Security Tool Engineer - Senior Windows Systems Administrator

Security Tool Engineer - Senior Windows Systems AdministratorThe Senior Windows Systems Administrator runs and secures the Windows Server and desktop environment that supports HHS security tools (Windows Server 2016–2022, Windows 10/11), and applies the security tooling, automation and project leadership expected of a Security Tool Engineer IV.Key ResponsibilitiesDesign, implement and maintain Windows Server 2016, 2019 and 2022 environments, keeping them reliable, secure and well-tuned.Administer on-premises Active Directory, Group Policy Objects, user account management, DHCP, DNS, Certificate Services and IPv4/IPv6 addressing.Manage and optimize Active Directory and IIS configurations to meet operational requirements.Build and support Windows Server Failover Clustering (WSFC).Write, maintain and troubleshoot advanced PowerShell and PowerCLI scripts that automate repetitive work, and run administration and O&M from the command line.Design and operate a disaster recovery and backup strategy using hybrid cloud solutions such as CommVault Metallic and Cohesity.Deploy and troubleshoot OS updates, upgrades, security patches and software on Windows 10/11 desktops and Windows Servers, physical and virtual.Troubleshoot LAN/WAN connectivity, throughput and related network problems.Lead and coordinate initiatives, managing requirements, schedules and actions so projects deliver on time.Work with Security, Infrastructure and Operations teams to develop and manage automation scripts that improve security operations.Maintain and troubleshoot existing security infrastructure alongside server and networking teams.Implement and manage advanced solutions for infrastructure management, security operations and threat intelligence, integrated with existing security tools.Troubleshoot information security systems and give strategic guidance on extending their capabilities.Keep assessing and improving frameworks and stay current on security and automation technologies.Keep detailed documentation of system designs, configurations, processes and service records.Analyze implementation requirements, modify existing systems and prepare specifications from customer requests.Collaborate with cross-functional teams, and lead and mentor junior team members.Take part in a 24/7/365 on-call rotation.Required QualificationsAbout 8+ years of information security work experience, including hands-on Windows administration.Windows administration across on-premises Active Directory, GPOs, user account management, DHCP, DNS, TCP/IP, IPv4/IPv6, Certificate Services and WSFC.Administration of Windows Server 2016–2025 and Windows 10/11 in physical and virtualized environments.Advanced PowerShell and PowerCLI scripting, plus scripting in Python, Bash or similar for security automation.Backup and disaster recovery design with hybrid cloud tools such as CommVault Metallic and Cohesity.Patch, update and upgrade deployment across Windows desktops and servers.Ability to lead initiatives and to troubleshoot LAN/WAN and throughput issues.Knowledge of or familiarity with CIS Control 4, NIST SP 800-53 Revision 5 and DISA STIGs for hardening.InfoSec certification is required; Microsoft certifications are preferred.Education: a computer science, CIS, information security or IT bachelor's degree (or higher) with about 8+ years of information security experience, or an equivalent combination of education, certifications and IT experience.Work authorization: U.S. work authorization and E-Verify eligibility.Ability to obtain an HHS public trust determination, with elevated-privilege access expected to need a high-risk (Tier 4) investigation.Preferred certification: current Microsoft certification such as Windows Server Hybrid Administrator Associate, Identity and Access Administrator Associate or Cybersecurity Architect Expert.Salary Range $130,000 —$150,000 USDElectrosoft is an Equal Opportunity Employer/Veterans/Disabled Electrosoft