Security System Engineer

ECLARO

Suffolk, VA
Today

Highlights

This individual should be capable of reviewing Tenable or compliance finding, determining the appropriate technical change, understanding how existing GPOs may affect that change, testing the remediation, deploying it safely, and validating that the configuration remains in place. This individual will work alongside the IT and Security teams to remediate identified security and configuration gaps, implement CIS-aligned security controls, and improve the overall security posture of the Client's endpoint and server environment.

Numbers & Facts

Location	Suffolk, VA
Industry	Staffing/Employment Agencies
Company Size	500 to 999 employees
Year Founded	1999
Website	http://www.eclaroit.com

Description

Security System Engineering
Job Number: 26-04538

Progress on your journey to success! ECLARO is currently recruiting for a Security System Engineering in the Suffolk, VA area for one of our clients.

ECLARO’s client is a leading provider of healthcare workforce software and solutions. If you’re up to the challenge, then take a chance at this rewarding opportunity!

Position Overview:

Seeking an experienced Security Systems Engineer to provide hands-on engineering support for an enterprise security hardening and compliance initiative.
This individual will work alongside the IT and Security teams to remediate identified security and configuration gaps, implement CIS-aligned security controls, and improve the overall security posture of the Client's endpoint and server environment.
The ideal consultant will have strong Windows systems engineering experience with a security focus, particularly in Windows hardening, Group Policy (GPO), CIS Benchmarks, vulnerability remediation, and enterprise endpoint management.
This is a hands-on engineering role focused on implementing security improvements while minimizing disruption to operations.
The ideal consultant is a Systems Engineer with a strong security mindset who is comfortable moving beyond vulnerability identification and into hands-on remediation.
This individual should be capable of reviewing Tenable or compliance finding, determining the appropriate technical change, understanding how existing GPOs may affect that change, testing the remediation, deploying it safely, and validating that the configuration remains in place.
The account needs someone who can effectively bridge the gap between security requirements and infrastructure implementation while working collaboratively with existing IT and Security personnel.

Responsibilities:

Windows Endpoint & Server Hardening:
- Perform security configuration hardening across approximately 1,800 Windows endpoints, primarily Windows 11.
- Perform security hardening across approximately 200 Windows servers.
- Implement configuration changes necessary to align systems with CIS Level 1 Benchmarks.
- Review findings from vulnerability and compliance tools such as Tenable and translate identified gaps into actionable remediation activities.
- Validate remediation activities and confirm that implemented controls remain effective after deployment and system reboot.
- Assist with remediation of legacy Windows 10 systems and applications that may require exceptions or alternative hardening approaches.
Group Policy Review & Engineering:
- Review existing Active Directory Group Policy Objects (GPOs) and their impact on endpoint and server security configurations.
- Identify GPO settings that may conflict with or overwrite newly implemented CIS security configurations.
- Recommend modifications or consolidation of GPOs where appropriate.
- Develop and / or modify GPOs to support standardized security configurations.
- Validate GPO behavior within test environments before broader production deployment.
- Troubleshoot policy inheritance, precedence, conflicting policies, and configuration drift.
Testing & Production Deployment:
- Work with the designated cross-departmental test group to validate security changes prior to production rollout.
- Develop a phased approach for implementing hardening changes across the environment.
- Identify potential operational impacts associated with proposed security configuration changes.
- Troubleshoot application or system issues resulting from security hardening.
- Coordinate production changes with IT and Security personnel to minimize user and service disruption.
- Document exceptions where security controls cannot be implemented due to legacy application or operational requirements.
Security Compliance & Remediation:
- Prioritize remediation activities for systems supporting the Department of Social Services to meet applicable state security requirements.
- Assist the Security team with interpreting and remediating configuration findings identified through Tenable and other security assessment tools.
- Validate remediation effectiveness through rescanning, configuration review, or other appropriate methods.
- Help establish repeatable processes for identifying, prioritizing, testing, implementing, and validating security remediation activities.
Secure Configuration & Image Development:
- Assist with development of a standardized, hardened Windows configuration that can be incorporated into the golden / standard machine image.
- Ensure new endpoints can be deployed with required security controls enabled by default.
- Document baseline security configurations and approved exceptions.
- Help transition from reactive remediation toward sustainable configuration and patch management practices.
Future / Secondary Initiatives:
- As the initial Windows and server hardening effort progresses, the engineer may also assist with additional security initiatives, including:
  - Browser security hardening and configuration.
  - Cisco network device configuration hardening.
  - CIS Benchmark implementation across additional infrastructure platforms.
  - Security configuration and compliance monitoring.
  - Cloud application security and governance.
  - Security controls related to public AI / LLM usage, including protection against sensitive data exposure and unauthorized AI services.

Required Qualifications:

Strong hands-on experience administering and securing Windows 11 and Windows Server environments.
Advanced knowledge of Microsoft Active Directory and Group Policy (GPO).
Experience implementing or assessing systems against CIS Benchmarks, particularly CIS Level 1.
Experience with endpoint security configuration and operating system hardening.
Experience remediating vulnerabilities and security configuration findings.
Ability to troubleshoot conflicts between security controls, GPOs, applications, and operating system configurations.
Experience testing and deploying configuration changes across enterprise environments.
Strong understanding of security patching and vulnerability management practices.
Ability to work within structured change-management processes and minimize production disruption.
Strong documentation and communication skills.

Preferred Experience:

Experience with Tenable vulnerability and compliance management solutions.
Experience with PowerShell scripting and automation.
Experience with Microsoft endpoint management technologies such as Microsoft Intune, Configuration Manager / SCCM, or similar platforms.
Familiarity with CIS-CAT or other security configuration assessment tools.
Experience hardening Cisco network infrastructure.
Familiarity with NIST, CIS Controls, or other security frameworks.
Experience working in municipal, state / local government, or other regulated environments.
Experience troubleshooting legacy applications impacted by modern security controls.

If hired, you will enjoy the following ECLARO Benefits:

401k Retirement Savings Plan administered by Merrill Lynch
Commuter Check Pretax Commuter Benefits
Eligibility to purchase Medical, Dental & Vision Insurance through ECLARO

If interested, you may contact:
Marjorie Palmario
Marjorie.Palmario@eclaro.com
551-325-0533
Marjorie Palmario | LinkedIn

Equal Opportunity Employer: ECLARO values diversity and does not discriminate based on Race, Color, Religion, Sex, Sexual Orientation, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status, in compliance with all applicable laws.

About Company

Eclaro is a Business and Technology Consulting Firm that connects top talent with opportunities nationwide. We have direct access to Hiring Managers from leading Fortune 1000 organizations in almost every industry segment, with particular expertise in:

• Technology and Business Consulting
• Financial Services and Insurance
• Pharmaceuticals and Life Sciences
• Consumer Products, Public Sector, and Utilities

Eclaro provides fully customizable, comprehensive talent acquisition and management of seasoned professionals through a number of business models, including:

• Consulting
• Professional Hiring
• Global Integrated Delivery™
• Managed Services

Eclaro recruits and manages a staff of highly skilled individuals in an array of specialized disciplines enabling our clients to leverage new opportunities, respond to increased and changing demands, and increase their profitability.

Eclaro’s Management Team averages over 25 years of experience in partnering with clients in technical, corporate operations and human capital solutions. We hold ISO 9001:2008 certification and have achieved SOC 2 Type 2 certification in Security, Availability and Confidentiality. Eclaro’s decades of expertise and collaborative practice have proven that The Right People are The Answer.

See ourPrivacy Noticefor information on pixel tracking.