**Immigration sponsorship is not available for this role. Applicants must be authorized to work for any employer in the United States without current or future visa sponsorship. This is a full-time onsite role based in Bentonville, Arkansas; remote and hybrid options are not available.**
Role summary:As a
Staff Systems and Infrastructure Engineer on APEX Vulnerability Management, you will be the team's technical lead for keeping the technology Walmart associates use secure. You will write the standards the team works from, partner with InfoSec on risk, and lead the response to urgent and actively exploited vulnerabilities across Mac and Windows computers, virtual desktops, devices, and collaboration tools. You will focus first on fixing the systems that should keep software patched, so most issues close without manual effort, and you will guide the engineers who own each area of the team's work.
About the team: APEX Vulnerability Management keeps the technology Walmart associates use every day secure, across hundreds of thousands of computers, virtual desktops, devices, and collaboration tools. We own vulnerability management for all of APEX, from setting standards to closing every finding. We start by fixing the systems that keep software patched, such as update services, auto-update, and our software delivery platforms, then remediate what remains and verify every fix stay fixed. We are a lean, hands on team that works across OS, hardware, collaboration, and security partners, using automation and AI to solve each problem once for every product.
What you'll do: - Write and maintain the remediation standards, baselines, and decision rules used across all APEX technology.
- Serve as InfoSec's technical partner on risk ratings and on prioritizing actively exploited vulnerabilities.
- Lead urgent and cross-team remediation, including critical findings with short policy deadlines.
- Work with OS, hardware, and telemetry teams to find and fix devices that are not patching.
- Give architecture input on our software delivery platforms so fixes become automated.
- Turn repeat fixes into runbooks, scripts, and self-healing automation.
- Mentor engineers and review the team's highest-risk changes.
What you'll bring: - 7+ years of experience in systems engineering and vulnerability management across large enterprise device fleets.
- Hands-on knowledge of endpoint management tools such as Intune, Jamf, SCCM, or Tanium.
- Strong knowledge of patch management, configuration management, and version control.
- Scripting skills in Python, PowerShell, or similar languages for automation.
- Ability to analyze vulnerability and telemetry data to set priorities.
- Experience writing technical standards and influencing teams you do not manage.
- Strong troubleshooting skills across operating systems, applications, and infrastructure.
Benefits:Benefits: Beyond our great compensation package, you can receive incentive awards for your performance. Other great perks include 401(k) match, stock purchase plan, paid maternity and parental leave, PTO, multiple health plans, and much more.
The above information has been designed to indicate the general nature and level of work performed in the role. It is not designed to contain or be interpreted as a comprehensive inventory of all responsibilities and qualifications required of employees assigned to this job. The full Job Description can be made available as part of the hiring process.
