams' efforts.Implementation and administration of patch management system for all servers.PCI DSS (up to current 4.0.1) compliance maintenance for servers, including quarterly scan remediation, evidence gathering, and tabletop simulations.Server builds and server hardening.PowerShell scripting automation modification and troubleshooting.Windows Server OS advanced troubleshooting. And various other system administration duties relating to Active Directory, VMWare/vSphere, Cloud/AWS, and Windows Server.Further manage software: Duo, Okta, Tripwire Enterprise and Log Center, BeyondTrustKey Responsibilities:Infrastructure Security: Administer Windows, Linux, VMware, and cloud infrastructure. Implement security baselines, access controls, and hardening standards.Vulnerability Management: Identify, prioritize, track, and remediate vulnerabilities across servers, virtual machines, and cloud resources. Validate fixes and coordinate remediation timelines.Patching: Coordinate OS and infrastructure patching, validate deployments, maintain compliance, and minimize disruption.Security & Compliance: Assess configurations against security standards, correct weaknesses, and support audits and compliance reporting.Cloud & Virtualization: Secure and maintain VMware, virtual machines, cloud services, configurations, and access controls across hybrid environments.Security Tools: Support asset discovery, endpoint management, vulnerability assessment, patching, and remediation using Tanium or similar platforms.Automation: Develop PowerShell, Bash, or Python scripts and workflows to automate patching, remediation, security validation, and reporting.Troubleshooting: Resolve infrastructure, configuration, patching, and security issues. Maintain incident and change records in the IT service management system.Documentation & Collaboration: Document configurations, security standards, patching, and remediation procedures. Work Schedule: County business hours required; flex time optional. Occasional after-hours work for maintenance, patching, and security remediation.Environment:Works in a hybrid enterprise environment spanning on-premises, virtualization, and cloud infrastructure, focusing on vulnerability management, security, hardening, and remediation.Required Experience:Infrastructure: Windows Server, Linux, troubleshooting, access management, storage, networking, identity, and endpoint systems.Security: Vulnerability scanning, remediation tracking, patching, risk prioritization, and configuration compliance.Virtualization/Cloud: VMware vSphere, virtual machines, and cloud platforms.Tools/Automation: Endpoint management, asset discovery, Tanium or similar tools, PowerShell, Bash, Python, Ansible, and Terraform.Operations: Incident/change management, documentation, reporting, and cross-team collaboration.