Qualys-Focused Systems Engineer

Gravity IT Resources; Utah; On-site; USD 85,000 - 110,000; Part time

Job summary

Gravity IT Resources is seeking a Systems Engineer for an on-site contract engagement. You will support enterprise infrastructure security, focusing on vulnerability management, system configuration, and security controls across Windows Server, Microsoft technologies, SharePoint, and related systems.

You will collaborate with infrastructure, network, and cybersecurity teams to remediate audit findings, implement secure configurations, manage access controls, and strengthen logging and monitoring

Qualifications

• Proven experience in systems engineering or related IT roles.
• Hands-on experience with Qualys vulnerability management, including scanning, reporting, remediation tracking, and validation.
• Strong experience with Microsoft enterprise technologies, particularly Windows Server and related infrastructure.
• Experience identifying and remediating system vulnerabilities, security misconfigurations, and patch gaps.
• Knowledge of system hardening, access controls, privileged accounts, and least-privilege principles.
• Experience supporting MFA implementation and authentication security improvements.
• Understanding of enterprise logging, monitoring, and security best practices.
• Experience assessing end-of-life technologies and supporting infrastructure upgrades or replacements.
• Ability to investigate audit findings, develop remediation plans, and work with technical teams.
• Strong troubleshooting, documentation, and communication skills.

Responsibilities

• Utilize Qualys to scan, identify, assess, prioritize, and track vulnerabilities across servers and enterprise infrastructure.
• Analyze Qualys reports and develop actionable remediation plans.
• Collaborate with systems, network, and security teams to remediate vulnerabilities based on risk, severity, and impact.
• Validate remediation efforts through follow‑up scans.
• Monitor vulnerability trends, recurring findings, and remediation progress.
• Establish consistent vulnerability management processes, reporting, and standards.
• Investigate audit findings and support the implementation of corrective security measures.
• Review and improve configurations across Windows servers, Microsoft technologies, SharePoint, and other enterprise systems.
• Identify and remediate configuration weaknesses, security gaps, and patching deficiencies.
• Support operating system updates, security patches, and system hardening initiatives.
• Assess end‑of‑life and unsupported technologies; support infrastructure replacement planning.
• Troubleshoot system‑level issues to enhance stability, security, and performance.
• Collaborate with infrastructure teams to implement secure configuration standards and best practices.
• Review and improve privileged access management, enforce least‑privilege principles, and support MFA.
• Review access policies, account permissions, and authentication controls.
• Identify excessive permissions and inactive accounts.
• Improve logging, monitoring, alerting, and visibility across enterprise infrastructure.
• Identify aging infrastructure, unsupported platforms, and end‑of‑life technologies; support upgrade initiatives.
• Maintain documentation of system configurations, vulnerabilities, and security activities.
• Collaborate with network engineering, cybersecurity, and IT teams to address security findings.
• Document remediation plans, procedures, system changes, and audit evidence.
• Support continuous improvement of enterprise security practices.

Skills

Troubleshooting

Documentation

Communication

Cross-team collaboration

Problem-solving

Tools

Qualys

Windows Server

SharePoint

MFA

Active Directory

Job description

Gravity IT Resources is seeking a Systems Engineer for an on-site contract engagement. You will support enterprise infrastructure security, focusing on vulnerability management, system configuration, and security controls across Windows Server, Microsoft technologies, SharePoint, and related systems.

You will collaborate with infrastructure, network, and cybersecurity teams to remediate audit findings, implement secure configurations, manage access controls, and strengthen logging and monitoring