BigFix Engineer, Associate at LCG, Inc.

• Job Location Bethesda, MD
• Seniority Entry Level
• Type Full-time

Share on:

Description

Location: Rockville, MD Required Clearance: Public Trust Onsite : Hybrid Work (Minimum 1 Day Onsite - minimum) Job Title : BigFix Engineer, Associate Job Overview: The Big Fix Engineer, Associate responsible for operational cybersecurity support in a federal IT environment, with a primary emphasis on enterprise endpoint patching and compliance using IBM BigFix.

The specialist will manage and execute security patching, endpoint inventory validation, and compliance reporting across laptops and desktops, ensuring systems meet federal security and continuous monitoring requirements.

This role performs technical security tasks independently or under supervision of System Engineers, the Lead Computer Security System Specialist, the Information Systems Security Officer (ISSO), and/or the Contracting Officer’s Representative (COR).

The position supports compliance with federal mandates including FISMA, and aligns to NIST, HHS, and NIH security policies and directives.

Key Responsibilities BigFix responsibilities include (but are not limited to): Lead and execute monthly enterprise patch deployments using IBM BigFix for: Operating Systems Microsoft Office applications Microsoft security updates and supporting Microsoft products Maintain and validate BigFix endpoint coverage: Ensure BigFix agents are installed, properly configured, and consistently reporting Perform agent troubleshooting (connectivity, relay issues, policy failures, outdated agents, etc.) Support mandatory twice-yearly endpoint inventory verification, ensuring: All laptops/desktops are accounted for Security patches are up-to-date and verified BigFix compliance data supports audit and reporting requirements Reports are produced confirming endpoint validation and remediation actions Create and deliver BigFix compliance reports and metrics, including: Patch compliance baselines Deployment success/failure reporting Exception handling and remediation tracking Endpoint verification summaries for stakeholders Research, test, and recommend enhancements to: Patch deployment strategies Patch monitoring approaches Anti-virus and endpoint security enforcement Coordinate with security, desktop support, and system owners to remediate patch failures, non-compliance, and high severity vulnerabilities.

Security Desktop Support & Endpoint Security Operations Provide Security Desktop Support to ensure endpoint hardening, patch compliance, and continuous monitoring requirements are maintained.

Assist in remediation of critical endpoint security events (high severity vulnerabilities, malware outbreaks, compliance failures).

Provide assistance to the NIH Incident Response Team (IRT) and internal security teams in handling endpoint incidents and remediation activities, including containment and recovery support.