Hybrid Windows Systems Engineer - AD, 365 & Security

STN, Inc.; Pleasanton, Northern (CA, KY); Hybrid; USD 175,000 - 195,000; Full time

Benefits offered by this job

Health Coverage – Medical, Dental & V​

401(k) Plan

Unlimited Paid Time Off

Holidays Paid

Cell Phone Allowance

Job summary

STN in Pleasanton, CA is seeking a Windows Systems Engineer (MTS) to own the day-to-day health, security, and lifecycle of Windows Server, Active Directory, and Microsoft 365 environments for its managed-services customers.

You will plan domain controller upgrades, write PowerShell for provisioning and automation, manage patch cadence, MFA rollouts, backup tests, and maintain runbooks and PCI/HIPAA evidence.

Qualifications

• 5+ years hands-on with Windows Server and Active Directory, including DNS/DHCP and Group Policy.
• Ability to perform domain controller upgrades or promotions from a documented plan, with pre-checks and rollback.
• Certificate management experience (AD CS or PKI) and lifecycle management for SSL/TLS certificates.
• PowerShell proficiency for scripting and automation; familiarity with Python/Ansible/Terraform is a plus.
• Strong security hygiene: patch cadence, MFA, Conditional Access, and vulnerability remediation.
• Experience in PCI- and/or HIPAA-regulated environments and audit evidence.
• M365 and Entra ID administration including Exchange Online, licensing, mailbox moves, and CA policy.
• Backup and restore operations with testing and escalation under RPO/RTO.
• Virtualization experience with VMware vSphere or Hyper-V, including VM lifecycle and snapshots.
• Clear written communication and multi-customer documentation; Bachelor's degree or equivalent.

Responsibilities

• Administer Windows Servers across multiple customer environments (DNS, DHCP, GPO, file/print, cert services).
• Plan AD work: domain controller upgrades, promotions/demotions, OS upgrades, replication troubleshooting.
• Develop and maintain PowerShell scripts for provisioning, reporting, and automation.
• Manage Microsoft 365 and Entra ID (Exchange Online, mail flow, licensing, mailbox moves, CA).
• Own patch cadence across servers/endpoints and remediate vulnerabilities.
• Support MFA and Conditional Access rollouts and identity hygiene initiatives.
• Monitor backups and replication; test restores and escalate failures per RPO/RTO.
• Build, standardize, and retire Windows servers across virtualization and cloud IaaS.
• Operate VMware vSphere/Hyper-V: health, sizing, snapshots, patching within maintenance windows.
• Serve as L3 escalation for service desk, root-cause analysis, and runbook improvements.
• Follow change management and maintain customer documentation and baselines.
• Provide evidence for PCI/HIPAA reviews including patch reports and access reviews.

Skills

Windows Server

Active Directory

PowerShell

Microsoft 365/Entra ID

Patch management

Security & compliance

VMware/Hyper-V

Documentation

Education

Bachelor’s degree in information technology or computer science

Tools

VMware vSphere

Hyper-V

Cohesity

Veeam

NinjaOne

Job description

STN in Pleasanton, CA is seeking a Windows Systems Engineer (MTS) to own the day-to-day health, security, and lifecycle of Windows Server, Active Directory, and Microsoft 365 environments for its managed-services customers.

You will plan domain controller upgrades, write PowerShell for provisioning and automation, manage patch cadence, MFA rollouts, backup tests, and maintain runbooks and PCI/HIPAA evidence.