Description

Own the security remediation, systems support, and governance of lab infrastructure and endpoints across global sites.

This role is on-site.

Responsibilities

• Execute the Non-Attributable Account (NAA) remediation program, including building host allow/deny lists in Active Directory and coordinating password resets.
• Deploy and configure endpoint security tools (CrowdStrike) and privileged access management solutions (BeyondTrust) to replace legacy workflows.
• Define and enforce software allowlists, manage USB restriction policies, and remediate unauthorized or unlicensed software on lab workstations.
• Manage OS patching cadences, close vulnerability gaps, and identify end-of-life operating systems for isolation or replacement.
• Maintain system documentation, manage ServiceNow requests, and provide hands-on support for connectivity and authentication issues across Boston and global lab sites.

Required Skills

• 8+ years of experience in IT/OT systems engineering, endpoint security, or lab systems support.
• Advanced proficiency in Active Directory administration, including Organizational Unit (OU) management, Group Policy, and service account provisioning.
• Hands-on experience with Windows Server environments and systems support.
• Proficiency in PowerShell for automation and configuration management.
• Practical experience with ITSM/ITIL frameworks and ServiceNow request management.
• Proven track record of executing security remediation activities such as patching, endpoint agent deployment, and access control changes.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience).

Preferred Skills

• Experience supporting laboratory, manufacturing, or operational technology environments.
• Familiarity with CrowdStrike EDR and BeyondTrust or equivalent privileged access management tools.

Key Skills

Education

Bachelor's degree