Remote Windows Automation Engineer — Cyber Range

Booz Allen Hamilton; McLean (VA); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton seeks a Windows Systems Automation Engineer to automate Windows deployments, configure identity services, and build repeatable, cloud-integrated environments for DoD missions.

You will automate AD, DNS, Group Policy, patching, and endpoint configuration using PowerShell and IaC tools. Collaboration with platform, network, and cybersecurity teams is required to ensure secure, verifiable deployments.

Qualifications

• 6+ years of experience administering or engineering Windows Server environments.
• 2+ years of experience supporting a U.S. Government or federal environment.
• Experience with Active Directory, DNS, Group Policy, and automated domain provisioning.
• Experience developing PowerShell automation for infrastructure deployment, configuration, and security auditing.
• Experience with infrastructure-as-code tools such as AWS CDK, CloudFormation, or Terraform.
• Experience using Git and CI/CD pipelines to manage and deploy infrastructure changes.
• Experience with automated patching, compliance tracking, and endpoint management.
• Knowledge of STIGs, NIST SP 800-53 controls, and Windows security-hardening practices.
• Experience troubleshooting complex system, identity, network, and application issues.
• HS diploma or GED.
• DoD 8570/8140 IAT Level II-compliant certification (e.g., Security+, CySA+, or GSEC).
• Ability to obtain IAT Level III-compliant certification within 6 months.

Responsibilities

• Automate Windows Server and workstation deployments using AWS CDK, CloudFormation, Terraform, or similar IaC tools.
• Design and maintain Active Directory, DNS, Group Policy, and identity services for isolated range environments.
• Develop advanced PowerShell scripts for provisioning, domain joins, configuration management, security auditing, and software installation.
• Build and maintain reusable Windows machine images through automated image pipelines.
• Apply STIGs and other security-hardening standards to Windows servers and endpoints.
• Automate patching, vulnerability remediation, inventory, and compliance reporting.
• Integrate systems with secrets management, logging, monitoring, and remote-management services.
• Develop automated tests and deployment validation to identify configuration issues before release.
• Troubleshoot complex Windows, Active Directory, authentication, networking, and application issues.
• Maintain technical documentation, configuration standards, and operational runbooks.

Skills

Windows Server administration

Active Directory

DNS

Group Policy

PowerShell scripting

Infrastructure as code

Cloud engineering

Security hardening

CI/CD pipelines

Git

Vulnerability remediation

Identity and access management

Education

HS diploma or GED

DoD 8570/8140 IAT Level II-compliant certification (e.g., Security+, CySA+, or GSEC)

Ability to obtain IAT Level III-compliant certification (e.g., Security+, CISSP) within 6 months

Tools

AWS CDK

CloudFormation

Terraform

Pester

PowerShell DSC / DSC

SCCM / MECM

Chocolatey

Job description

Booz Allen Hamilton seeks a Windows Systems Automation Engineer to automate Windows deployments, configure identity services, and build repeatable, cloud-integrated environments for DoD missions.

You will automate AD, DNS, Group Policy, patching, and endpoint configuration using PowerShell and IaC tools. Collaboration with platform, network, and cybersecurity teams is required to ensure secure, verifiable deployments.