Systems Engineer II (Hyrbid - Greensboro, NC)

Welcome to Ovation Healthcare!

At Ovation Healthcare, we’ve been making local healthcare better for more than 40 years. Our mission is to strengthen independent community healthcare. We provide independent hospitals and health systems with the support, guidance and tech-enabled shared services needed to remain strong and viable. With a strong sense of purpose and commitment to operating excellence, we help rural healthcare providers fulfill their missions. 

The Ovation Healthcare difference is the extraordinary combination of operations experience and consulting guidance that fulfills our mission of creating a sustainable future for healthcare organizations. Ovation Healthcare’s vision is to be a dynamic, integrated professional services company delivering innovative and executable solutions through experience and thought leadership, while valuing trust, respect, and customer focused behavior. 

We’re looking for talented, motivated professionals with a desire to help independent hospitals thrive. Working with Ovation Healthcare, you will have the opportunity to collaborate with highly skilled subject matter specialists and operations executives, in a collegial atmosphere of professionalism and teamwork. 

Ovation Healthcare’s corporate headquarters is located in Brentwood, TN. For more information, visit www.ovationhc.com. 

SUMMARY:

Performs hands-on vulnerability remediation, patch deployment, and endpoint hardening for enterprise endpoints. Uses Microsoft System Center Configuration Manager, also known as Microsoft Endpoint Configuration Manager, and related endpoint tooling to deliver stable, compliant outcomes with measurable reporting.

ESSENTIAL FUNCTIONS:

• Review Qualys Vulnerability Management findings for endpoints and translate into actionable remediation work, including prioritization, patch selection, and closure validation through rescans.

• Define, test, package, and deploy operating system and application patches in SCCM controlled deployment rings and maintenance schedules.

• Create new Software Update Groups (SUGs) each month for workstations and servers, segregated by OS and environment if needed (e.g., prod, dev, test).

• Schedule and configure deployments for new SUGs, defining appropriate maintenance windows, user notifications, and reboot behavior.

• Implement endpoint hardening standards including security baselines, policy configurations, encryption posture support, and reduction of risky endpoint configurations.

• Troubleshoot patch failures and post-change endpoint issues; coordinate with Service Desk and Field Services for remediation and device recovery.

• Produce and maintain metrics for patch compliance, vulnerability aging, remediation success rates, and repeat findings; support service level agreement reporting.

• Maintain documentation and knowledge articles for repeatable endpoint remediation processes.

REQUIRED QUALIFICATIONS:

• Three or more years of direct, hands-on endpoint patching experience using Microsoft System Center Configuration Manager or Microsoft Endpoint Configuration Manager in a production enterprise.

• Demonstrated experience executing patch testing, staged rollouts, deployment troubleshooting, and compliance verification.

• Hands-on experience using Qualys Vulnerability Management reporting for remediation validation and closure.

PREFERRED QUALIFICIATIONS:

• Hospital information technology experience strongly preferred; broader healthcare experience preferred.

• Certifications highly desirable: Microsoft endpoint certifications, CompTIA Security+, or equivalent.

WORK SCHEDULE EXPECTATIONS:

• Participation in scheduled maintenance windows as required.

EDUCATION:

• Associate degree or equivalent combination of education and experience.

WORKING CONDITIONS AND PHYSICAL REQUIREMENTS:

• Reliable high-speed internet connection is required for all remote/hybrid positions. 

• Must have access to stable Wi-Fi with sufficient bandwidth to support video conferencing, cloud-based tools, and other online work-related activities. 

• A HIPAA-compliant work environment is required, including a secure workspace free from unauthorized access or interruptions, no use of public Wi-Fi unless connected through a secure company-provided VPN, and compliance with all applicable HIPAA privacy and security regulations.

#LI-Hybrid