Senior Operations Engineer

Fisher Investments; Camas (WA); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Premium benefits

401(k) match

Job summary

Fisher Investments in Camas, WA is seeking a Senior Operations Engineer to support and maintain our Digital Workplace, focusing on endpoint security, automation, and risk reduction. You will lead vulnerability management for Windows endpoints, implement Intune/MECM, develop PowerShell automation, and coordinate remediation with security, IT ops, and application teams.

This in-office role offers strong benefits, a discretionary bonus, and opportunities to influence enterprise security and

Qualifications

• 7+ years of experience in endpoint engineering, vulnerability management, or endpoint security.
• Strong expertise supporting Windows 10 and Windows 11 environments.
• Hands-on experience with Intune or MECM/SCCM.
• Experience with vulnerability management platforms such as Tenable and Defender VM.

Responsibilities

• Lead enterprise endpoint vulnerability management activities.
• Review, assess, and prioritize vulnerabilities based on CVSS scores, exploitability, growth, and risk.
• Coordinate remediation efforts for critical and high-risk vulnerabilities.
• Develop, evaluate and maintain endpoint security standards and hardening baselines.
• Implement CIS Benchmarks and security best practices.
• Reduce endpoint attack surface through automation and configuration controls.
• Design and develop PowerShell scripts and automation solutions.
• Build proactive detection, monitoring, and compliance workflows.
• Partner with Information Security, Desktop Engineering, Infrastructure, and Service Desk teams.

Skills

Endpoint engineering

Vulnerability management

Automation scripting

PowerShell

Power BI

Mentorship

Windows 10/11

Tools

Intune

MECM/SCCM

Tenable

Microsoft Defender VM

Job description

The Opportunity:

It's an exciting time to join Fisher Investments; we’re investing in the future of our firm’s technology and information security. Our business is growing internationally, which emphasizes the need to build an unparalleled team that promotes future global growth through strategic solutions and progress. We are looking for a Senior Operations Engineer to join our team and assist us in supporting and maintaining our Digital Workplace.

The Day-to-Day:

• Lead enterprise endpoint vulnerability management activities.
• Review, assess, and prioritize vulnerabilities based on CVSS scores, exploitability, growth, and risk.
• Coordinate remediation efforts for critical and high-risk vulnerabilities.
• Manage vulnerability remediation Service level agreements and aging metrics.
• Respond to zero-day vulnerabilities and new security threats.
• Promote enterprise-wide risk reduction programs.
• Develop, evaluate and maintain endpoint security standards and hardening baselines.
• Implement CIS Benchmarks, Microsoft Security Baselines, and security best practices.
• Reduce endpoint attack surface through configuration management and security controls.
• Assess security risks associated with new technologies and software deployments.
• Manage and support Windows operating system patching strategies.
• Oversee third-party application patching and remediation efforts.
• Identify and remove unsupported, deprecated, or vulnerable software.
• Maintain browser currency and application lifecycle compliance.
• Coordinate remediation activities for vulnerable drivers and firmware.
• Design and develop PowerShell scripts and automation solutions.
• Use Intune, MECM/SCCM, and endpoint management tools to automate remediation.
• Build proactive detection, monitoring, and compliance workflows.
• Reduce manual effort through automation and self-healing solutions.
• Validate remediation success and compliance across the environment.
• Partner with Information Security, Desktop Engineering, Infrastructure, and Service Desk teams.
• Coordinate remediation efforts with application owners and partners.
• Provide technical guidance and mentorship to engineers.
• Be a subject matter expert for endpoint vulnerability management and security remediation.
• Influence enterprise security and endpoint management strategies.

Your Qualifications:

• 7+ years of experience in endpoint engineering, vulnerability management, or endpoint security.
• Strong expertise supporting Windows 10 and Windows 11 environments.
• Hands-on experience with Microsoft Intune or Microsoft Configuration Manager (MECM/SCCM).
• Experience with vulnerability management platforms such as:
  • Tenable
  • Microsoft Defender Vulnerability Management
  • Similar enterprise vulnerability scanning tools
• Experience with:
  • CVEs and CVSS scoring
  • Endpoint security best practices
  • Security baselines and hardening standards
  • Patch management and remediation processes
• Advanced PowerShell scripting and automation experience.
• Experience creating reporting and dashboards using Power BI, SQL, Excel, or similar technologies
• Familiarity with AI tools and emerging AI Technologies

Compensation:

• $130,000 - $180,000 base salary per year in the state of WA. New hires should expect to start at the lower end of the range depending on experience
• Eligible for a discretionary bonus based on firm and individual performance

Why Fisher Investments:

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO, plus 10 paid holidays
• Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care
• This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change.

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY EMPLOYER