Security Tool Engineer - Senior Windows Systems Administrator

Security Tool Engineer - Senior Windows Systems Administrator

Position Overview

The Senior Windows Systems Administrator runs and secures the Windows Server and desktop environment that supports HHS security tools (Windows Server 2016–2022, Windows 10/11), and applies the security tooling, automation and project leadership expected of a Security Tool Engineer IV.

Key Responsibilities

• Design, implement and maintain Windows Server 2016, 2019 and 2022 environments, keeping them reliable, secure and well-tuned.
• Administer on-premises Active Directory, Group Policy Objects, user account management, DHCP, DNS, Certificate Services and IPv4/IPv6 addressing.
• Manage and optimize Active Directory and IIS configurations to meet operational requirements.
• Build and support Windows Server Failover Clustering (WSFC).
• Write, maintain and troubleshoot advanced PowerShell and PowerCLI scripts that automate repetitive work, and run administration and O&M from the command line.
• Design and operate a disaster recovery and backup strategy using hybrid cloud solutions such as CommVault Metallic and Cohesity.
• Deploy and troubleshoot OS updates, upgrades, security patches and software on Windows 10/11 desktops and Windows Servers, physical and virtual.
• Troubleshoot LAN/WAN connectivity, throughput and related network problems.
• Lead and coordinate initiatives, managing requirements, schedules and actions so projects deliver on time.
• Work with Security, Infrastructure and Operations teams to develop and manage automation scripts that improve security operations.
• Maintain and troubleshoot existing security infrastructure alongside server and networking teams.
• Implement and manage advanced solutions for infrastructure management, security operations and threat intelligence, integrated with existing security tools.
• Troubleshoot information security systems and give strategic guidance on extending their capabilities.
• Keep assessing and improving frameworks and stay current on security and automation technologies.
• Keep detailed documentation of system designs, configurations, processes and service records.
• Analyze implementation requirements, modify existing systems and prepare specifications from customer requests.
• Collaborate with cross-functional teams, and lead and mentor junior team members.
• Take part in a 24/7/365 on-call rotation.

Required Qualifications

• About 8+ years of information security work experience, including hands-on Windows administration.
• Windows administration across on-premises Active Directory, GPOs, user account management, DHCP, DNS, TCP/IP, IPv4/IPv6, Certificate Services and WSFC.
• Administration of Windows Server 2016–2025 and Windows 10/11 in physical and virtualized environments.
• Advanced PowerShell and PowerCLI scripting, plus scripting in Python, Bash or similar for security automation.
• Backup and disaster recovery design with hybrid cloud tools such as CommVault Metallic and Cohesity.
• Patch, update and upgrade deployment across Windows desktops and servers.
• Ability to lead initiatives and to troubleshoot LAN/WAN and throughput issues.
• Knowledge of or familiarity with CIS Control 4, NIST SP 800-53 Revision 5 and DISA STIGs for hardening.
• InfoSec certification is required; Microsoft certifications are preferred.
• Education: a computer science, CIS, information security or IT bachelor's degree (or higher) with about 8+ years of information security experience, or an equivalent combination of education, certifications and IT experience.
• Work authorization: U.S. work authorization and E-Verify eligibility.
• Ability to obtain an HHS public trust determination, with elevated-privilege access expected to need a high-risk (Tier 4) investigation.
• Preferred certification: current Microsoft certification such as Windows Server Hybrid Administrator Associate, Identity and Access Administrator Associate or Cybersecurity Architect Expert.