BigFix Engineer, Associate

Lcg • Bethesda, MD

10d • $90,000 - $120,000 • Hybrid

About The Position

The Big Fix Engineer, Associate responsible for operational cybersecurity support in a federal IT environment, with a primary emphasis on enterprise endpoint patching and compliance using IBM BigFix. The specialist will manage and execute security patching, endpoint inventory validation, and compliance reporting across laptops and desktops, ensuring systems meet federal security and continuous monitoring requirements. This role performs technical security tasks independently or under supervision of System Engineers, the Lead Computer Security System Specialist, the Information Systems Security Officer (ISSO), and/or the Contracting Officer's Representative (COR). The position supports compliance with federal mandates including FISMA, and aligns to NIST, HHS, and NIH security policies and directives.

Requirements

• Bachelor's Degree (or equivalent) and 3 years of relevant experience in an IT operational security role.
• Demonstrated hands-on experience administering or operating IBM BigFix in an enterprise environment, including: Patch deployment and scheduling Agent troubleshooting Patch compliance reporting Baseline creation/maintenance (as applicable) Endpoint inventory validation and compliance assurance
• Must possess one (1) or more of the following: Enterasys Certified Expert (ECE) - Network Security Enterasys Certified Expert (ECE) - Security Information Management IBM Certified Associate - Rational AppScan Source Edition Security+ Certified Systems Engineer GIAC Security Essentials (GSEC) GIAC Certified Incident Handler (GCIH) EnCase Digital Forensics Certification (ISC)² Certified Information Systems Security Professional (CISSP) (ISC)² Systems Security Certified Practitioner (SSCP) GIAC Security Expert Security Certified Program (SCP) - Security Certified Network Architect SCP - Security Certified Network Professional

Nice To Haves

• Strong experience supporting endpoint security operations in a federal environment (FISMA/NIST 800-53).
• Experience with JAMF for macOS patching and management.
• Experience creating compliance dashboards and reports for patching, inventory verification, and vulnerability remediation.
• Familiarity with: NIH/HHS security compliance reporting expectations NSAT or similar security governance tools Vulnerability scanning tools and remediation workflows Incident response coordination with centralized IRT teams

Responsibilities

• Lead and execute monthly enterprise patch deployments using IBM BigFix for: Operating Systems Microsoft Office applications Microsoft security updates and supporting Microsoft products
• Maintain and validate BigFix endpoint coverage: Ensure BigFix agents are installed, properly configured, and consistently reporting Perform agent troubleshooting (connectivity, relay issues, policy failures, outdated agents, etc.)
• Support mandatory twice-yearly endpoint inventory verification, ensuring: All laptops/desktops are accounted for Security patches are up-to-date and verified BigFix compliance data supports audit and reporting requirements Reports are produced confirming endpoint validation and remediation actions
• Create and deliver BigFix compliance reports and metrics, including: Patch compliance baselines Deployment success/failure reporting Exception handling and remediation tracking Endpoint verification summaries for stakeholders
• Research, test, and recommend enhancements to: Patch deployment strategies Patch monitoring approaches Anti-virus and endpoint security enforcement
• Coordinate with security, desktop support, and system owners to remediate patch failures, non-compliance, and high severity vulnerabilities.
• Provide Security Desktop Support to ensure endpoint hardening, patch compliance, and continuous monitoring requirements are maintained.
• Assist in remediation of critical endpoint security events (high severity vulnerabilities, malware outbreaks, compliance failures).
• Provide assistance to the NIH Incident Response Team (IRT) and internal security teams in handling endpoint incidents and remediation activities, including containment and recovery support.
• Support security monitoring and enforcement of endpoint security baselines and authorized tools.
• Perform and analyze system/application vulnerability scans using enterprise/federal tools.
• Analyze results from vulnerability scans and external penetration tests; support remediation and validation.
• Track vulnerability remediation efforts and provide reports internally and to federal stakeholders.
• Support continuous monitoring activities and reporting as mandated by NIH.
• Manage anti-virus/malware detection, analysis, and remediation, including support for authorized AV consoles.
• Support log consolidation and analysis for endpoint and enterprise systems.
• Develop and enforce automated security processes supporting monitoring and compliance.
• Provide comprehensive security incident support including notification, response, remediation, forensic support, reporting, and coordination with external stakeholders.
• Support investigations requested by NIH/HHS or other government agencies.
• Under direction of the Federal Lead/ISSO, support documentation and compliance activities to ensure readiness for audits and re-authorization.
• Maintain security artifacts and support SA&A activities (SSPs, POA&Ms, implementation evidence).
• Maintain tracking matrices and support re-authorization workflows.
• Support annual/periodic contingency planning tests and tabletop exercises and provide feedback for improvement.
• Support NIST 800-53 annual assessment activities and assist system owners with documentation completeness.
• Support audit response activities and security-related data calls.

Benefits

• LCG offers a competitive, comprehensive benefits package which includes health insurance options (medical, dental, vision), life and disability insurance, retirement plan contributions, as well as paid leave, federal holidays, professional development, and lifestyle benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level