From Cyber Shell, LLC's posting. “We” and “our” refer to the employer.
We are seeking a BigFix Administrator to join a three-person vulnerability remediation surge team supporting a federal agency headquarters in downtown Washington, DC.
This is hands-on patching work at enterprise scale: authoring BigFix fixlets and baselines, driving Intune update rings and compliance policies, validating every fix, and documenting it to federal audit standards.
On a typical day you will:
Deploy, test, and validate patches across all impacted environments using IBM BigFix and Microsoft Intune, following the full patch lifecycle; testing, phased deployment, and rollback procedures
Author BigFix fixlets and manage baselines, using the Relevance language, and produce remediation reporting
Analyze assigned vulnerabilities to assess risk and potential business impact, and map scanner findings (Tenable/Nessus, Qualys) to specific remediation actions
Coordinate with the federal vulnerability lead on assignment, tracking, prioritization, and remediation sequencing
Partner with the customer experience team to remediate third-party software vulnerabilities (Adobe, Java, browsers, runtime libraries)
Develop compensating controls or temporary mitigations when immediate patching poses operational risk
Document all remediation actions in ServiceNow to audit and compliance standards, and produce technical validation evidence packages (rescans, test results) confirming closure
Support follow-up vulnerability scans with the agency's cybersecurity office to confirm patching resolved the identified gaps
Follow the agency's change-control process for every change, and contribute to weekly status reports on progress, blockers, and completion metrics
Performance targets are explicit: 100% of assigned vulnerabilities remediated, ≥90% of scheduled remediation activities completed on time, and ≤10% of remediated findings reopened for rework.
Requirements
Demonstrated enterprise vulnerability management experience, including IBM BigFix patch and remediation deployment; fixlet authoring, Relevance language, baseline management, and reporting
Microsoft Intune (Endpoint Manager) experience; device configuration, update rings, compliance policies, and application deployment
Enterprise patch lifecycle experience; testing, phased deployment, and rollback procedures
Windows 11 and Windows Server (2016–2022+) patching and hardening
Ability to interpret vulnerability scanner output (Tenable/Nessus, Qualys) and map findings to remediation actions
Experience with the ServiceNow ITSM platform, including incident, problem, and change management workflows
U.S. citizenship required (direct access to sensitive system configurations) and ability to obtain and maintain a federal suitability determination (background investigation required)
On-site in downtown Washington, DC five days per week for the first two months; limited telework may be authorized afterward at the government's discretion. Subject to occasional off-hours or on-call work for maintenance and incident management
Preferred: Linux patching (RHEL/CentOS/Ubuntu; yum/dnf/apt), kernel and package management, and service hardening; Bash scripting, with Ansible automation strongly preferred; Tenable.sc/.io proficiency; understanding of CVSS scoring and the CISA KEV catalog; SQL skills for identifying affected systems and validating remediation status; Security+, CySA+, RHCSA, or Microsoft certifications
BigFix experience is a MUST
Benefits
We offer a comprehensive benefits package designed to support you and your family: Medical (HSA-qualified UnitedHealthcare plan), dental, and vision coverage; company pays 75% of employee premiums
$100,000 company-paid life & AD&D insurance, with optional voluntary buy-up coverage for you and your family
Short-term and long-term disability insurance, 100% company paid
401(k) with an automatic 3% company contribution; immediately vested, yours whether or not you contribute
11 paid federal holidays, 10 vacation days (growing to 20 with tenure), and 10 sick days per year
Company-paid certification exams and renewals
Tuition reimbursement up to $5,000 per year
About this listing
LAYIQ is an independent job-discovery service. This listing does not imply a partnership with or endorsement by the employer. Review the original posting for current details and availability.
