Senior Windows Security Engineer: AD, GPO & RBAC Expert

Saab, Inc.; Town of De Witt (NY); On-site; USD 102,000 - 132,000; Full time

Benefits offered by this job

Medical, vision, and dental insurance

401(k) with employer contributions

Tuition assistance

Donations to wellness programs

Paid time off and holidays

Job summary

Saab, Inc. seeks a Senior Information Security Engineer to secure Windows-based environments and deliver security solutions for customers. You will design and implement GPOs, harden servers/workstations, and enforce RBAC with a focus on AD security and endpoint protection.

Travel up to 30% may be required. The role emphasizes customer-facing delivery, documentation, and adherence to security frameworks while maintaining DoD-related considerations.

Qualifications

• Bachelor's degree or equivalent experience in information security or CS.
• 8+ years with Microsoft Windows environments and security.
• Hands-on Active Directory administration experience.
• Proven ability to create/manage GPOs.
• Experience with RBAC and identity management.
• Endpoint protection deployment and management.
• Solid Windows security architecture and hardening knowledge.
• Experience with security assessments and remediation.

Responsibilities

• Design, implement, and manage GPOs to enforce security configurations.
• Configure and harden Windows Server and Windows workstations.
• Manage Active Directory security configurations (users, groups, OU structures).
• Design RBAC models and enforce least-privilege access.
• Deploy and manage endpoint protection/antivirus.
• Apply system hardening aligned with security frameworks.
• Perform security assessments and remediation actions.
• Document configurations, controls, and deployment procedures for customers.
• Provide guidance and knowledge transfer to stakeholders.

Skills

Active Directory administration

Group Policy design

Endpoint security

RBAC and least-privilege

Windows security architecture

Security assessments

Documentation and customer delivery

Education

Bachelor's degree in Information Security, Computer Science, IT or related field

Tools

Microsoft Hyper-V

Splunk

PDQ

RSA Authentication Manager

Ansible

PowerShell

Job description

Saab, Inc. seeks a Senior Information Security Engineer to secure Windows-based environments and deliver security solutions for customers. You will design and implement GPOs, harden servers/workstations, and enforce RBAC with a focus on AD security and endpoint protection.

Travel up to 30% may be required. The role emphasizes customer-facing delivery, documentation, and adherence to security frameworks while maintaining DoD-related considerations.