Senior Information Security Engineer – Windows Infrastructure

Saab, Inc.; City of Syracuse (NY); On-site; USD 102,000 - 132,000; Full time

Benefits offered by this job

Medical, vision, and dental insurance

401(k) with employer contributions

Tuition assistance

Wellness resources

Employee stock purchase opportunities

Disability coverage

Job summary

Saab, Inc. is seeking an experienced Information Security Engineer to support air traffic control system deployments with a focus on Windows-based platforms. The role involves securing Windows environments, implementing AD and GPOs, and integrating security controls across deployments.

Responsibilities include designing security architectures, managing risk, and coordinating with deployment teams. Candidates should have 6+ years of Windows security experience and relevant certifications.

Qualifications

• Bachelor’s degree or higher in a relevant field or equivalent experience.
• 6+ years of hands-on experience administering and securing Microsoft Windows environments.
• Strong PowerShell scripting and automation experience.
• Experience creating and managing Windows domains, AD structures, and GPOs.
• Experience integrating third-party software into Windows environments.
• Hands-on experience with Windows Deployment Services.

Responsibilities

• Develop, document, and maintain comprehensive security architectures, network designs, and cloud infrastructures.
• Evaluate deliverable systems to identify weaknesses and perform security reviews.
• Lead IT analysts and deployment teams to coordinate security protocols.
• Design, implement, and manage Group Policy Objects (GPOs) for customer environments.
• Configure and harden Windows Server and Windows workstations.
• Implement and maintain Active Directory security configurations.
• Design and implement RBAC and least-privilege access models.
• Deploy and manage endpoint protection and antivirus solutions.
• Apply system hardening practices aligned with security frameworks.
• Perform security assessments and remediate findings.
• Assist in secure configurations, patch processes, and policy compliance.
• Document system configurations and deployment procedures for customers.
• Provide technical guidance to customer stakeholders.

Skills

Windows security

Active Directory administration

Group Policy design & implementation

PowerShell scripting

Windows Deployment Services

RBAC & least-privilege access

Endpoint security management

Security architecture

Risk & vulnerability management

Identity and access management

Education

Bachelor’s degree in Systems Engineering, Computer Science, Information Technology, Information Security, or related field

CompTIA Security+

CISSP

Microsoft security or identity certifications

GIAC certifications

Tools

Windows Deployment Services

Hyper-V virtualization

Splunk

PDQ

RSA Authentication Manager

Job description

Job Description

We are seeking an experienced Information Security Engineer with strong Microsoft Windows infrastructure expertise to support the delivery of air traffic control systems to our customers. This role will focus on the implementation of Windows-based platforms to provide a secure environment for other Saab software to run in. The ideal candidate will have hands‑on experience with Windows Deployment Service, Active Directory, Group Policy management, network design, and hardware/software integration. This position plays a key role in implementing and deploying air traffic control systems for customers, ensuring Windows environments are configured to support our software while meeting safety and security regulations. This role requires both an independent drive to troubleshoot implementation and the ability to work collaboratively with teammates to integrate various system components.

We are seeking an experienced Information Security Engineer with strong Microsoft Windows infrastructure expertise to support the delivery of air traffic control systems to our customers. This role will focus on the implementation of Windows-based platforms to provide a secure environment for other Saab software to run in. The ideal candidate will have hands‑on experience with Windows Deployment Service, Active Directory, Group Policy management, network design, and hardware/software integration. This position plays a key role in implementing and deploying air traffic control systems for customers, ensuring Windows environments are configured to support our software while meeting safety and security regulations. This role requires both an independent drive to troubleshoot implementation and the ability to work collaboratively with teammates to integrate various system components.

Key Responsibilities

• Architecture Design: Develop, document, and maintain comprehensive security architectures, network designs, and cloud infrastructures


• Risk & Vulnerability Management: Evaluate deliverable systems to identify weaknesses, perform security reviews, and execute ethical hacks or penetration tests.


• Leadership & Guidance: Lead information technology analysts, security engineers, and deployment teams to coordinate effective security protocols and align projects with security guidelines


• Design, implement, and manage Group Policy Objects (GPOs) to enforce security configurations and organizational standards within customer environments.


