Lead Vulnerability Remediation Engineer - Infrastructure Engineer Job Raleigh area,North Carolina USA,IT/Tech

Lead Infrastructure Engineer

The Lead Infrastructure Engineer within Truist's Digital Workplace organization is accountable for enterprise governance, risk reduction, and lifecycle oversight of endpoint vulnerabilities and configuration compliance across physical and virtual (VDI) environments. This role partners across engineering, operations, and security stakeholders to identify, prioritize, remediate, and prevent endpoint security exposures while producing defensible, repeatable, and scalable solutions aligned to Truist standards. This position supports a proactive operating model emphasizing automation, prevention, and measurable outcomes.

For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)

This position is office-centric 5 days a week in our Truist hubs.

General Essential Duties And Responsibilities Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

Builds and designs enterprise infrastructure technology platforms and systems across various environments, such as cloud, network, database, storage, platform, computing, and/or middleware domains.

Applies automation, monitoring, and optimization techniques to ensure high availability and performance of infrastructure.

Collaborates with cross-functional teams to integrate new technologies and continuously improve infrastructure standards and processes.

Troubleshoots and resolves moderately complex technical issues impacting infrastructure performance and reliability.

Supports compliance with technology strategies, standards, and governance to mitigate risks and ensure regulatory adherence.

Deploys infrastructure designs, configurations, and procedures to support operational consistency and knowledge sharing.

Proactively contributes to technical innovation efforts and advancement of infrastructure capabilities.

Works with technical project teams to support infrastructure deliverables and solutions.

Makes adjustments or recommends enhancements in technical systems and processes to improve effectiveness of area of responsibility.

Specific job Function:

Endpoint Vulnerability Management (Enterprise Scale)
Secure Baseline Configuration (SBC) & Compliance (Windows 11 + VDI)
Problem Management (Root Cause + Corrective Actions)
Configuration Management & Deployment Enablement (SCCM / MECM)
Automation & Engineering Enablement (Power Shell + Workflows)
Data, Reporting, and Decision Support (Databases)
Documentation, Communication, and Governance

Qualifications Required Qualifications The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Bachelor's degree in Computer Science, Engineering, Information Systems, or related field.

Minimum of 3 years of professional experience in infrastructure engineering.

Understanding of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Preferred Qualifications

Bachelor's degree and six years of experience or an equivalent combination of education and work experience.

Banking or financial services experience.

Experience in VDI environments and their unique compliance/remediation constraints.

Familiarity with endpoint configuration governance methods (e.g., baselines, policy-as-code concepts, drift monitoring).

Experience integrating security remediation with service management tooling and workflows.

ITIL / Problem Management background and comfort operating within structured ITSM practices.

Security or endpoint-focused certifications (examples: Security+, vendor tooling certs, or equivalent experience).

Security-first mindset with strong attention to data integrity and reproducibility.

Structured communication: crisp problem statements, explicit decision logic, and documented tradeoffs.

Anticipates edge cases, failure modes, and operational constraints (bandwidth, maintenance windows, change risk).

Designs solutions for scale and sustainability, not one-off fixes.

Automation and prevention focused, aligned to the Digital Workplace direction.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation:
All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to…