Systems Engineer III - Hyper-V & Defender Endpoint

Systems Engineer III - Windows - Hyper-V & Defender, Entra, Intune, AD Location: Lynnwood, WA -100% remote in the US. This is a remote first role with occasional travel to HQ in greater Seattle. Pay: 120k - 145k DOE**We are looking for those with strong Windows domain (AD, Intune, Entra, On-prem, SSCM, Defender) as well as strong knowledge in Hyper-V and PowerShell, background in security is a plus. The ideal candidate loves solving complex problems and has engineering passion projects outside of work. We're looking for inquisitive minds that want to jump in and join a smaller close-knit team of engineers.** Position OverviewWe are seeking an experienced Systems Engineer III - Windows to design, deploy, and maintain enterprise Windows infrastructure across on-premises and cloud environments. This role focuses on advanced Windows Server management, Active Directory and identity security, endpoint engineering, automation, and ensuring secure, resilient hybrid infrastructure. The ideal candidate will drive operational excellence, lead complex troubleshooting and incident response, and contribute to security and compliance initiatives.Key ResponsibilitiesDesign, deploy, and maintain Windows Server environments across on-prem, cloud, and hybrid architectures.Manage Active Directory, Group Policy, DNS, DHCP, and identity services with a focus on identity security and access controls.Implement and manage endpoint engineering solutions (SCCM/ConfigMgr, Intune, or equivalent) to secure and maintain user devices.Develop automation and scripting (PowerShell, Python) to streamline system administration, deployments, and configuration management.Work with cloud platforms (Azure, AWS) to integrate Windows workloads, enable hybrid identity, and apply cloud security best practices.Administer virtualization platforms (HyperV, VMware) and manage VM lifecycle, resource allocation, and performance tuning.Monitor infrastructure health and security using SIEM and monitoring tools; lead incident detection, triage, and response activities.Implement security and compliance controls, perform vulnerability remediation, and support audits and policy enforcement.Collaborate with network, security, and application teams to ensure reliable, secure infrastructure integrations.Create and maintain operational runbooks, documentation, and change records; mentor junior engineers and participate in on-call rotations.QualificationsBachelors degree in Computer Science, Information Technology, or equivalent experience, or relevant technical certification.5+ years of hands-on experience managing enterprise Windows Server environments in on-prem and cloud/hybrid deployments.Strong experience with Active Directory, Group Policy, DNS, DHCP, and identity management (Azure AD, AD FS, MFA).Proven skills in Defender Endpoint management and engineering (SCCM/ConfigMgr, Intune, or similar).Proficient in automation and scripting using PowerShell and experience with configuration management tools.Experience with cloud platforms and hybrid identity/security patterns.Knowledge of virtualization technologies (Hyper-V) and VM lifecycle management.Familiarity with security and compliance frameworks, vulnerability management, and hardening Windows systems.Experience with monitoring, logging, and incident response tools.Relevant certifications preferred: Microsoft Certified: Azure Administrator/Windows Server Hybrid, MCSE, CISSP, Security+, CCNA, or equivalent.BenefitsBase salary: $120,000 - $145,000 DOE