RemoteMust work business hours Eastern Time, with an early-morning overnight-jobs check and after-hours escalation rotation.
IT OperationsSystem Administration
About the job
Requirements
At least 3 years of experience in an MSP or IT operations role.
Hands-on experience with Veeam Backup & Replication, including jobs, repositories, backup copy, agents, and SureBackup.
Experience with day-to-day RMM alert remediation, including antivirus/endpoint detection and response health, disk space, services, and offline devices.
Experience troubleshooting Windows patches, including failed cumulative updates, servicing stack and component store repair with DISM/SFC, WSUS/Windows Update logs, and third-party patching.
Experience remediating vulnerability-scanner findings and verifying that fixes resolve them.
Knowledge of Windows Server, Hyper-V or VMware, storage including NAS and iSCSI, and basic networking.
Experience with object storage targets such as Backblaze, Azure Blob, or Cloud Connect, including immutability and quotas.
Ability to write clear ticket notes and client reports.
Disciplined credential handling and ability to pass a background check for CMMC access.
Responsibilities
Triage failed, missed, and warning backup jobs daily across Veeam servers, agents, and cloud copies.
Remotely resolve storage, repository, network, licensing, and upgrade issues using NinjaOne or ScreenConnect.
Run scheduled and on-request SureBackup and file/VM restore tests, and document audit-ready evidence.
Enforce the backup standard, including 3-2-1 backups with a cloud copy, minimum retention, encryption, and avoiding synthetic fulls that overrun storage.
Conduct the half-yearly backup audit and present findings.
Maintain VSPC through onboarding and offboarding, managing report recipients, and reconciling the managed list with billing.
Work the open NinjaOne condition-alert queue to zero by fixing root causes and preventing repeat alerts.
Remediate antivirus/endpoint detection and response health issues, including missing, disabled, outdated, or unsupported antivirus.
Resolve low-disk-space alerts on workstations and servers through cleanup and profile or temporary-file clearing, and escalate hardware upgrades as needed.
Address server and virtualization alerts, including VMware/Hyper-V datastore capacity, stale VM checkpoints, hardware sensors, high memory, and critical services being down.
Verify device-offline alerts and distinguish real outages from platform false positives.
Tune alert conditions and thresholds to make alerts actionable and reduce noise.
Remediate failed NinjaOne patches for Windows cumulative/security updates and third-party applications, including stuck or incomplete runs and pending reboots.
Install out-of-band updates manually when policy cannot approve them.
Remediate vulnerability-scanner findings by patching, upgrading, reconfiguring, or removing affected software, then verify the finding clears.
Report patch compliance and the open vulnerability backlog weekly.
Own Halo tickets from alert through closure and maintain clear notes.
Produce daily, weekly, and monthly reports.
Work on CMMC client systems under their access controls.
Keep credentials and runbooks current in Hudu.
Desired Qualifications
VMCE or VSPC experience.
Experience with Huntress or another EDR/ITDR platform.
Experience with Veeam for Microsoft 365 and Azure backup.
Knowledge of CMMC or NIST 800-171.
PowerShell experience for remediation scripts.
NOC Engineer (Remote)
The Proactive Technology Group · United States (Remote) · — · Posted 2026-10-06
Salary: USD 35,000–40,000
Workplace: remote
Description
NOC Engineer – Backup, Alerts & Patch Remediation
About the role
This role owns the health of our managed client fleet: backups that run and can be restored, RMM alerts that get fixed rather than ignored, and patches and vulnerabilities that get closed. You'll work a remediation backlog down and keep it down.
Schedule
Business hours ET, an early-morning overnight-jobs check, and an after-hours escalation rotation.
What you'll do
Backups
Triage failed, missed and warning backup jobs daily across Veeam servers, agents and cloud copies.
Remote in through NinjaOne/ScreenConnect to fix storage, repository, network, licensing and upgrade issues.
Run scheduled and on-request restore tests (SureBackup, file/VM) and write audit-ready evidence.
Enforce the PTG backup standard: 3-2-1 with a cloud copy, minimum retention, encryption, and no synthetic fulls that overrun storage.
Run the half-yearly backup audit and present the findings.
Maintain VSPC: onboarding and offboarding, report recipients, and keeping the managed list matched to billing.
RMM alert remediation (NinjaOne)
Work the open NinjaOne condition-alert queue to zero, fixing the root cause so the same device stops re-alerting.
Antivirus/EDR health: AV missing, disabled or not updating, and unsupported AV installed.
Low disk space on workstations and servers: cleanup, profile and temp clearing, and escalating hardware upgrades.
Server and virtualization alerts: VMware/Hyper-V datastore free space, stale VM checkpoints, hardware sensors, high memory, and critical services down (e.g. ADSync).
Device-offline alerts: confirm real outages and separate them from platform false positives.
Tune alert conditions and thresholds so alerts are actionable, not noise.
Patching and vulnerabilities
Remediate failed patches in NinjaOne: Windows cumulative/security updates and third-party applications, including stuck or half-finished patch runs and pending reboots.
Install out-of-band updates manually when policy can't approve them.
Remediate vulnerability-scanner findings: patch, upgrade, reconfigure or remove the affected software, then verify the finding clears.
Report patch compliance and the open vulnerability backlog weekly.
General
Own Halo tickets from alert to close, with clear notes.
Produce the daily, weekly and monthly reports.
Work CMMC client systems under their access controls.
Keep credentials and runbooks current in Hudu.
Requirements
What you'll bring
3+ years in an MSP or IT ops role.
Hands-on Veeam B&R: jobs, repositories, backup copy, agents and SureBackup.
Windows patch troubleshooting: failed cumulative updates, servicing stack and component store repair (DISM/SFC), WSUS/Windows Update logs, and third-party patching.
Vulnerability remediation from scanner findings, with a record of verifying the fix.
Windows Server, Hyper-V/VMware, storage (NAS, iSCSI) and basic networking.
Experience with object storage targets (Backblaze, Azure Blob, Cloud Connect), including immutability and quotas.
Clear writing for both tickets and client reports.
Disciplined credential handling. Must be able to pass a background check for CMMC access.