NOC Engineer - Backup, Alerts & Patch Remediation
About The Role
This role owns the health of our managed client fleet: backups that run and can be restored, RMM alerts that get fixed rather than ignored, and patches and vulnerabilities that get closed. You'll work a remediation backlog down and keep it down.
Schedule
Business hours ET, an early-morning overnight-jobs check, and an after-hours escalation rotation.
What You'll Do
Backups
Triage failed, missed and warning backup jobs daily across Veeam servers, agents and cloud copies
Remote in through NinjaOne/ScreenConnect to fix storage, repository, network, licensing and upgrade issues
Run scheduled and on-request restore tests (SureBackup, file/VM) and write audit-ready evidence
Enforce the PTG backup standard: 3-2-1 with a cloud copy, minimum retention, encryption, and no synthetic fulls that overrun storage
Run the half-yearly backup audit and present the findings
Maintain VSPC: onboarding and offboarding, report recipients, and keeping the managed list matched to billing
RMM alert remediation (NinjaOne)
Work the open NinjaOne condition-alert queue to zero, fixing the root cause so the same device stops re-alerting
Antivirus/EDR health: AV missing, disabled or not updating, and unsupported AV installed
Low disk space on workstations and servers: cleanup, profile and temp clearing, and escalating hardware upgrades
Server and virtualization alerts: VMware/Hyper-V datastore free space, stale VM checkpoints, hardware sensors, high memory, and critical services down (e.g. ADSync)
Device-offline alerts: confirm real outages and separate them from platform false positives
Tune alert conditions and thresholds so alerts are actionable, not noise
Patching And Vulnerabilities
Remediate failed patches in NinjaOne: Windows cumulative/security updates and third-party applications, including stuck or half-finished patch runs and pending reboots
Install out-of-band updates manually when policy can't approve them
Remediate vulnerability-scanner findings: patch, upgrade, reconfigure or remove the affected software, then verify the finding clears
Report patch compliance and the open vulnerability backlog weekly
General
Own Halo tickets from alert to close, with clear notes
Produce the daily, weekly and monthly reports
Work CMMC client systems under their access controls
Keep credentials and runbooks current in Hudu
Requirements
What you'll bring
3+ years in an MSP or IT ops role
Hands-on Veeam B&R: jobs, repositories, backup copy, agents and SureBackup
Day-to-day RMM alert remediation (NinjaOne preferred): AV/EDR health, disk space, services, offline devices
Windows patch troubleshooting: failed cumulative updates, servicing stack and component store repair (DISM/SFC), WSUS/Windows Update logs, and third-party patching
Vulnerability remediation from scanner findings, with a record of verifying the fix
Windows Server, Hyper-V/VMware, storage (NAS, iSCSI) and basic networking
Experience with object storage targets (Backblaze, Azure Blob, Cloud Connect), including immutability and quotas
Clear writing for both tickets and client reports
Disciplined credential handling. Must be able to pass a background check for CMMC access
Nice to have
VMCE; VSPC
Huntress or another EDR/ITDR platform
Veeam for M365 and Azure backup
CMMC / NIST 800-171
PowerShell for remediation scripts
Tools
Veeam B&R and agents, VSPC, NinjaOne (alerting, conditions, patch management), ScreenConnect, Huntress, Hyper-V/VMware, object storage targets, Halo, Hudu.
Benefits
(For full-time employees)
401(k)
401(k) matching
Dental insurance
Health insurance
Life insurance
Paid time off
Parental leave
Professional development assistance
Referral program
Vision insurance