> Markdown version of [/jobs/ext/3309869-windows-systems-engineer](https://www.wearedevelopers.com/jobs/ext/3309869-windows-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Windows Systems Engineer - **Company:** STN, inc. - **Location:** Pleasanton, CA, United States - **Experience:** Expert - **Salary:** $175,000.0 - $195,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Domain Controllers, Systems Engineering, JIRA, Microsoft Azure, CompTIA Security+, Data Stores, Dynamic Host Configuration Protocol, Software Debugging, Domain Name System (DNS), Hyper-V, Infrastructure as a Service (IaaS), Identity and Access Management, Python (Programming Language), Microsoft Office, System Center Configuration Manager, Windows Servers, Virtual Desktops, Public Key Infrastructure, Windows PowerShell, Ansible, Runbook, VMware VSphere, Software Vulnerability Management, Backup and Restore, SSL Certificate Management, Scripting, Microsoft InTune, Azure Security Center, Information Technology, Patch Management, Nessus, Veeam, Terraform, Qualys, Servicenow, Vulnerability Analysis - **Published:** September 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=4de928f6e88235da ## About the Role * 5+ years hands-on with Windows Server and Active Directory, covering DNS, DHCP, and Group Policy administration * Demonstrated ability to run a domain controller promotion or upgrade independently from a documented plan, including pre-checks, replication validation, and rollback * Certificate management experience: AD CS or another internal PKI, public SSL/TLS certificate lifecycle, and the renewal and expiry discipline that keeps customer services from failing on an expired certificate * PowerShell proficiency at the level of writing and debugging scripts, not only running scripts written by others - or equivalent automation depth in another tool (Python, Ansible, or Terraform) alongside working PowerShell * Working command of security and patch hygiene: patch cadence, endpoint protection, MFA and Conditional Access concepts, and the ability to read a vulnerability scan and act on it * Experience supporting PCI- and/or HIPAA-regulated customer environments and the change control and evidence discipline they require * Microsoft 365 and Entra ID administration, including Exchange Online, mail flow, licensing, mailbox moves, and Conditional Access * Backup and restore operations: job monitoring, test restores, and failure escalation - Cohesity or Veeam preferred, though the operational discipline matters more than the specific product * Hands-on virtualization experience with VMware vSphere or Hyper-V, including host and cluster operations, VM provisioning, snapshots, and resource management * Clear written communication and documentation habits suited to a multi-customer environment * Bachelor's degree in information technology, computer science, or equivalent experience Preferred * Experience in an MSP, MSSP, or multi-tenant hosting environment supporting several customers concurrently * Azure IaaS or Azure Virtual Desktop experience alongside on-premises virtualization * Endpoint and patch management platforms such as Intune, SCCM/MECM, or an RMM such as NinjaOne or Datto * Vulnerability management tooling (Nessus, Qualys, or Rapid7) and Microsoft Defender for Endpoint or Defender for Office 365 * Experience with RMM, PSA, or ITSM platforms such as NinjaOne, ConnectWise, HaloPSA, Jira Service Management, or ServiceNow * Hybrid identity experience including Entra Connect, tenant-to-tenant migrations, and Windows Server 2022/2025 upgrade cycles * Familiarity or working knowledge of using AI coding tools such as Claude or OpenAI to accelerate scripting and troubleshooting * Certifications such as AZ-104, MS-102, SC-300, AZ-800/801, CompTIA Security+, or MCSA/MCSE ## Description * Administer Windows Servers across multiple customer environments, including DNS, DHCP, Group Policy, file and print services, and certificate services * Plan and execute Active Directory work - domain controller upgrades, promotion and demotion, OS and functional-level upgrades, replication troubleshooting, and site and topology changes - from a documented plan * Write, debug, and maintain PowerShell for provisioning, reporting, bulk changes, and remediation, converting repeat manual work into reusable, reviewed automation * Administer Microsoft 365 and Entra ID: Exchange Online, mail flow and transport rules, licensing, mailbox moves and migrations, group and identity management, and Conditional Access policy * Own patch cadence across servers and endpoints, maintain endpoint protection coverage, and remediate vulnerability scan findings against agreed timelines * Support MFA and Conditional Access rollouts and maintain identity hygiene, including privileged account control, stale object cleanup, and access reviews * Monitor backup and replication jobs, run and evidence test restores, and escalate failures against RPO and RTO commitments * Build, standardize, and retire Windows servers across virtualization and cloud IaaS, including image standards and capacity planning * Operate the VMware vSphere or Hyper-V estate: host and cluster health, VM lifecycle and sizing, snapshots, datastore capacity, and hypervisor patching within approved maintenance windows * Act as the L3 escalation point for the service desk, drive root-cause analysis on recurring incidents, and feed fixes back into runbooks * Follow change management for all infrastructure work: risk assessment, maintenance windows, rollback plans, and post-change validation * Maintain runbooks, architecture and identity documentation, and configuration records, keeping customer-specific detail current * Produce and maintain evidence for PCI and HIPAA reviews, including patch reports, restore tests, access reviews, and configuration baselines ## Related Videos - [GitOps for the people](https://www.wearedevelopers.com/videos/461-gitops-for-the-people) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)