Department:

Administrative- IT Reports To:

IT Director Location:

Hybrid- within one hour drive of a VHL location Vermeer Heartland is a family-owned, full-service dealer of Vermeer industrial equipment across four states. With decades of experience in the industry, our team sets itself apart with our strong customer-focus and growth-mindset. We are seeking a dedicated PC Security & Lifecycle Support Specialist to support our endpoint security initiatives and PC deployment operations across our distributed enterprise environment. This role requires a professional with solid experience in endpoint protection, ITIL-aligned service delivery, and comprehensive PC lifecycle management using remote support strategies.

BENEFITS

PTO and Holiday pay Medical and Life Insurance plans 401(K) Matching Professional Development and Career Advancement Opportunities

POSITION RESPONSIBILITIES

Endpoint Security Management Design, implement, and maintain comprehensive endpoint security strategies aligned with organizational security policies and compliance requirements. Deploy and manage endpoint protection solutions including antivirus, EDR/XDR, encryption, and DLP tools Conduct regular security assessments, vulnerability scanning, and remediation of endpoints Develop and enforce security baselines, hardening standards, and configuration management for all PC assets Respond to and investigate security incidents involving endpoint devices Collaborate with Information Security team on threat intelligence and security architecture PC Lifecycle Management Participate in end-to-end PC lifecycle operations including procurement, imaging, deployment, maintenance, and secure decommissioning Develop and maintain standardized PC build images and automated deployment processes Manage PC refresh cycles and coordinate hardware/software upgrades across distributed locations Ensure asset tracking, inventory management, and compliance with licensing requirements Create and maintain comprehensive documentation for all lifecycle processes ITIL-Aligned Support Operations Provide technical support for complex PC hardware, software, and security issues Utilize ITIL framework for incident, problem, change, and configuration management Leverage remote support tools to diagnose and resolve issues for users in all VHL locations Develop and maintain knowledge base articles and self-service resources Participate in CAB (Change Advisory Board) meetings and manage changes through proper channels Track and analyze support metrics to drive continuous service improvement Tier 1-3 end user support Other duties as required Distributed Environment Support Deploy and support remote support platforms (LogMeIn) Coordinate with site teams to ensure consistent service delivery Develop remote troubleshooting procedures and train team members on best practices

POSITION SKILLS/ABILITIES

Operating Systems:

Windows 11, mac

OS, Windows Server Security Tools:

EDR/XDR, SIEM, vulnerability scanners, encryption solutions

Deployment:

SCCM, Intune, MDT, Autopilot or similar, imaging tools

Remote Support:

Various remote desktop and support platforms

Networking:

TCP/IP, VPN, DNS, DHCP

fundamentals

Scripting:

PowerShell, batch scripting

ITSM Tools:

ServiceNow, Remedy, JIRA Service Management or similar

POSITION REQUIREMENTS

Experience:

3-5 years of experience in PC security, endpoint management, and technical support

ITIL Foundation:

ITIL v3/v4 foundational understanding

Security Expertise:

Proven track record securing Windows and Mac endpoints in enterprise environments

Technical Proficiency:

Advanced knowledge of Windows 11, Windows Server Expertise with endpoint security tools (Microsoft Defender, ESET, etc.) Experience with MDM/UEM solutions (JAMF, LogMeIn, Mosyle, etc.) Proficiency with deployment tools Strong understanding of remote support platforms and strategies

Distributed Environment:

Demonstrated success supporting geographically dispersed user populations Scripting skills (PowerShell, Python, Bash) preferred Knowledge of compliance frameworks (NIST, CIS, ISO 27001 or similar) preferred Experience with zero-trust architecture and modern endpoint management approaches preferred Non-Safety-Sensitive