Senior Windows Security Architect – AD, GPO, RBAC Expert

Cybersecurity Jobs; Village of Bronxville (NY); On-site; USD 102,000 - 132,000; Full time

Benefits offered by this job

Health insurance

401(k) with employer contributions

8 holidays

Tuition assistance

Stock purchase opportunities

Disability insurance

Job summary

Saab is seeking a Senior Information Security Engineer to secure Windows environments and deliver security solutions for customers. You will configure and harden Windows Server/workstations, manage AD security, and implement RBAC and least-privilege access. The role involves endpoint protection, security assessments, and documenting configurations for customer sites.

Travel up to 30% may be required; a DoD clearance is preferred. Onsite in De Witt, NY with strong collaboration across teams.

Qualifications

• Bachelor’s degree in Information Security, CS, IT, or equivalent experience.
• 8+ years of experience securing Microsoft Windows environments.
• Hands-on Active Directory administration experience.
• Experience creating and managing GPOs.
• Experience implementing RBAC and identity management.
• Experience deploying or managing endpoint protection/antivirus.
• Strong Windows security architecture and system hardening knowledge.
• Experience with security assessments and remediation.

Responsibilities

• Leverage GPOs to enforce security configurations and standards.
• Configure, administer, and harden Windows Server and workstations.
• Implement Active Directory security configurations and RBAC models.
• Deploy and manage endpoint protection and antivirus solutions.
• Perform security assessments and remediation for Windows environments.
• Document configurations, controls, and deployment steps for customers.
• Provide technical guidance and knowledge transfer to customers.

Skills

Microsoft Windows

Active Directory administration

GPOs

RBAC

Endpoint protection

Antivirus

System hardening

Security assessments

PowerShell

Ansible

JIRA

SIEM

DoD clearance (preferred)

Education

Bachelor’s degree in Information Security

Tools

Microsoft Hyper-V

Splunk

PDQ

RSA Authentication Manager

JIRA

Job description

Saab is seeking a Senior Information Security Engineer to secure Windows environments and deliver security solutions for customers. You will configure and harden Windows Server/workstations, manage AD security, and implement RBAC and least-privilege access. The role involves endpoint protection, security assessments, and documenting configurations for customer sites.

Travel up to 30% may be required; a DoD clearance is preferred. Onsite in De Witt, NY with strong collaboration across teams.