NOC Engineer

The ProActive Technology Group; United States; On-site; USD 70,000 - 110,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Life insurance

Paid time off

Parental leave

Professional development assistance

Referral program

Vision insurance

Job summary

The ProActive Technology Group is seeking a NOC Engineer to own backup health, remediation of RMM alerts and patch management for our managed client fleet. You will fix backup issues, run restore tests, and ensure patching and vulnerability remediation are completed in a timely manner.

You will work via NinjaOne/ScreenConnect and collaborate with the team to maintain security controls, generate audit-ready evidence, and deliver regular reports to clients.

Qualifications

• The role requires 3+ years in an MSP or IT ops environment.
• Hands-on Veeam B&R including jobs, repositories, backup copies and SureBackup.
• Day-to-day RMM alert remediation focusing on AV/EDR health and disk space.
• Windows patch troubleshooting: updates, servicing stack, DISM/SFC logs.
• Vulnerability remediation from scanners with verification.
• Experience with Hyper‑V/VMware, storage and basic networking.

Responsibilities

• Own backups: triage failed/missed/warning jobs daily across Veeam.
• Remediate RMM alerts and fix root causes to stop re-alerts.
• Patch remediation and manual updates when needed.
• Handle Halo tickets from alert to close with clear notes.
• Produce daily, weekly, monthly reports for clients.

Skills

MSP IT ops experience

Veeam B&R

RMM alert remediation

Windows patching

Vulnerability remediation

Hyper-V/VMware

Storage and Networking basics

PowerShell scripting

Clear client reporting

Tools

NinjaOne

ScreenConnect

Veeam B&R

Hudu

Halo

Job description

NOC Engineer – Backup, Alerts & Patch Remediation

About the role

This role owns the health of our managed client fleet: backups that run and can be restored, RMM alerts that get fixed rather than ignored, and patches and vulnerabilities that get closed. You'll work a remediation backlog down and keep it down.

Schedule

Business hours ET, an early-morning overnight-jobs check, and an after-hours escalation rotation.

What you'll do

Backups

• Triage failed, missed and warning backup jobs daily across Veeam servers, agents and cloud copies.
• Remote in through NinjaOne/ScreenConnect to fix storage, repository, network, licensing and upgrade issues.
• Run scheduled and on-request restore tests (SureBackup, file/VM) and write audit-ready evidence.
• Enforce the PTG backup standard: 3-2-1 with a cloud copy, minimum retention, encryption, and no synthetic fulls that overrun storage.
• Run the half-yearly backup audit and present the findings.
• Maintain VSPC: onboarding and offboarding, report recipients, and keeping the managed list matched to billing.

RMM alert remediation (NinjaOne)

• Work the open NinjaOne condition-alert queue to zero, fixing the root cause so the same device stops re-alerting.
• Antivirus/EDR health: AV missing, disabled or not updating, and unsupported AV installed.
• Low disk space on workstations and servers: cleanup, profile and temp clearing, and escalating hardware upgrades.
• Server and virtualization alerts: VMware/Hyper‑V datastore free space, stale VM checkpoints, hardware sensors, high memory, and critical services down (e.g. ADSync).
• Device-offline alerts: confirm real outages and separate them from platform false positives.
• Tune alert conditions and thresholds so alerts are actionable, not noise.

Patching and vulnerabilities

• Remediate failed patches in NinjaOne: Windows cumulative/security updates and third‑party applications, including stuck or half‑finished patch runs and pending reboots.
• Install out-of-band updates manually when policy can't approve them.
• Remediate vulnerability-scanner findings: patch, upgrade, reconfigure or remove the affected software, then verify the finding clears.
• Report patch compliance and the open vulnerability backlog weekly.

General

• Own Halo tickets from alert to close, with clear notes.
• Produce the daily, weekly and monthly reports.
• Work CMMC client systems under their access controls.
• Keep credentials and runbooks current in Hudu.

What you'll bring

• 3+ years in an MSP or IT ops role.
• Hands‑on Veeam B&R: jobs, repositories, backup copy, agents and SureBackup.
• Day‑to‑day RMM alert remediation (NinjaOne preferred): AV/EDR health, disk space, services, offline devices.
• Windows patch troubleshooting: failed cumulative updates, servicing stack and component store repair (DISM/SFC), WSUS/Windows Update logs, and third‑party patching.
• Vulnerability remediation from scanner findings, with a record of verifying the fix.
• Windows Server, Hyper‑V/VMware, storage (NAS, iSCSI) and basic networking.
• Experience with object storage targets (Backblaze, Azure Blob, Cloud Connect), including immutability and quotas.
• Clear writing for both tickets and client reports.
• Disciplined credential handling. Must be able to pass a background check for CMMC access.

Nice to have

• VMCE; VSPC.
• Huntress or another EDR/ITDR platform.
• Veeam for M365 and Azure backup.
• CMMC / NIST 800-171.
• PowerShell for remediation scripts.

Tools

Veeam B&R and agents, VSPC, NinjaOne (alerting, conditions, patch management), ScreenConnect, Huntress, Hyper‑V/VMware, object storage targets, Halo, Hudu.

(For full‑time employees)

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Parental leave
• Professional development assistance
• Referral program
• Vision insurance