> Markdown version of [/jobs/ext/3991241-enterprise-systems-engineer-ad-hardening](https://www.wearedevelopers.com/jobs/ext/3991241-enterprise-systems-engineer-ad-hardening). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Enterprise Systems Engineer (AD & Hardening)

- **Company:** Stellar Professionals
- **Location:** Columbia, SC, United States (Remote available)
- **Experience:** Expert
- **Contract:** Contract
- **Skills:** Microsoft Windows, Active Directory, Application Packaging, Systems Engineering, Microsoft Azure, Issue Tracking Systems, Windows Servers, Public Key Infrastructure, Windows PowerShell, Scripting, Enterprise Software Applications, Patch Management, CIS Benchmarks
- **Published:** October 28, 2026
- **Apply:** https://www.dice.com/job-detail/c6b8b5a8-4b75-4d77-8a3d-3f931b339d13

## About the Role

* Active Directory (5+ years)
 * Group Policy / GPO (5+ years)
 * PowerShell Automation (5+ years)
 * Windows Server Administration (5+ years)
 * CIS Benchmarks / Hardening (3+ years)
 * Azure DevOps / Ticketing Systems

< data-path-to-node="13">Preferred / Bonus Skills

 * Advanced Orchestration & Task Automation
 * Endpoint & OS Patch Management
 * Application Packaging (e.g., PDQ Deploy)
 * PKI & AD Certificate Services

## Description

We are seeking an experienced Senior On-Prem Systems Engineer to support enterprise modernization, automation, and infrastructure security., * Active Directory & GPO: Manage AD backlog, permissions, delegation, and Group Policy lifecycle.

 * Automation & Scripting: Design and execute PowerShell scripts to automate repetitive operational tasks and administrative workflows.
 * System Hardening: Implement CIS benchmarks across Windows endpoints via GPO and scripting.
 * Server Lifecycle Management: Build, patch, upgrade, troubleshoot, and decommission Windows Servers at scale.
 * Work Tracking & SOPs: Log all work in Azure DevOps, follow formal change control, and maintain runbooks/SOPs.