We are seeking a BigFix Administrator to join a three-person vulnerability remediation surge team supporting a federal agency headquarters in downtown Washington, DC. This is hands-on patching work at enterprise scale: authoring BigFix fixlets and baselines, driving Intune update rings and compliance policies, validating every fix, and documenting it to federal audit standards.
On a typical day you will:
- Deploy, test, and validate patches across all impacted environments using IBM BigFix and Microsoft Intune, following the full patch lifecycle; testing, phased deployment, and rollback procedures
- Author BigFix fixlets and manage baselines, using the Relevance language, and produce remediation reporting
- Analyze assigned vulnerabilities to assess risk and potential business impact, and map scanner findings (Tenable/Nessus, Qualys) to specific remediation actions
- Coordinate with the federal vulnerability lead on assignment, tracking, prioritization, and remediation sequencing
- Partner with the customer experience team to remediate third-party software vulnerabilities (Adobe, Java, browsers, runtime libraries)
- Develop compensating controls or temporary mitigations when immediate patching poses operational risk
- Document all remediation actions in ServiceNow to audit and compliance standards, and produce technical validation evidence packages (rescans, test results) confirming closure
- Support follow-up vulnerability scans with the agency's cybersecurity office to confirm patching resolved the identified gaps
- Follow the agency's change-control process for every change, and contribute to weekly status reports on progress, blockers, and completion metrics
Performance targets are explicit: 100% of assigned vulnerabilities remediated, ≥90% of scheduled remediation activities completed on time, and ≤10% of remediated findings reopened for rework. This is a temporary, full-time position anticipated to last approximately six months, ending on or around six months from your start date. Your employment remains at-will, and either you or the company may end it at any time, with or without cause or notice.
- Demonstrated enterprise vulnerability management experience, including IBM BigFix patch and remediation deployment; fixlet authoring, Relevance language, baseline management, and reporting
- Microsoft Intune (Endpoint Manager) experience; device configuration, update rings, compliance policies, and application deployment
- Enterprise patch lifecycle experience; testing, phased deployment, and rollback procedures
- Windows 11 and Windows Server (2016–2022+) patching and hardening
- WSUS / SCCM / MECM experience
- Group Policy (GPO) configuration and remediation
- Familiarity with DISA STIGs / CIS Benchmarks
- Third-party application patching (Adobe, Java, browsers, runtime libraries)
- Software inventory and version management
- Ability to interpret vulnerability scanner output (Tenable/Nessus, Qualys) and map findings to remediation actions
- Experience with the ServiceNow ITSM platform, including incident, problem, and change management workflows
- U.S. citizenship required (direct access to sensitive system configurations) and ability to obtain and maintain a federal suitability determination (background investigation required)
- On-site in downtown Washington, DC five days per week for the first two months; limited telework may be authorized afterward at the government's discretion. Subject to occasional off-hours or on-call work for maintenance and incident management
- Preferred: Linux patching (RHEL/CentOS/Ubuntu; yum/dnf/apt), kernel and package management, and service hardening; Bash scripting, with Ansible automation strongly preferred; Tenable.sc/.io proficiency; understanding of CVSS scoring and the CISA KEV catalog; SQL skills for identifying affected systems and validating remediation status; Security+, CySA+, RHCSA, or Microsoft certifications
- BigFix experience is a MUST
We offer a comprehensive benefits package designed to support you and your family:
- Medical (HSA-qualified UnitedHealthcare plan), dental, and vision coverage; company pays 75% of employee premiums
- $100,000 company-paid life & AD&D insurance, with optional voluntary buy-up coverage for you and your family
- Short-term and long-term disability insurance, 100% company paid
- 401(k) with an automatic 3% company contribution; immediately vested, yours whether or not you contribute
- 11 paid federal holidays, 10 vacation days (growing to 20 with tenure), and 10 sick days per year
- Company-paid certification exams and renewals
- Tuition reimbursement up to $5,000 per year