Windows System Engineer

Overview

Windows System Engineer supporting the engineering, operation, maintenance, and modernization of secure, mission-critical enterprise Windows Server and hybrid cloud infrastructure for a Federal Civil customer in the Washington, DC metropolitan area. Partners with the Senior Windows System Engineer to implement, maintain, and troubleshoot Windows, virtualization, and cloud solutions across on-premises and hybrid environments.

What you'll do

• Design, implement, and administer Windows Server environments (2012, 2016, 2019, 2022), Microsoft Azure, AWS, and Microsoft 365, along with Active Directory, DNS, DHCP, Hyper-V, PKI, Group Policy (GPO), and file/print services.
• Partner with the Senior Windows System Engineer to write, read, test, and implement PowerShell scripts, configuration templates, and process improvements that automate administrative tasks.
• Execute patching, security configuration activities, and remediation tasks to keep servers and databases up to date.
• Collaborate with cybersecurity teams to uphold compliance standards using CIS Benchmarks and DISA STIG frameworks.
• Support the planning, deployment, and lifecycle replacement of server infrastructure under senior engineering guidance.
• Assess, install, and recommend innovative technologies across databases, systems management, virtualization, network storage, and security measures.
• Maintain a comprehensive understanding of Client/Server architecture to deploy solutions securely within internal and external production environments.
• Continuously monitor system health, availability, performance, and capacity trends; gather operational metrics and implement approved improvements.
• Analyze and troubleshoot complex technical issues across multiple interconnected systems, implementing approved corrective actions and escalating complex architectural challenges to the Senior Windows System Engineer as needed.
• Manage incidents, service requests, problems, and change tickets throughout their lifecycle, ensuring technical accuracy, thorough documentation, and strict adherence to SLAs.
• Participate in incident investigations by gathering diagnostic data, identifying root causes, recommending solutions, and executing corrective and preventive tasks.
• Create, update, and maintain system diagrams, configuration records, technical implementation plans, disaster recovery procedures, and standard operating procedures (SOPs).
• Collaborate within a hybrid, multi-location operations team alongside engineering groups, security teams, vendors, and service providers to coordinate maintenance windows and execute technical tasks.
• Communicate technical information, status updates, and project progress clearly to Executives, Managers, Peers, and Customers.

What you'll need

• U.S. Citizen capable of obtaining and maintaining a Public Trust clearance prior to start.
• Bachelor's degree and 4 years' experience; additional years of experience accepted in lieu of a degree.
• Hands-on experience designing, implementing, administering, and troubleshooting complex enterprise Windows Server infrastructure (Windows Server 2012, 2016, 2019, and 2022) in production environments.
• Competent in essential administration concepts around Active Directory, Group Policy (GPO), DNS, DHCP, and Public Key Infrastructure (PKI).
• In-depth knowledge of scripting and task automation using PowerShell.
• Hands-on experience supporting virtual computing platforms (such as VMware/vSphere) and familiarity or hands-on experience administering Windows Server workloads in hybrid cloud environments (such as AWS EC2 or Microsoft Azure).
• Hands-on experience configuring, maintaining, and hardening Windows Server security baselines, executing monthly OS patching, and performing vulnerability remediation activities.
• Demonstrated ability to troubleshoot multi-system server and application issues, assist with root cause analysis (RCA), and implement approved corrective actions.
• Experience executing server infrastructure changes, OS upgrades, and system migrations in production environments following established change control procedures.
• Experience updating and maintaining accurate system architecture diagrams, technical documentation, configuration records, and standard operating procedures (SOPs).
• Strong interpersonal and communication skills, with experience working alongside senior engineers, cross-functional teams, vendors, and stakeholders to resolve operational issues.
• Ability to obtain a DoD 8140 / IAT Level II baseline certification (e.g., Security+ CE, CySA+, GSEC, SSCP).

Nice to have

• Active certifications in Microsoft server or cloud technologies (e.g., Microsoft Certified: Windows Server Hybrid Administrator Associate, Azure Administrator Associate, or Endpoint Administrator).
• Active CompTIA Security+ CE certification (or equivalent DoD 8140 / IAT Level II baseline certification).
• Active AWS and/or Microsoft Azure certifications (e.g., AWS Certified SysOps Administrator, Solutions Architect, or Azure Solutions Architect).
• Hands-on experience administering and integrating Microsoft Entra ID (formerly Azure AD), including hybrid identity synchronization, conditional access, and enterprise authentication.

Details

• Location: remote; candidates within driving distance of the Washington, DC area are preferred.
• Live video interview with cameras on at all times; photo taken for identity verification.