Position Summary
KECH is seeking an experienced and versatile Systems Engineer to support the company’s information technology infrastructure, cybersecurity operations, end-user computing environment, and contact-center technology platforms. The position is REMOTE with the occasional requirement of being IN-OFFICE. Applicants must be located near a KECH office location in Williamsburg, KY or El Paso, TX.
This position will be responsible for administering servers, desktops, networks, identity systems, security technologies, and business-critical applications. The Systems Engineer will also assist with cybersecurity monitoring, incident response, vulnerability scanning and remediation, system hardening, technology evaluations, and compliance activities.
The successful candidate should be comfortable working across multiple technical disciplines and resolving issues involving servers, endpoints, networks, cloud services, cybersecurity tools, telecommunications, and call-center platforms. This is a hands-on position suited for an experienced IT professional who can independently troubleshoot complex problems while working collaboratively with internal teams, vendors, customers, and technology partners.
Key Responsibilities
Server and Systems Administration
- Install, configure, administer, monitor, and maintain Windows and Linux Server environments.
- Support physical servers, virtual servers, cloud-hosted systems, and related infrastructure.
- Administer server operating systems, system services, storage, permissions, scheduled tasks, and applications.
- Monitor server availability, performance, capacity, event logs, and system health.
- Perform server patching, upgrades, maintenance, and remediation activities.
- Assist with backup administration, restoration testing, business continuity, and disaster-recovery planning.
- Troubleshoot server, operating-system, application, authentication, and performance issues.
- Maintain system configurations, inventories, diagrams, procedures, and administrative documentation.
Desktop and End-User Computing
- Configure, deploy, administer, and support desktops, laptops, mobile devices, peripherals, and related equipment.
- Build and maintain standardized workstation images and device configurations.
- Manage endpoint patching, software deployment, configuration management, and security policies.
- Troubleshoot Windows operating systems, Microsoft 365 applications, browsers, productivity tools, and business applications.
- Support endpoint encryption, antivirus, EDR/XDR, web filtering, multifactor authentication, and device-security controls.
- Manage hardware and software inventories throughout the technology lifecycle.
- Assist users with technical issues while providing professional and responsive customer service.
- Identify recurring support problems and implement sustainable corrective actions.
Network Administration
- Configure, monitor, maintain, and troubleshoot local-area and wide-area network infrastructure.
- Support routers, switches, firewalls, wireless access points, VPNs, VLANs, and internet connectivity.
- Troubleshoot TCP/IP, DNS, DHCP, routing, switching, bandwidth, latency, packet loss, and connectivity issues.
- Assist with network segmentation, firewall rules, remote-access solutions, and secure connectivity.
- Monitor network availability, utilization, performance, and security events.
- Maintain network diagrams, device inventories, configuration records, and administrative documentation.
- Coordinate with internet, telecommunications, managed-service, and equipment providers.
- Support Ubiquiti or comparable network technologies.
- Assist with the design and implementation of secure network improvements.
Cybersecurity Operations
- Monitor and investigate security alerts.
- Assist with incidents involving phishing, malware, ransomware, credential theft, unauthorized access, suspicious activity, and insider threats.
- Support incident containment, eradication, recovery, documentation, and post-incident review activities.
- Administer or support Trend Micro Vision One.
- Manage or support website allowlists, blocklists, DNS filtering, and secure web-gateway technologies.
- Conduct proactive reviews of endpoint, server, identity, cloud, and network-security events.
- Maintain incident-response procedures, investigation records, corrective-action plans, and lessons-learned documentation.
- Escalate significant incidents to management and appropriate internal teams.
- Assist with security-awareness activities and employee cybersecurity training.
Vulnerability Management and System Hardening
- Perform or coordinate vulnerability scanning.
- Analyze vulnerability findings and prioritize remediation based on severity, exploitability, asset criticality, and operational risk.
- Coordinate remediation activities involving servers, workstations, network devices, applications, and cloud systems.
- Validate that vulnerabilities have been successfully remediated.
- Apply or recommend security-hardening controls based on CIS Benchmarks, DISA STIGs, vendor guidance, and organizational standards.
- Track vulnerability-aging, remediation status, exceptions, and accepted risks.
- Prepare technical reports and management dashboards showing vulnerability trends and remediation progress.
- Identify weaknesses in the technology environment and recommend practical corrective actions.
Technology Evaluation and Implementation
- Evaluate new hardware, software, cloud services, cybersecurity products, artificial-intelligence tools, and business applications.
- Identify security, privacy, integration, support, licensing, and operational risks before implementation.
- Assist with proofs of concept, application testing, system validation, and implementation planning.
- Prepare recommendations that describe business benefits, technical requirements, costs, risks, and alternatives.
- Participate in technology deployments, upgrades, migrations, integrations, and decommissioning projects.
- Confirm that new systems meet security, performance, supportability, and business requirements.
Help Desk and Operational Support
- Serve as an escalation point for complex help-desk and technical-support issues.
- Diagnose and resolve problems involving hardware, software, networks, authentication, servers, security tools, and business applications.
- Prioritize incidents based on business impact, urgency, security risk, and contractual requirements.
- Document troubleshooting activities, resolutions, root causes, and follow-up actions.
- Participate in an after-hours or on-call support rotation when required.
- Support remote locations, distributed employees, call-center operations, and customer-facing systems.
- Coordinate planned maintenance to minimize operational disruption.
- Communicate outages, service interruptions, security events, and recovery status clearly to affected stakeholders.
Required Qualifications
- Five or more years of progressively responsible experience in systems administration, network administration, cybersecurity, technical support, or a closely related field.
- Hands-on experience administering Microsoft Windows and Linux server environments.
- Experience configuring or troubleshooting routers, switches, firewalls, wireless networks, VPNs, DNS, DHCP, TCP/IP, and VLANs.
- Experience with endpoint-management, patch-management, software-deployment, or configuration-management technologies.
- Experience supporting Microsoft 365 services and applications.
- Experience with vulnerability-scanning, endpoint-security, antivirus, and XDR technologies.
- Working knowledge of cybersecurity incident response, security hardening, access control, and vulnerability remediation.
- Experience applying CIS Benchmarks and DISA STIGs or similar standards.
- Experience with backup, disaster-recovery, monitoring, ticketing, automation, and remote-management technologies.
Preferred Certifications
One or more of the following certifications are preferred:
- CompTIA certifications
- AWS Certified Solutions Architect – Associate
Pay: $74,000.00 - $77,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Employee assistance program
- Employee discount
- Flexible spending account
- Health insurance
- Health savings account
- Life insurance
- Paid time off
- Referral program
- Retirement plan
- Vision insurance
Work Location: Hybrid remote in El Paso County, TX
