Operating Systems Security Engineer

WilmerHale is a leading, full-service international law firm with 1,000 lawyers located throughout 12 offices in the United States and Europe. Our lawyers work at the intersection of government, technology and business, and we remain committed to our guiding principles of providing quality, excellent legal and client services; developing diversity among our lawyers and staff and cultivating an environment that promotes an ambitious spirit, collaboration and collegiality by drawing on the extraordinary talents and dynamic experience of our lawyers. Our goal is to reflect the diversity of our clients and the communities in which we practice.

What You Will Be Doing:

Responsible for the design, implementation, management, and support of WilmerHale’s enterprise endpoint and server operating systems and associated security infrastructure.  This engineering position will focus on information security related technologies related to our core operating systems.  In addition to a focus on information security, this role will also ensure the performance, immutability, and high-availability of those technologies and resulting services. 

Serves as a key member of the Computer Security Incident Response Team. Assists in the development and maintenance of processes and procedures around investigating and remediating security incidents involving malware, ransomware and/or data loss.

Assists with the implementation of new or additional endpoint, server and associated security environments to improve infrastructure service, both locally and remotely. Assists with resource and workload management and capacity planning. Effectively manages product life-cycles, providing input for budget preparation.  Monitors and controls processes, and implements systems solutions to provide stable, secure, and optimally performing platforms.

About this role:

Provides full requirements in-take, design, planning, configuration, documentation, deployment and top-level support ownership of the following infrastructure technologies:

• Accountable and responsible for Endpoint and Server Security products and projects.  This includes OS and software applications needed to provide a secure and stable desktop and server environment.
• Development of endpoint and server OS and images including OS hardening and configuration control practices.   Use of Citrix technology in conjunction with endpoint and server Operating Systems, and laptop build design.
• Provide support and backup on other desktop technologies as time permits, including Microsoft System Center Configuration Manager, Active Directory, Windows Server Update Services (WSUS) for deployment of patches to workstation.
• Working with the Infrastructure Services Manager develops documented firm standards for endpoint and server security. Ensures that adherence to those standards is monitored and followed by all members of the Systems Infrastructure group.
• Engineers new endpoint and server security build solutions for new hardware releases and to support developing business needs.
• Assists in efforts to optimize infrastructure performance to the end-user.
• Tests and coordinates deployment of Microsoft Security patches for workstations and servers.
• Assists in maintaining a testing environment for development.
• Maintains awareness of technology developments and makes recommendations to Infrastructure Management.
• Develops roadmaps for the adoption of cutting edge endpoint and server security technologies and practices.
• Participates in negotiations of software licensing and support agreements.
• Participates in cross-functional team projects to implement new or updated technology.
• Assists with resolution of escalated incidents and participates in problem management activities.
• Cross-trains other IT staff in the use or maintenance of technology.
• Assumes additional responsibilities as assigned.
• Contributes to the firm's Service Excellence initiative to consistently improve its image internally and externally.  Displays professionalism, quality service and a "can do" attitude to internal members/departments of the firm as well as external clients and vendors via electronic and print correspondence, over the telephone, and in-person.