• Configure, administer, and harden Windows Server and Windows workstation systems as part of security solution deployments.


• Implement and maintain Active Directory security configurations, including user/group management, OU structures, and policy enforcement.


• Design and implement role-based access control (RBAC) and least-privilege access models.


• Deploy, configure, and manage endpoint protection and antivirus solutions.


• Apply system hardening practices aligned with industry security frameworks and best practices.


• Perform security assessments of Windows environments and implement remediation actions.


• Assist in creating secure configurations, patch processes, and compliance with security policies.


• Document system configurations, security controls, and deployment procedures for customer environments.


• Provide technical guidance and knowledge transfer to customer stakeholders when appropriate.

Compensation Range

$101,600 - $132,000

The compensation range provided is a general guideline. When extending an offer, Saab, Inc. considers factors including (but not limited to) the role and associated responsibilities, location, and market and, business considerations, as well as the candidate's work experience, key skills, and education/training.

Skills and Experience

Required Qualifications

• Bachelor’s degree in Systems Engineering, Computer Science, Information Technology, Information Security, or a related field (or equivalent experience).


• 6+ years of experience administering and securing Microsoft Windows environments.


• Strong hands‑on experience with PowerShell scripting and automation.


• Proven experience creating and managing Windows domains, including development of Group Policy Objects and Active Directory structures.


• Experience integrating third‑party software into Windows environments.


• Hands‑on experience with Windows Deployment Services.


• Solid understanding of Windows security architecture and system hardening techniques.

Preferred Qualifications

• Experience with PXE boot and BIOS configuration.


• Experience implementing role-based access control and identity management practices.


• Experience performing security assessments and remediation.


• Familiarity with security monitoring tools and SIEM platforms.


• Knowledge of security frameworks such as NIST, CIS Benchmarks, or ISO 27001.


• Relevant certifications such as:
  
  
  
  • CompTIA Security+
  
  
  • CISSP
  
  
  • Microsoft security or identity certifications
  
  
  • GIAC certifications
  
  
  
  

Key Skills

• Hardware/operating system/software integration


• Customer-facing technical delivery and documentation


• Windows security architecture


• Active Directory administration


• Group Policy design and implementation


• Endpoint security and antivirus management


• Identity and access management (IAM)


• System hardening and vulnerability remediation


• Security assessments and remediation

Desired Tool Experience

• Microsoft Hyper-V Virtualization


• Splunk


• PDQ


• RSA Authentication Manager

Citizenship Requirements

Must be a U.S. citizen. Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Drug-Free Workplaces

Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug‑free workplaces. As a condition of employment, candidates will be required to pass a pre‑employment drug screen.

Benefits

Saab provides an excellent working environment offering professional growth opportunities, competitive wages, work‑life balance, a business casual atmosphere and comprehensive benefits.

Highlights include:

• Medical, vision, and dental insurance for employees and dependents


• Generous paid time off, including 8 designated holidays


• 401(k) with employer contributions


• Tuition assistance and student loan assistance


• Wellness and employee assistance resources


• Employee stock purchase opportunities


• Short-term and long-term disability coverage

About Us

Saab is a leading defense and security company with an enduring purpose, to help nations keep their people and society safe. Empowered by its 28,000 talented people, Saab constantly pushes the boundaries of technology to create a safer and more sustainable world. In the U.S., Saab delivers advanced technology and systems, supporting the U.S. Armed Forces and the Federal Aviation Administration, as well as international and commercial partners. Headquartered in Syracuse, New York, the company has business units and local employees in ten U.S. locations.

Saab is a company where we see diversity as an asset and offer unlimited opportunities for advancing in your career. We are also a company that respects each person’s needs and encourage employees to lead a balanced, rewarding life beyond work. Saab values diversity and is an affirmative action employer for protected veterans and individuals with disabilities. Saab is an equal employment opportunity employer, all qualified individuals are encouraged to apply and will be considered for employment without regard to race, color, religion, national origin, sex (including pregnancy), sexual orientation, gender identity, age, veteran, disability status, or any other federal, state, or locally protected category.