Windows Systems Engineer

As the Senior Windows Systems Engineer, you will provide senior technical support for a federal agency’s Windows platform. You will design, engineer, configure, deploy, maintain, monitor, and modernize Windows components and the environment within the IT infrastructure. This is a hands-on engineering role with design ownership where you will contribute to how the platform is built, hardened, automated, recovered, and maintained, while also mentoring the administrators who operate it daily., * Design, engineer, configure, and maintain the Windows server environment.

• Serve as an escalation point for issues beyond Tier 1 and Tier 2 support.
• Configure, maintain, and upgrade physical and virtual server installations, including OS, hardware, and network configurations.
• Develop and enforce Azure governance frameworks, including Azure Policy, Management Groups, and Blueprints.
• Manage Microsoft Entra ID / Azure AD for centralized identity, single sign-on (SSO), and role-based access control (RBAC).
• Implement and manage automation tasks and Infrastructure-as-Code tools and templates.
• Design, deploy, and maintain Active Directory Certificate Services (AD CS) / PKI environments.
• Create, monitor, and resolve change requests and trouble tickets for Windows servers and applications.
• Review incoming ServiceNow tickets and work to resolve incidents and service requests as assigned.
• Actively participate in reviewing and improving operational processes, procedures, technology, and documentation.

• Bachelor’s degree in computer science, information systems, engineering, or a related technical field, and 8+ years of progressive Windows Administration and engineering experience OR Master’s degree in a related field and 6+ years of relevant experience. Equivalent additional experience may be substituted for the degree
• 6+ years of experience in cloud operations, engineering, or a related field, with 3+ years at a senior level with design and architecture ownership for an enterprise Windows environment.

Technical Skills:

• Expertise in Microsoft Azure architecture, Microsoft Entra ID, and on-prem interoperability.
• Experience with orchestration tools (Ansible, Chef, or Puppet) and CI/CD pipelines.
• Ability to script in Python, Bash, Visual Basic, or PowerShell.
• Hands-on experience with networking concepts (DNS, VPNs, load balancers) and cloud-based networking.
• Familiarity with federal compliance standards (NIST, FISMA, FedRAMP) and CIS 4.0 controls.
• Experience with ITIL4 and ServiceNow.

Certifications:

• Microsoft Certified Azure Administrator Associate (AZ-104).
• A current baseline certification appropriate for Intermediate System Administrator roles (e.g., Security+, GSEC, SSCP, or equivalent).

Work Environment

• Work Schedule: Core hours are Monday through Friday, 8:00 a.m. to 5:00 p.m. EST, with occasional overtime, weekend work, or after-hours response.
• Physical Requirements: Ability to lift 50+ pounds.

PLEASE NOTE: Candidates must be able to obtain and/or maintain a Public Trust clearance as a condition and continuation of employment.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at