Systems Engineer

Systems Engineer

Herndon, VA

CB-SE-HRN-008

We are seeking an experienced Windows Automation & Patching Engineer to support multiple enterprise domains. This role is responsible for engineering, automating, and maintaining patching and configuration management solutions across a complex, heterogeneous IT environment spanning physical, virtual, and cloud-based systems.

The successful candidate will engineer automated solutions that simplify patch distribution, reduce manual effort, increase reliability, and support the organization's transition toward cloud-enabled operations. This includes developing and maintaining scripts, workflows, and infrastructure-as-code to enhance system management at scale.

Responsibilities:

Manage and automate patch deployment and configuration management across multiple domains and enclaves.

Develop automation solutions using PowerShell, Python, APIs, or orchestration frameworks to streamline system updates and administrative tasks.

Support hybrid and cloud patching capabilities using tools such as Azure Update Management, AWS Systems Manager (SSM), and SCCM/ConfigMgr.

Engineer improvements to the enterprise patching infrastructure and contribute to the design of a new automated update and hotfix distribution system.

Perform automation-driven server configuration, baseline enforcement, compliance reporting, and STIG/vulnerability remediation.

Provide Tier 3 troubleshooting and root-cause analysis for complex Windows systems.

Migrate, refactor, and modernize traditional server workloads to support cloud compatibility and virtualization strategies.

Monitor infrastructure performance, proactively identify issues, and implement automated remediation with minimal user impact.

Translate customer requirements into hardware/software specifications and perform system integration, verification, and validation.

Prepare technical documentation, diagrams, and patching process workflows for customer and team use.

Work independently in a fast-paced environment while maintaining strong communication and problem-solving skills.

Deliver strong customer service and collaborate effectively with technical teams.

Advanced PowerShell scripting

Experience with WSUS across multiple enclaves and in offline/air-gapped systems.

Familiarity with cloud patching tools (Azure Update Management, AWS SSM)

Familiarity with SCCM/ConfigMgr or similar enterprise patching tools

Experience with vulnerability remediation automation and STIG compliance workflows

Virtualization & Infrastructure

Experience with VMware (vSphere 4.x-6.x) and Microsoft Hyper-V (2016-2022)

Experience with commercial cloud providers including Azure, Google Cloud (GCP), and Oracle Cloud (OCI)

Professional Skills

Ability to prioritize and execute tasks effectively

Ability to work independently or within a team

Willingness and ability to learn new technologies quickly

Strong customer service and communication skills

Preferred Education, Experience, & Skills :

Cloud certifications (Azure/AWS)

Experience with automation/orchestration tools such as AWS Lambda

Experience with cloud-native monitoring tools (Azure Sentinel, CloudWatch) or Splunk automation

Experience creating enterprise-level documentation and architectural diagrams

Experience with DSC, CI/CD pipelines, GitHub/GitLab, Jenkins Pipeline

Experience with AWS services including VPC, EC2, ELB, S3, IAM, Security Groups, Fleet Manager, and EventBridge