Senior Operations Engineer

Senior Operations Engineer

It's an exciting time to join Fisher Investments; we're investing in the future of our firm's technology and information security. Our business is growing internationally, which emphasizes the need to build an unparalleled team that promotes future global growth through strategic solutions and progress. We are looking for a Senior Operations Engineer to join our team and assist us in supporting and maintaining our Digital Workplace.

The Senior Operations Engineer reduces endpoint security risk across the enterprise by leading vulnerability management, security remediation, endpoint hardening, patch compliance, and automation programs. You will be the technical lead for identifying, prioritizing, and remediating vulnerabilities across Windows endpoints, applications, browsers, drivers, firmware, and operating systems. You will work closely with Cybersecurity, Digital Workplace, Infrastructure, Service Desk, and Application teams. You will drive risk reduction efforts while balancing security, operational stability, and user experience.

You will report to the Endpoint Management Team Leader of Digital Workplace.

The day-to-day responsibilities include:

• Leading enterprise endpoint vulnerability management activities.
• Reviewing, assessing, and prioritizing vulnerabilities based on CVSS scores, exploitability, growth, and risk.
• Coordinating remediation efforts for critical and high-risk vulnerabilities.
• Managing vulnerability remediation Service level agreements and aging metrics.
• Responding to zero-day vulnerabilities and new security threats.
• Promoting enterprise-wide risk reduction programs.
• Developing, evaluating, and maintaining endpoint security standards and hardening baselines.
• Implementing CIS Benchmarks, Microsoft Security Baselines, and security best practices.
• Reducing endpoint attack surface through configuration management and security controls.
• Assessing security risks associated with new technologies and software deployments.
• Managing and supporting Windows operating system patching strategies.
• Overseeing third-party application patching and remediation efforts.
• Identifying and removing unsupported, deprecated, or vulnerable software.
• Maintaining browser currency and application lifecycle compliance.
• Coordinating remediation activities for vulnerable drivers and firmware.
• Designing and developing Power Shell scripts and automation solutions.
• Using Intune, MECM/SCCM, and endpoint management tools to automate remediation.
• Building proactive detection, monitoring, and compliance workflows.
• Reducing manual effort through automation and self-healing solutions.
• Validating remediation success and compliance across the environment.
• Partnering with Information Security, Desktop Engineering, Infrastructure, and Service Desk teams.
• Coordinating remediation efforts with application owners and partners.
• Providing technical guidance and mentorship to engineers.
• Being a subject matter expert for endpoint vulnerability management and security remediation.
• Influencing enterprise security and endpoint management strategies.

Your qualifications include:

• 7+ years of experience in endpoint engineering, vulnerability management, or endpoint security.
• Strong expertise supporting Windows 10 and Windows 11 environments.
• Hands-on experience with Microsoft Intune or Microsoft Configuration Manager (MECM/SCCM).
• Experience with vulnerability management platforms such as Tenable, Microsoft Defender Vulnerability Management, and similar enterprise vulnerability scanning tools.
• Experience with CVEs and CVSS scoring, endpoint security best practices, security baselines and hardening standards, patch management and remediation processes.
• Advanced Power Shell scripting and automation experience.
• Experience creating reporting and dashboards using Power BI, SQL, Excel, or similar technologies.
• Familiarity with AI tools and emerging AI technologies.

Compensation:

• $130,000 - $180,000 base salary per year in the state of WA. New hires should expect to start at the lower end of the range depending on experience.
• Eligible for a discretionary bonus based on firm and individual performance.

Why Fisher Investments:

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:

• 100% paid medical, dental and vision premiums for you and your qualifying dependents.
• A 50% 401(k) match, up to the IRS maximum.
• 20 days of PTO, plus 10 paid holidays.
• Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care.
• This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This…