Windows Systems Engineer

Key Tasks & Responsibilities

Infrastructure Engineering and Administration

• Design, build, configure, maintain, and optimize the enterprise SCCM/MECM infrastructure.
• Configure and manage boundaries, boundary groups, client settings, discovery methods, and content distribution strategies across the enterprise.
• Maintain SCCM/MECM database health, perform regular maintenance tasks, backups, and disaster recovery planning and testing.
• Plan and execute upgrades, cumulative updates, and hotfixes for the SCCM/MECM infrastructure.
• Monitor infrastructure health, performance, and capacity; troubleshoot site system failures, replication issues, and content distribution problems.
• Manage role-based access control (RBAC), security scopes, and overall hardening of the SCCM/MECM environment.
• Install, configure, administer, and troubleshoot management points, distribution points, software update points, service connection points, and other SCCM/MECM infrastructure components.
• Troubleshoot site system failures, database connectivity, replication issues, client communication failures, and content distribution problems.
• Maintain technical documentation, infrastructure diagrams, configuration baselines, and standard operating procedures for the SCCM/MECM environment.
• Install, configure, maintain, patch, and troubleshoot Microsoft Windows Server operating systems and associated services.
• Support the daily operation of enterprise Windows server infrastructure across physical and virtual environments.
• Assist with Active Directory, Group Policy, DNS, DHCP, and other Microsoft enterprise infrastructure services.
• Implement configuration changes, operating system updates, and infrastructure enhancements following established change management procedures.
• Monitor Windows Server performance, availability, system logs, and resource utilization.
• Assist with Windows Server workloads operating in VMware vSphere and vCenter environments.
• Coordinate with virtualization, storage, network, and backup teams to resolve infrastructure-related issues.

Security Hardening and Vulnerability Management

• Implement and maintain Windows systems and SCCM/MECM security hardening standards aligned with organizational and applicable federal cybersecurity requirements.
• Apply least-privilege principles to SCCM/MECM administrative access and infrastructure service accounts.
• Support the implementation of secure configurations and security baselines consistent with applicable NIST, CISA, and organizational requirements.
• Identify and remediate security vulnerabilities affecting Windows Server systems, SCCM/MECM infrastructure components, and associated services.
• Analyze vulnerability scan results, CVEs, security advisories, and configuration findings to determine appropriate remediation actions.
• Support remediation activities associated with applicable CISA Binding Operational Directives and federal cybersecurity requirements.
• Coordinate with cybersecurity teams to prioritize remediation efforts, validate corrective actions, and track outstanding vulnerabilities.
• Support security patch deployment, compliance monitoring, and reporting across managed Windows systems.
• Maintain documentation of security configurations, remediation activities, and system compliance status.

Patch Management, and Endpoint Configuration

• Support the development, testing, deployment, and maintenance of SCCM/MECM applications, packages, programs, task sequences, and configuration baselines.
• Configure and maintain software update points and associated Windows Server Update Services (WSUS) components.
• Manage software update synchronization, deployment packages, maintenance windows, and update distribution.
• Troubleshoot failed software deployments, update installations, client compliance issues, and content delivery failures.
• Support automated remediation of vulnerable, obsolete, unsupported, or prohibited software.
• Monitor deployment success rates, patch compliance, and endpoint configuration status.
• Support enterprise software lifecycle management and operating system upgrade activities.

Automation and Operational Improvement

• Develop, test, maintain, and troubleshoot PowerShell scripts supporting Windows Server and SCCM/MECM administration.
• Automate repetitive administrative activities, configuration checks, system maintenance, and operational reporting.
• Support automated vulnerability remediation and configuration compliance validation.
• Develop reusable scripts and documented procedures for common infrastructure management activities.
• Identify opportunities to improve infrastructure efficiency through automation and standardized processes.

Education & Experience

Education

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field (or equivalent experience)

Experience

• 5-8 years of experience in Windows system administration in enterprise environments
• Experience supporting VMware virtualized environments
• Experience with enterprise backup and monitoring systems

Certifications

• ITIL 4 Foundation
• Microsoft Certified: Windows Server Hybrid Administrator Associate or comparable Microsoft infrastructure certification.
• Microsoft endpoint management or Configuration Manager-related certifications.
• Microsoft Certified: Azure Administrator Associate.
• CompTIA Security+.
• VMware Certified Professional – Data Center Virtualization (VCP-DCV).

Security Clearance

• Applicants must be able to obtain a Public Trust clearance