Windows Security Systems Engineer

Job Title: Security Systems Engineer – Endpoint & Infrastructure Hardening
Location: 100% Onsite, 442 W. Washington Street, Suffolk, VA (ONSITE)
Duration: 3-6 months contract
Required Qualifications:
• Strong hands-on experience administering and securing Windows 11 and Windows Server environments.
• Advanced knowledge of Microsoft Active Directory and Group Policy (GPO).
• Experience implementing or assessing systems against CIS Benchmarks, particularly CIS Level 1.
• Experience with endpoint security configuration and operating system hardening.
• Experience remediating vulnerabilities and security configuration findings.
• Ability to troubleshoot conflicts between security controls, GPOs, applications, and operating system configurations.
• Experience testing and deploying configuration changes across enterprise environments.
• Strong understanding of security patching and vulnerability management practices.
• Ability to work within structured change-management processes and minimize production disruption.
• Strong documentation and communication skills.

Security Compliance & Remediation
• Prioritize remediation activities for systems supporting the Department of Social Services to meet applicable state security requirements.
• Assist the Security team with interpreting and remediating configuration findings identified through Tenable and other security assessment tools.
• Validate remediation effectiveness through rescanning, configuration review, or other appropriate methods.
• Help establish repeatable processes for identifying, prioritizing, testing, implementing, and validating security remediation activities.

Secure Configuration & Image Development
• Assist with development of a standardized, hardened Windows configuration that can be incorporated into the City's golden/standard machine image.
• Ensure new endpoints can be deployed with required security controls enabled by default.
• Document baseline security configurations and approved exceptions.
• Help transition the City from reactive remediation toward sustainable configuration and patch management practices.