System Engineer

Avance Consulting; San Diego (CA); On-site; USD 90,000 - 120,000; Full time

Job summary

Avance Consulting is seeking an Associate Systems Engineer to support security, modernization, and operational stability of OT environments across global sites. The role focuses on endpoint security, Active Directory, vulnerability remediation, access controls, and lab system support.

You will work with AD administration, patching, EDR deployment, and privileged access management, collaborating with global teams and vendors to ensure secure lab operations and rapid incident response.

Qualifications

• Experience administering Active Directory and GPOs.
• Strong Windows client/server administration experience.
• Endpoint security and vulnerability remediation expertise.
• Familiarity with endpoint management tools (Intune, SCCM/ConfigMgr).
• Experience with EDR platforms, preferably CrowdStrike Falcon.
• Knowledge of privileged access management and service accounts.
• Proficient in PowerShell scripting.
• Understanding OT/lab network environments and lab security.
• Experience with ITSM platforms like ServiceNow.

Responsibilities

• Support AD OU, GPO, user and service account administration.
• Remediate NAA and transition to managed service accounts.
• Implement software allowlisting and endpoint security controls.
• Assist with CrowdStrike EDR deployment and remediation.
• Patch OS, remediate vulnerabilities, handle EOL systems, secure file shares.
• Support USB restrictions and exception management.
• Work with lab instruments, Windows endpoints, OT/lab networks.
• Support privileged access and remote support tools.
• Manage ServiceNow requests, incidents, and docs.
• Collaborate with InfoSec, infra teams, and global site teams.
• Provide technical support and hypercare after changes.

Skills

Active Directory administration

Windows 10/11

Windows Server administration

Endpoint security

Vulnerability remediation

PowerShell scripting

OT/lab network understanding

Troubleshooting & documentation

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

Intune

SCCM/ConfigMgr

CrowdStrike Falcon

BeyondTrust PAM

ServiceNow

Job description

We are seeking an Associate Systems Engineer to support the security, modernization, and operational stability of laboratory and Operational Technology (OT) environments across global sites. This is a hands‑on role focused on endpoint security, Active Directory, vulnerability remediation, access controls, and lab system support.

Key Responsibilities

• Support Active Directory OU, GPO, user and service account administration.
• Support Non‑Attributable Account (NAA) remediation and transition to managed service accounts.
• Implement software allowlisting and endpoint security controls.
• Support CrowdStrike EDR deployment and security remediation activities.
• Assist with OS patching, vulnerability remediation, EOL systems, and file‑share security.
• Support USB restriction and exception‑management processes.
• Work with lab instruments, Windows endpoints, and OT/lab network environments.
• Support BeyondTrust or similar privileged access and remote‑support solutions.
• Manage ServiceNow requests, incidents, and technical documentation.
• Partner with InfoSec, infrastructure teams, Business System Owners, vendors, lab scientists, and global site teams.
• Provide technical support and hypercare following security and infrastructure changes.

Required Skills

• Active Directory administration, including OU and GPO management.
• Windows 10/11 and Windows Server administration.
• Endpoint security and vulnerability remediation.
• Experience with Intune, EPM, SCCM/ConfigMgr, or similar endpoint management tools.
• Experience with EDR platforms; CrowdStrike Falcon preferred.
• Service account and privileged access management.
• PowerShell scripting.
• Understanding of OT/laboratory network environments.
• Knowledge of patching, software controls, USB controls, and endpoint security.
• ServiceNow or another ITSM platform.
• Strong troubleshooting, analytical, documentation, and communication skills.

Preferred Skills

• BeyondTrust or similar PAM/password management tools.
• SailPoint or other Identity Management platforms.
• Laboratory, pharmaceutical, biopharma, manufacturing, or regulated environments.
• GxP / Information Security compliance.
• NuGenesis, Empower, or similar laboratory data platforms.
• Transparent Screen Lock or similar laboratory session‑management technologies.
• ITIL knowledge.

Experience:

2–5 years of relevant IT/OT systems engineering, endpoint security, or lab systems support experience.

Education:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent experience.

This role supports global laboratory environments, including US East Coast and UK locations. The position may require participation in hypercare activities and occasional out‑of‑hours support during major technical changes.