Senior IT Infrastructure Cybersecurity Traveling Contractor

Job DescriptionSenior IT Infrastructure & Cybersecurity Consultant (Traveling Contractor)Position OverviewWe are seeking a highly skilled Senior IT Infrastructure & Cybersecurity Incident Remediation Consultant to provide on-demand onsite and remote support for clients across the United States. This contractor position requires a versatile IT professional with deep expertise in cybersecurity remediation, server engineering/administration, network engineering, incident response, and digital forensics.As client requests arise, the consultant will travel to customer locations throughout the 48 contiguous states to remediate infected clients. The ability to quickly contain, isolate and remediate the infected network will be required. After that part is done, you will need to rebuild secure and restore critical IT environments. Typical assignments range from one to two weeks and will include cybersecurity incidents, infrastructure failures, backup restorations, remediation efforts, vulnerability management, disaster recovery efforts, and system migrations.This role is ideal for an experienced professional who can remain calm during crises, independently manage complex technical challenges, preserve forensic evidence during the process, and securely rebuild compromised systems and networks.Key ResponsibilitiesCybersecurity Incident Response & RemediationRespond to active cybersecurity incidents and infrastructure compromises.Assess affected environments and develop remediation plans.Securely rebuild compromised systems without destroying critical forensic evidence.Perform vulnerability assessments and remediation activities using tools such as:NessusQualysMicrosoft security toolsDeploy security patches, CVE remediation, and system-hardening standards.Conduct threat hunting activities to identify Indicators of Compromise (IoCs) and Indicators of Attack (IoAs).Investigate suspicious activity and validate containment efforts.Support security recovery and post-incident restoration efforts.Infrastructure & Systems AdministrationRebuild enterprise servers, ESX hosts, virtualization restoration, and network environments.Build, configure, deploy, and support Windows servers from the ground up and/or from backupsAdminister and support:Domain ControllersVMware hosts and virtual environmentsVMs, data stores, snapshots, and VMDKsActive DirectoryFile ServersGroup PolicyDNSDHCPMicrosoft Hyper-VPerform routine preventative maintenance and infrastructure upgrades.Execute backup, recovery, and disaster recovery procedures.Create and maintain technical documentation, diagrams, procedures, and daily updates to system progress.Network Engineering & SecurityConfigure, manage, and support firewalls from multiple vendors, including Fortinet, SonicWall and Cisco.Troubleshoot and resolve complex network and system issues.Implement network security controls and system hardening measures.Administer and troubleshoot:TCP/IP networkingVLANsRouting and switchingSubnettingEnterprise connectivity issuesContinuously monitor infrastructure for performance and security concerns.Digital Forensics & Evidence PreservationPreserve digital evidence while supporting incident response activities.Capture and analyze volatile system data, including memory and active process information.Conduct live forensic triage of compromised systems.Perform bit-stream imaging and forensic evidence collection using tools such as:FTK ImagerEnCaseWindows Live ResponseOpen-source forensic utilitiesAnalyze event logs, network traffic, and forensic artifacts.Review:Windows Event LogsSystem logsSecurity logsWireshark packet capturesMaintain chain of custody and confidentiality requirements throughout investigations.Root Cause Analysis & Crisis ManagementLead technical response efforts during high-pressure incidents and critical outages.Analyze and identify root causes of security incidents, infrastructure failures, and system disruptions.Maintain operational effectiveness during emergency response situations.Develop corrective action plans to prevent recurring issues.Communicate findings and recommendations to technical and non-technical stakeholders.Client & Project SupportTravel to client locations nationwide on short notice.Work independently or collaboratively with internal and client teams.Manage multiple projects and competing priorities.Maintain professionalism, confidentiality, and adherence to project scope requirements.Provide exceptional customer service and technical leadership during onsite engagements.Required QualificationsBachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related field.Minimum 3-5 years of experience in:Cybersecurity Remediation (3+ years)Incident Response (3+ years)Systems Administration (10+ years)Network Administration (10+ years)Infrastructure Engineering (10+ years)Experience building and configuring servers from scratch.Hands-on experience with:Active DirectoryGroup PolicyDNSDHCPWindows ServerVMwareHyper-VStrong knowledge of:TCP/IPVLANsSubnettingEnterprise networkingExperience administering Fortinet, Cisco, SonicWall, or similar firewall platforms.Familiarity with forensic collection methodologies and incident response processes.Ability to analyze logs, packet captures, and system artifacts for investigative purposes.Strong troubleshooting, analytical, and critical-thinking abilities.Ability to work independently with minimal supervision.Excellent documentation and communication skills.Ability to travel extensively and respond to client requests within 24 hours.Ability to work flexible schedules, including evenings, weekends, and emergency response situations as needed.Preferred QualificationsMicrosoft Certifications (MCSA, MCSE, Azure Administrator, Azure Security)VMware Certified Professional (VCP)Cisco Certifications (CCNA, CCNP)Security Certifications such as:Security+Network+CySA+CISSPCISMCASP+GCIHGCFAGCFEPMP CertificationExperience with:Digital ForensicsThreat HuntingSecurity OperationsData Center MigrationsPhysical Incident ResponsePrevious consulting or professional services experience.Ideal Candidate:The ideal candidate is a highly adaptable infrastructure and cybersecurity professional who excels under pressure, can travel on short notice, has strong forensic and incident response capabilities, and possesses the technical expertise to remediate, secure, rebuild, and support complex enterprise environments across diverse client organizations. Great customer service skills are required to maintain a calm and professional atmosphere during these stressful times for our clients.\nCompany DescriptionThe Plexos Group, LLC employs the most experienced and innovative professionals in the field of disaster recovery management who have completed similar work for municipal, state, and federal agencies. Our project team has more than 100 years of combined experience in managing disaster recovery and has led disaster recovery programs in excess of $25 billion.Company DescriptionThe Plexos Group, LLC employs the most experienced and innovative professionals in the field of disaster recovery management who have completed similar work for municipal, state, and federal agencies. Our project team has more than 100 years of combined experience in managing disaster recovery and has led disaster recovery programs in excess of $25 billion.