Systems Engineer III - Hyper-V & Defender Endpoint

We are seeking an experienced Systems Engineer III - Windows to design, deploy, and maintain enterprise Windows infrastructure across on-premises and cloud environments. This role focuses on advanced Windows Server management, Active Directory and identity security, endpoint engineering, automation, and ensuring secure, resilient hybrid infrastructure. The ideal candidate will drive operational excellence, lead complex troubleshooting and incident response, and contribute to security and compliance initiatives., * Design, deploy, and maintain Windows Server environments across on-prem, cloud, and hybrid architectures.

• Manage Active Directory, Group Policy, DNS, DHCP, and identity services with a focus on identity security and access controls.
• Implement and manage endpoint engineering solutions (SCCM/ConfigMgr, Intune, or equivalent) to secure and maintain user devices.
• Develop automation and scripting (PowerShell, Python) to streamline system administration, deployments, and configuration management.
• Work with cloud platforms (Azure, AWS) to integrate Windows workloads, enable hybrid identity, and apply cloud security best practices.
• Administer virtualization platforms (HyperV, VMware) and manage VM lifecycle, resource allocation, and performance tuning.
• Monitor infrastructure health and security using SIEM and monitoring tools; lead incident detection, triage, and response activities.
• Implement security and compliance controls, perform vulnerability remediation, and support audits and policy enforcement.
• Collaborate with network, security, and application teams to ensure reliable, secure infrastructure integrations.
• Create and maintain operational runbooks, documentation, and change records; mentor junior engineers and participate in on-call rotations.

• Bachelors degree in Computer Science, Information Technology, or equivalent experience, or relevant technical certification.
• 5+ years of hands-on experience managing enterprise Windows Server environments in on-prem and cloud/hybrid deployments.
• Strong experience with Active Directory, Group Policy, DNS, DHCP, and identity management (Azure AD, AD FS, MFA).
• Proven skills in Defender Endpoint management and engineering (SCCM/ConfigMgr, Intune, or similar).
• Proficient in automation and scripting using PowerShell and experience with configuration management tools.
• Experience with cloud platforms and hybrid identity/security patterns.
• Knowledge of virtualization technologies (Hyper-V) and VM lifecycle management.
• Familiarity with security and compliance frameworks, vulnerability management, and hardening Windows systems.
• Experience with monitoring, logging, and incident response tools.
• Relevant certifications preferred: Microsoft Certified: Azure Administrator/Windows Server Hybrid, MCSE, CISSP, Security+, CCNA, or equivalent.

Base salary: $120,000 - $145,000 DOE