Windows Systems Automation Engineer

What you'll do

• Automate Windows Server and workstation deployments using infrastructure-as-code tools like AWS CDK, CloudFormation, or Terraform.
• Develop advanced PowerShell scripts for provisioning, domain joins, configuration management, and software installation.
• Design and maintain Active Directory, DNS, Group Policy, and identity services for isolated environments.
• Build and maintain reusable Windows machine images through automated image pipelines.
• Apply STIGs and other security-hardening standards to all Windows servers and endpoints.
• Automate patching, vulnerability remediation, inventory management, and compliance reporting.
• Integrate systems with cloud services for secrets management, logging, monitoring, and remote administration.
• Troubleshoot complex issues involving Active Directory, authentication, networking, and application configurations.

What we're looking for

• High school diploma or GED.
• DoD 8570/8140 IAT Level II-compliant certification, such as Security+, CySA+, or GSEC.
• Ability to obtain an IAT Level III-compliant certification, such as SecurityX, CISSP, or CCNP Security, within 6 months of start date.
• 6+ years of experience administering or engineering Windows Server environments.
• 2+ years of experience supporting a U.S. Government or federal environment.
• Experience with Active Directory, DNS, Group Policy, and infrastructure-as-code tools like AWS CDK, CloudFormation, or Terraform.
• Experience developing PowerShell automation for configuration management, security auditing, and automated image pipelines.
• Knowledge of STIGs, NIST SP 800-53 controls, and Windows security-hardening practices.