Principal Windows Systems Administrator

Zaden Technologies, Inc.; Huntsville (AL); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Paid holidays

401k match

Bonus program

Health insurance 50% coverage

Career growth

Job summary

Zaden Technologies, Inc. is seeking a Principal Windows Systems Administrator to lead design, deployment, and management of Windows and Azure environments.

You will drive security hardening, STIG compliance, and cross-platform integration in support of defense and space systems. Responsibilities include AVD management, GPO policy enforcement, vulnerability remediation, WSUS patch orchestration, and IaC automation with DevSecOps collaboration.

Qualifications

• U.S. Citizenship and active secret security clearance.
• Bachelor's degree in Computer Science, IT, or related field, or equivalent practical experience.
• 7+ years of hands-on Windows system administration in enterprise environments.
• Advanced expertise in Azure Virtual Desktop deployment, management, and optimization.
• Proven experience with Group Policy creation, management, and troubleshooting in complex AD environments.
• Experience with security and vulnerability scanning tools (Nessus, Qualys, Rapid7) and remediation workflows.
• Proven track record managing WSUS or equivalent patch management solutions.
• Knowledge of networking protocols and Azure networking (VNets, NSGs, App Gateway).
• Experience implementing STIG compliance on Windows and Linux systems.

Responsibilities

• Design, deploy, and manage Azure Virtual Desktop environments.
• Manage GPOs across enterprise domains to enforce security policies.
• Conduct vulnerability scanning and remediation per compliance requirements.
• Oversee WSUS administration, patch testing, and enterprise-wide rollouts.
• Oversee Linux VMs in hybrid infra and integrate with Windows systems.
• Design and troubleshoot networking configurations (VPNs, subnets, firewalls, load balancers).
• Architect and maintain Azure infrastructure components (VNets, storage, resources).
• Lead STIG compliance efforts across mixed fleets.
• Provide technical leadership and mentorship to junior admins.
• Collaborate with DevSecOps to automate provisioning and configuration management.

Skills

Azure Virtual Desktop

Windows Server administration

Group Policy

Security vulnerability scanning

WSUS / Patch management

Networking (TCP/IP, DNS, VPN)

STIG compliance

PowerShell scripting

DevSecOps collaboration

Infrastructure as Code

DoD / federal IT experience

Education

Bachelor's degree in Computer Science/IT or related field

Equivalent practical experience

Tools

Terraform

ARM templates

Bicep

Docker

Kubernetes

Job description

Join Zaden Technologies on our mission to simplify the delivery and improve the utility of software products for our customers. At Zaden, we believe that our employees are our greatest assets. We hire the right candidates with the right skill sets who fit our culture of customer obsession, innovation, and continuous learning. We are our customer’s biggest advocate and we are looking for like-minded individuals who encompass these same ideals. It is important to us to offer you competitive pay and comprehensive benefits with opportunities that match your life and propel your career!

Zaden Technologies is seeking an experienced Principal Windows Systems Administrator to lead the design, implementation, and management of enterprise Windows infrastructure and Azure Virtual Desktop environments. This role will be critical in supporting our DevSecOps initiatives and ensuring secure, scalable, and efficient system operations for defense and space systems. The ideal candidate will bring deep expertise in Windows system administration, Azure cloud infrastructure, and security hardening while working in a fast-paced environment supporting mission-critical applications.

Role Responsibilities:

• Design, deploy, and manage Azure Virtual Desktop (AVD) environments including host pools, session hosts, and user profiles to support distributed workforce requirements
• Administer and optimize Group Policy Objects (GPOs) across enterprise domains to enforce security policies, user configurations, and system settings
• Conduct comprehensive security and vulnerability scanning using industry-standard tools, and remediate identified vulnerabilities in accordance with compliance requirements
• Manage Windows Update deployment strategies, including WSUS administration, patch testing, and enterprise-wide update rollouts with minimal operational disruption
• Oversee some Linux virtual machine environments within hybrid infrastructure, ensuring proper integration with Windows systems and maintaining cross-platform operational excellence
• Design and troubleshoot complex networking configurations including VPNs, subnets, routing, firewalls, and load balancers in both on-premises and Azure environments
• Architect and maintain Azure infrastructure components including virtual networks, storage accounts, resource groups, and identity management solutions
• Lead Security Technical Implementation Guide (STIG) compliance efforts by implementing and validating security baselines across a mixed fleet
• Provide technical leadership and mentorship to junior system administrators and contribute to the development of best practices and standard operating procedures
• Collaborate with DevSecOps teams to integrate infrastructure-as-code practices and automation workflows for system provisioning and configuration management

Required Qualifications:

• U.S. Citizenship and active secret security clearance
• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent practical experience
• 7+ years of hands-on experience in Windows system administration in enterprise environments
• Advanced expertise in Azure Virtual Desktop deployment, management, and optimization
• Demonstrated proficiency in Group Policy creation, management, and troubleshooting across complex Active Directory environments
• Strong experience with security and vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7) and remediation workflows
• Proven track record managing Windows Server Update Services (WSUS) or equivalent patch management solutions
• In-depth knowledge of networking protocols, architectures, and troubleshooting methodologies (TCP/IP, DNS, DHCP, VPN)
• Solid understanding of Azure cloud services, Azure networking (VNets, NSGs, Application Gateway), and infrastructure management
• Hands-on experience implementing and validating STIG compliance on Windows and Linux systems

Preferred Qualifications:

• Active Top Secret clearance with ability to obtain TS/SCI
• Microsoft certifications such as Azure Administrator Associate, Azure Solutions Architect Expert, or Windows Server Hybrid Administrator Associate
• Proficiency in basic Linux system administration tasks.
• Experience with Infrastructure-as-Code tools (Terraform, ARM templates, Bicep)
• Knowledge of containerization technologies (Docker, Kubernetes) and their integration with Windows infrastructure
• Familiarity with DevSecOps practices, CI/CD pipelines, and automation frameworks
• Experience with PowerShell scripting and automation for system administration tasks
• Background supporting Department of Defense (DoD) or federal government IT environments
• Experience with monitoring and observability tools (Azure Monitor, Log Analytics, Prometheus, Grafana)
• Knowledge of identity and access management solutions (Azure AD, ADFS, MFA implementation)
• Experience with disaster recovery planning and implementation in cloud environments

What we offer:

• Robust startup environment with a variety of projects to work on
• Growth paths and endless opportunities to learn and develop
• Paid holidays
• Employer contributions toward 401k
• Performance-based bonus and profit-sharing
• 50% coverage of health insurance for employees and their dependents

The pay range for this role is:

130,000 - 170,000 USD per year (Huntsville, AL)