Enterprise Engineer I

The Enterprise Engineer I is a hands-on technical role responsible for supporting and optimizing a predominantly Windows-based enterprise environment (Windows 11 and Windows Server 2022/2025). This position drives secure, repeatable, and efficient operations across hybrid infrastructure platforms, including Azure, VMware, and Hyper-V.

The primary focus of the role includes Azure administration, infrastructure automation using Ansible and PowerShell, and virtualization management and automation within vSphere and Hyper-V environments. Secondary responsibilities include supporting and enhancing monitoring and endpoint management platforms such as Zabbix and SCCM/Intune, as well as contributing to zero-touch provisioning and autonomous infrastructure initiatives., * Windows automation at scale: Build and maintain Ansible roles/playbooks (via AWX) and PowerShell to provision, configure, harden, and remediate Windows servers/desktops (idempotent, version-controlled, secret-safe).

• vSphere/Hyper-V automation: Deploy from templates, customize/rename hosts, join domain, install software, handle reboots with verification, and manage capacity/lifecycle using Ansible + vSphere APIs and PowerShell/Hyper-V cmdlets.
• Azure integration: Automate Azure resource changes (CLI/PowerShell) and hybrid identity tasks tied to AD/Entra; enforce RBAC via code.
• AD/GPO engineering: Operate AD DS, DNS/DHCP, GPO/gMSA; codify and enforce baselines (RDP, password/lockout, firewall, registry) with compliance evidence.
• Patching & compliance: Orchestrate Windows patch workflows and post-patch reviews; track drift and remediation (SCCM/Intune).
• Observability & DR: Integrate automation with Zabbix for actionable alerts and with ServiceNow for tickets; script Zerto/Cohesity/Wasabi runbooks and test drills.
• Zero-touch: Contribute to Autopilot/Intune zero touch deployments of endpoints.

• 3-5 years in enterprise Windows engineering (desktop/server) with solid Ansible, PowerShell, vSphere/Hyper-V experience.
• Solid AD/GPO knowledge; ability to translate security baselines into code and support audit requirements.
• Habitual use of Git, CI-style testing, idempotence, least-privilege, and safe rollbacks.
• Good troubleshooting skills across WinRM, GPO/application of policy, networking, and virtualization.
• Preferred: Microsoft (Azure-focused), VMware VCP, or Hyper-V certifications; experience with Zerto, Cohesity, Wasabi, Zabbix, SCCM/Intune.

The physical demands described here are representative of those that must be met by an employee to perform the essential functions of this job. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions.

• The employee must be able to operate computer and other office equipment.
• The noise level in the work environment is usually quiet and occasionally moderate.

In addition to competitive wages, TAMKO offers a comprehensive benefits package, including Group Health and Life Insurance, Vision and Dental Insurance, a Flexible Benefits Plan, a 401(k) Retirement Plan with company match, a Profit Sharing Retirement Plan, and other valuable benefits.

This job description is intended to describe the general nature and level of work expected. It is not intended to be an exhaustive list of all responsibilities, duties, or skills required and is subject to change at any time based on business needs.

TAMKO Building Products LLC is one of the nation’s largest independent manufacturers of residential and commercial roofing products, waterproofing products, and related building materials. Headquartered in Galena, Kansas, TAMKO has been committed to innovation, quality, and customer service for over 80 years. Our success is driven by our people - individuals who take pride in their work, share an ownership mindset, and are dedicated to delivering excellence. At TAMKO, we strive to foster a safe, supportive, and rewarding work environment where employees can grow and succeed.