Security Tool Engineer - Senior Windows Systems Administrator
Security Tool Engineer - Senior Windows Systems Administrator
Position Overview
The Senior Windows Systems Administrator runs and secures the Windows Server and desktop environment that supports HHS security tools (Windows Server 2016–2022, Windows 10/11), and applies the security tooling, automation and project leadership expected of a Security Tool Engineer IV.
Key Responsibilities
Design, implement and maintain Windows Server 2016, 2019 and 2022 environments, keeping them reliable, secure and well-tuned.
Administer on-premises Active Directory, Group Policy Objects, user account management, DHCP, DNS, Certificate Services and IPv4/IPv6 addressing.
Manage and optimize Active Directory and IIS configurations to meet operational requirements.
Build and support Windows Server Failover Clustering (WSFC).
Write, maintain and troubleshoot advanced PowerShell and PowerCLI scripts that automate repetitive work, and run administration and O&M from the command line.
Design and operate a disaster recovery and backup strategy using hybrid cloud solutions such as CommVault Metallic and Cohesity.
Deploy and troubleshoot OS updates, upgrades, security patches and software on Windows 10/11 desktops and Windows Servers, physical and virtual.
Troubleshoot LAN/WAN connectivity, throughput and related network problems.
Lead and coordinate initiatives, managing requirements, schedules and actions so projects deliver on time.
Work with Security, Infrastructure and Operations teams to develop and manage automation scripts that improve security operations.
Maintain and troubleshoot existing security infrastructure alongside server and networking teams.
Implement and manage advanced solutions for infrastructure management, security operations and threat intelligence, integrated with existing security tools.
Troubleshoot information security systems and give strategic guidance on extending their capabilities.
Keep assessing and improving frameworks and stay current on security and automation technologies.
Keep detailed documentation of system designs, configurations, processes and service records.
Analyze implementation requirements, modify existing systems and prepare specifications from customer requests.
Collaborate with cross-functional teams, and lead and mentor junior team members.
Take part in a 24/7/365 on-call rotation.
Required Qualifications
About 8+ years of information security work experience, including hands-on Windows administration.
Windows administration across on-premises Active Directory, GPOs, user account management, DHCP, DNS, TCP/IP, IPv4/IPv6, Certificate Services and WSFC.
Administration of Windows Server 2016–2025 and Windows 10/11 in physical and virtualized environments.
Advanced PowerShell and PowerCLI scripting, plus scripting in Python, Bash or similar for security automation.
Backup and disaster recovery design with hybrid cloud tools such as CommVault Metallic and Cohesity.
Patch, update and upgrade deployment across Windows desktops and servers.
Ability to lead initiatives and to troubleshoot LAN/WAN and throughput issues.
Knowledge of or familiarity with CIS Control 4, NIST SP 800-53 Revision 5 and DISA STIGs for hardening.
InfoSec certification is required; Microsoft certifications are preferred.
Education: a computer science, CIS, information security or IT bachelor's degree (or higher) with about 8+ years of information security experience, or an equivalent combination of education, certifications and IT experience.
Work authorization: U.S. work authorization and E-Verify eligibility.
Ability to obtain an HHS public trust determination, with elevated-privilege access expected to need a high-risk (Tier 4) investigation.
Preferred certification: current Microsoft certification such as Windows Server Hybrid Administrator Associate, Identity and Access Administrator Associate or Cybersecurity Architect Expert.
The actual base salary offered will be determined based on a variety of factors, including, but not limited to, the candidate’s relevant years and depth of experience, skills and qualifications, education, certifications, internal equity, and the specific requirements of the position. Candidates should not assume they will be offered the top of the posted range, as compensation is based on the individual qualifications and overall fit for the role.
Salary Range
$130,000—$150,000 USD