Senior Windows Engineer/Admin

We are looking for a Senior Windows Systems Engineer to join our IT infrastructure team. This role is ideal for a seasoned professional who thrives in complex enterprise environments and is passionate about system stability, automation, and security compliance. You’ll be managing a large-scale Windows Server infrastructure (3000+ servers) while playing a key role in patching, vulnerability management, and system optimization. This is a hybrid/onsite position based in San Antonio, TX. Roles & Responsibilities: Windows Server Management: Administer, maintain, and troubleshoot Windows Server 2016, 2019, and 2022 across large enterprise systems. Patch Management: Lead Microsoft’s monthly patching cycles using SCCM. Create, test, and deploy server packages (no endpoint management). Vulnerability Remediation: Identify and address system vulnerabilities. Work toward raising compliance benchmarks (e.g., improving from 60% to 70%). Automation & Scripting: Develop PowerShell scripts for automation-monitoring services, generating patch reports, and tracking compliance. Endpoint Management: Use tools like Tanium and compare its effectiveness with SCCM in managing server environments. Security Collaboration: Partner with security teams to resolve real-time threats (e.g., CrowdStrike alerts) and support hardening initiatives. Cloud Integration: Work with hybrid cloud infrastructure (Azure, AWS)-focus on provisioning, patching, and cost optimization. ITSM & Compliance: Manage change tickets through ServiceNow, aligning with ITIL frameworks (Incident, Problem, Change Management). Client Interaction: Engage directly with clients, explain technical solutions clearly, and support decision-making with pros/cons analysis. Team Leadership: Handle escalations, resolve team conflicts, and support a collaborative, solution-oriented environment. Directory Services: Provide support for Active Directory, Group Policy, and authentication services.

8+ years of experience in Windows Systems Engineering in large-scale enterprise environments. Deep expertise with SCCM for server patching, deployment, and reporting. Strong knowledge of vulnerability management and server hardening practices. Proven ability to script and automate with PowerShell in real-world scenarios. Hands-on experience with Tanium, and comparative understanding with SCCM. Working knowledge of ServiceNow for ticketing and change control. Proficiency in managing Windows Server OS (2016/2019/2022). Familiarity with security compliance tools and enforcing security baselines. Exposure to Azure and AWS in hybrid environments. Strong interpersonal and communication skills-comfortable working with cross-functional teams and clients. Bonus Skills & Certifications: Experience with Ansible for configuration management is a plus. Microsoft Certified: Azure Administrator or Windows Server Hybrid Admin Associate. CompTIA Security+ or equivalent security certification. ITIL v4 Foundation Certification. Flexible work from home options available.