Senior Windows Security Administrator (NIST 800-53)

Seneca Resources; Montgomery (AL); On-site; USD 97,000 - 132,000; Full time

Job summary

Seneca Resources is seeking a Senior Microsoft Systems Administrator in Montgomery, AL to lead Windows hardening under NIST 800-53 controls. You will implement baselines, enforce access controls, and monitor compliance using AD, Intune, SCCM/MECM, Azure AD, Defender, and related tools.

Responsibilities include GPO management, baseline configurations, and automation with PowerShell. Candidates should have 4+ years of enterprise Windows experience and strong security controls knowledge.

Qualifications

• 4+ years of hands-on Windows server/workstation administration.
• Experience implementing NIST SP 800-53 controls on Microsoft platforms.
• Proficiency with AD, Group Policy, PowerShell, SCCM/MECM, Intune.
• Understanding 800-53 control families (AC, AU, CM, IA, SC).
• Experience with hardening baselines and least-privilege.
• Familiarity with Nessus/Tenable for compliance.

Responsibilities

• Harden Windows Server/Workstations per NIST 800-53 Rev.5.
• Manage GPOs, baselines, and Intune policies to enforce configurations.
• Configure host-based firewalls, MFA, privileged account management.
• Administer AD, SCCM/MECM, Intune, Azure AD/Entra ID, Defender.
• Develop PowerShell scripts for automation and compliance checks.
• Document SSP, POA&M, and evidence for controls.

Skills

Windows server administration

PowerShell scripting

Security controls understanding (NIST

Tools

Active Directory

Group Policy

SCCM/MECM

Intune

Azure AD/Entra ID

Defender for Endpoint

Azure Policy

Job description

Seneca Resources is seeking a Senior Microsoft Systems Administrator in Montgomery, AL to lead Windows hardening under NIST 800-53 controls. You will implement baselines, enforce access controls, and monitor compliance using AD, Intune, SCCM/MECM, Azure AD, Defender, and related tools.

Responsibilities include GPO management, baseline configurations, and automation with PowerShell. Candidates should have 4+ years of enterprise Windows experience and strong security controls knowledge.