Associate Systems Engineer Lab Systems and OT Security

Associate Systems Engineer Lab Systems and OT Security Location: Boston, MA Experience: 5‑20 years Job Description The Associate Systems Engineer will support and secure lab systems and operational technology (OT) environments across multiple global sites. Responsibilities include non‑attributable account remediation, software governance, vulnerability management, USB and data transfer controls, and cross‑site operational support. Responsibilities Non‑Attributable Account (NAA) Remediation Design, test, and execute the NAA remediation program across RC4‑dependent and non‑RC4 account types. Build and maintain host allow/deny lists in the Lab OU within Active Directory. Coordinate with InfoSec and AD teams to implement password reset mechanisms and validate outcomes. Engage business system owners and lab staff to identify NAA usage patterns and transition to managed service accounts. Deploy and configure Transparent Screen Lock and BeyondTrust as replacement mechanisms for NAA workflows. Software Governance & Controls Define and implement a policy‑based software allowlist across lab workstations and instrument PCs. Identify unauthorized or unlicensed software on lab endpoints and plan remediation. Maintain a formal exception request process for legitimate scientific software deployment. Vulnerability Management Support CrowdStrike EDR sensor deployment and gap closure on lab endpoints. Remediate open or misconfigured file shares to mitigate lateral movement risks. Contribute to OS patching cadence and compliance tracking for lab workstations and instrument PCs. Plan end‑of‑life OS remediation and isolation strategies. Assist server‑level vulnerability triage and remediation with the infrastructure team. USB & Data Transfer Controls Assess current USB usage patterns across lab sites and instrument workflows. Define and implement a tiered USB restriction policy (block, monitor, allow‑by‑exception). Manage the formal USB exception process for vendor‑mediated access scenarios. Cross‑Site & Operational Support Serve as a hands‑on technical resource for site partners across Boston, Oxford, and other global lab locations. Maintain accurate documentation of system configurations, allow/deny lists, service account inventories, and workstream progress. Contribute to demand intake and ServiceNow‑based request management for new service account and access requests. Participate in hyper‑care periods following major changes, providing rapid response to connectivity or authentication issues. Communicate clearly with both technical and non‑technical stakeholders, including lab scientists, business system owners, and senior leadership. Qualifications Education : Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience). Experience : 2–5 years in IT/OT systems engineering, endpoint security, or lab systems support; or an equivalent combination of education and experience. Hands‑on Active Directory administration (OU management, GPO, service account provisioning). Experience in laboratory, manufacturing, or operational technology environments. Security remediation experience (patching, endpoint agent deployment, access control changes). Experience with endpoint security platforms (CrowdStrike or equivalent EDR). Familiarity with privileged access management or password vault tools (BeyondTrust or equivalent). Familiarity with Endpoint Management (EPM) tools for computer fleet management. Knowledge of identity & access management tools such as Sailpoint. Understanding of OT/lab network architecture, USB control policies, and vulnerability management concepts. Awareness of lab instrument authentication, Transparent Screen Lock technologies, and scientific data platforms (NuGenesis, Empower, etc.). Awareness of GxP and Information Security compliance constraints and ITIL ITSM principles. Proficiency in PowerShell and Microsoft Windows Server & Desktop administration. Experience with ServiceNow or equivalent ITSM platform. Salary Range $70,000 – $85,000 a year Benefits Discretionary Annual Incentive Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans Family Support: Maternal & Parental Leaves Insurance Options: Auto & Home Insurance, Identity Theft Protection Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement Time Off: Vacation, Time Off, Sick Leave & Holidays Legal & Financial Assistance: Legal Assistance, 401(k) Plan, Performance Bonus, College Fund, Student Loan Refinancing #J-18808-Ljbffr Tata Consultancy Services Limited