Lead Vulnerability Remediation Engineer - Infrastructure Engineer

Habitat For Humanity Of Durham; Raleigh (NC); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401k plan

Vacation 10 days/year (prorated)

Job summary

The Lead Infrastructure Engineer at Truist’s Digital Workplace group focuses on governance, risk reduction, and lifecycle oversight of endpoint vulnerabilities across physical and virtual environments. You will collaborate with engineering, operations, and security teams to remediate exposures and deliver repeatable, scalable solutions aligned to Truist standards.

This office-centric role emphasizes automation, proactive prevention, and measurable outcomes. Truist will not sponsor visa status.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or related field.
• Minimum of 3 years of professional experience in infrastructure engineering.
• Understanding of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Responsibilities

• Builds and designs enterprise infrastructure technology platforms and systems across cloud, network, database, storage, platform, computing, and middleware domains.
• Applies automation, monitoring, and optimization techniques to ensure high availability and performance of infrastructure.
• Collaborates with cross-functional teams to integrate new technologies and improve infrastructure standards and processes.
• Troubleshoots and resolves moderately complex technical issues impacting infrastructure performance and reliability.
• Supports compliance with technology strategies, standards, and governance to mitigate risks and ensure regulatory adherence.
• Deploys infrastructure designs, configurations, and procedures to support operational consistency and knowledge sharing.

Skills

Infrastructure engineering

PowerShell automation

Automation & orchestration

Education

Bachelor’s degree in Computer Science, Engineering, Information Systems, or related field

Tools

Qualys

Microsoft Endpoint Configuration Manager (MECM)

PowerShell

Job description

Job Overview

The Lead Infrastructure Engineer within Truist’s Digital Workplace organization is accountable for enterprise governance, risk reduction, and lifecycle oversight of endpoint vulnerabilities and configuration compliance across physical and virtual (VDI) environments. This role partners across engineering, operations, and security stakeholders to identify, prioritize, remediate, and prevent endpoint security exposures while producing defensible, repeatable, and scalable solutions aligned to Truist standards.

This position supports a proactive operating model emphasizing automation, prevention, and measurable outcomes. It is office-centric five days a week in our Truist hubs. Truist will not sponsor visa status or offer immigration support.

Regular or Temporary: Regular

Language Fluency: English (Required)

Work Shift: 1st shift (United States of America)

General Essential Duties and Responsibilities

• Builds and designs enterprise infrastructure technology platforms and systems across various environments such as cloud, network, database, storage, platform, computing, and middleware domains.
• Applies automation, monitoring, and optimization techniques to ensure high availability and performance of infrastructure.
• Collaborates with cross-functional teams to integrate new technologies and continuously improve infrastructure standards and processes.
• Troubleshoots and resolves moderately complex technical issues impacting infrastructure performance and reliability.
• Supports compliance with technology strategies, standards, and governance to mitigate risks and ensure regulatory adherence.
• Deploys infrastructure designs, configurations, and procedures to support operational consistency and knowledge sharing.
• Proactively contributes to technical innovation efforts and advancement of infrastructure capabilities.
• Works with technical project teams to support infrastructure deliverables and solutions.
• Recommends enhancements in technical systems and processes to improve effectiveness of responsibility area.

Specific Job Functions

Endpoint Vulnerability Management (Enterprise Scale)

• Operate and mature the endpoint vulnerability lifecycle: discovery, prioritization, remediation, validation, reporting.
• Perform vulnerability identification and prioritization using Qualys and/or other security agents, including Microsoft Security Updates and major third‑party applications.
• Drive risk‑based remediation workflows aligned to business impact, exploitability, and fleet exposure.
• Validate remediation efficacy and ensure vulnerability closure is auditable and reproducible.

Secure Baseline Configuration (SBC) & Compliance (Windows 11 + VDI)

• Own Secure Baseline Configuration compliance outcomes for Windows 11 on physical devices and VDI.
• Detect and correct compliance drift; build governance routines to prevent recurring deviation.
• Translate policy intent into enforceable configuration standards and operational guardrails.

Problem Management (Root Cause + Corrective Actions)

• Lead or co‑lead root cause analysis for recurring endpoint issues and systemic remediation failures.
• Develop long‑term corrective actions, workarounds, and knowledge artifacts that reduce repeat incidents.
• Align problem practices to Digital Workplace Problem Management goals, templates, tooling, and metrics.

Configuration Management & Deployment Enablement (SCCM / MECM)

• Leverage Microsoft Endpoint Configuration Manager to support remediation delivery at scale.
• Troubleshoot deployment failures and endpoint state issues impacting remediation timelines.
• Partner with endpoint engineering and operations teams to harden delivery pipelines and reduce rework.

Automation & Engineering Enablement (PowerShell + Workflows)

• Create and maintain PowerShell automation to reduce manual effort, accelerate remediation, and improve consistency.
• Build automation patterns for detection, enforcement, validation, and reporting.
• Integrate automation into operational workflows to increase throughput and reduce friction.

Data, Reporting, and Decision Support (Databases)

• Use SQL and relational database concepts to support remediation tracking, compliance analytics, trend analysis, and operational reporting.
• Define data‑quality expectations and produce metrics that support governance and executive visibility.
• Translate raw findings into actionable insights for stakeholders.

Documentation, Communication, and Governance

• Produce clear, structured documentation suitable for audit and cross‑team reuse.
• Communicate tradeoffs, constraints, edge cases, and operational impacts with precision and transparency.
• Maintain a forward‑looking view of risk exposure, compliance drift, and control sustainability.

Qualifications

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or related field.
• Minimum of 3 years of professional experience in infrastructure engineering.
• Understanding of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Preferred Qualifications

• Bachelor’s degree and six years of experience or equivalent combination of education and work experience.
• Banking or financial services experience.
• Experience in VDI environments and their unique compliance/remediation constraints.
• Familiarity with endpoint configuration governance methods such as baselines, policy‑as‑code concepts, and drift monitoring.
• Experience integrating security remediation with service management tooling and workflows.
• ITIL or Problem Management background and comfort operating within structured ITSM practices.
• Security or endpoint‑focused certifications such as Security+, vendor tooling certifications, or equivalent experience.
• Security‑first mindset with strong attention to data integrity and reproducibility.
• Structured communication: crisp problem statements, explicit decision logic, and documented tradeoffs.
• Anticipates edge cases, failure modes, and operational constraints such as bandwidth, maintenance windows, and change risk.
• Designs solutions for scale and sustainability rather than one‑off fixes.
• Automation and prevention focused, aligned to the Digital Workplace direction.

Benefits

All regular teammates working 20 hours or more per week are eligible for benefits, including medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax‑preferred savings accounts, and a 401k plan. Teammates receive no less than 10 days of vacation (prorated) during the first year, 10 sick days (prorated), and paid holidays. Other benefits such as a defined benefit pension plan, restricted stock units, or deferred compensation may apply depending on division.

Equal Opportunity Employment

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.