Senior PC Security & Lifecycle Support Specialist

Department:
Administrative- IT

Reports To:

IT Director

Location:

Hybrid- within one hour drive of a VHL location

Vermeer Heartland is a family-owned, full-service dealer of Vermeer industrial equipment across four states. With decades of experience in the industry, our team sets itself apart with our strong customer-focus and growth-mindset.

We are seeking a dedicated PC Security & Lifecycle Support Specialist to support our endpoint security initiatives and PC deployment operations across our distributed enterprise environment. This role requires a professional with solid experience in endpoint protection, ITIL-aligned service delivery, and comprehensive PC lifecycle management using remote support strategies.

• PTO and Holiday pay
• Medical and Life Insurance plans
• 401(K) Matching
• Professional Development and Career Advancement Opportunities

• Design, implement, and maintain comprehensive endpoint security strategies aligned with organizational security policies and compliance requirements.
• Deploy and manage endpoint protection solutions including antivirus, EDR/XDR, encryption, and DLP tools
• Conduct regular security assessments, vulnerability scanning, and remediation of endpoints
• Develop and enforce security baselines, hardening standards, and configuration management for all PC assets
• Respond to and investigate security incidents involving endpoint devices
• Collaborate with Information Security team on threat intelligence and security architecture

• Participate in end-to-end PC lifecycle operations including procurement, imaging, deployment, maintenance, and secure decommissioning
• Develop and maintain standardized PC build images and automated deployment processes
• Manage PC refresh cycles and coordinate hardware/software upgrades across distributed locations
• Ensure asset tracking, inventory management, and compliance with licensing requirements
• Create and maintain comprehensive documentation for all lifecycle processes

• Provide technical support for complex PC hardware, software, and security issues
• Utilize ITIL framework for incident, problem, change, and configuration management
• Leverage remote support tools to diagnose and resolve issues for users in all VHL locations
• Develop and maintain knowledge base articles and self-service resources
• Participate in CAB (Change Advisory Board) meetings and manage changes through proper channels
• Track and analyze support metrics to drive continuous service improvement
• Tier 1-3 end user support
• Other duties as required

• Deploy and support remote support platforms (Log Me In )
• Coordinate with site teams to ensure consistent service delivery
• Develop remote troubleshooting procedures and train team members on best practices

• Operating Systems:
  Windows 11, macOS, Windows Server
• Security Tools: EDR/XDR, SIEM, vulnerability scanners, encryption solutions
• Deployment: SCCM, Intune, MDT, Autopilot or similar, imaging tools
• Remote Support:
  Various remote desktop and support platforms
• Networking: TCP/IP, VPN, DNS, DHCP fundamentals
• Scripting:
  Power Shell, batch scripting
• ITSM Tools:
  Service Now, Remedy, JIRA Service Management or similar

• Experience:
  
  3-5 years of experience in PC security, endpoint management, and technical support
• ITIL Foundation: ITIL v3/v4 foundational understanding
• Security Expertise:
  Proven track record securing Windows and Mac endpoints in enterprise environments
• Technical Proficiency:
  • Advanced knowledge of Windows 11, Windows Server
  • Expertise with endpoint security tools (Microsoft Defender, ESET, etc.)
  • Experience with MDM/UEM solutions (JAMF, Log Me In , Mosyle, etc.)
  • Proficiency with deployment tools
  • Strong understanding of remote support platforms and strategies
• Distributed Environment:
  Demonstrated success supporting geographically dispersed user populations
• Scripting skills (Power Shell, Python, Bash) preferred
• Knowledge of compliance frameworks (NIST, CIS, ISO 27001 or similar) preferred
• Experience with zero-trust architecture and modern endpoint management approaches preferred

Non-Safety-Sensitive