Senior Windows Systems Engineer — Hybrid, High-Impact

STN, Inc.; Pleasanton (CA); Hybrid; USD 175,000 - 195,000; Full time

Benefits offered by this job

Health Coverage

401(k) Plan

Unlimited PTO

Holidays Paid

Cell Phone Allowance

Collaborative culture

Job summary

STN, Inc. is seeking a Windows Systems Engineer to own the health, security, and lifecycle of Windows Server, AD, and Microsoft 365 for managed-services customers. Hybrid role based in Pleasanton, CA, reporting to the Sr Manager - Service Desk, NOC/SOC, Systems & Network Administration.

The role emphasizes automation, vulnerability remediation, and cross-team collaboration across MSP environments, with a focus on PCI/HIPAA compliance and documented change control.

Qualifications

• 5+ years hands-on with Windows Server and Active Directory, including DNS, DHCP, and GPO administration.
• Demonstrated ability to perform domain controller promotions/upgrades from documented plans, with pre-checks and rollback.
• Certificate management: AD CS or similar PKI, SSL/TLS lifecycle and renewal discipline.
• PowerShell proficiency and/or automation depth in Python/Ansible/Terraform.
• Security hygiene: patch cadence, MFA/CA concepts, and vulnerability remediation.
• Experience with PCI/HIPAA-regulated environments and change control.
• Microsoft 365 and Entra ID administration including Exchange Online and Conditional Access.
• Backup/restore operations and monitoring using Cohesity or Veeam.
• Hands-on virtualization with VMware vSphere or Hyper-V.
• Strong written communication for multi-customer environments.
• Bachelor’s degree in information technology, computer science, or equivalent
• Experience in MSP/MSSP or multi-tenant hosting environments.
• Azure IaaS or Azure Virtual Desktop experience.
• Endpoint management (Intune/SCCM/MECM) and RMM tools.
• Vulnerability tooling (Nessus/Qualys/Rapid7) and Defender products.
• Experience with ITSM tools (NinjaOne/ConnectWise/HaloPSA/Jira Service Management) and ServiceNow.
• Hybrid identity and Windows Server upgrade cycles.
• Familiarity with AI coding tools for scripting.
• Certifications such as AZ-104, MS-102, SC-300, AZ-800/801, CompTIA Security+, or MCSA/MCSE.

Responsibilities

• Administer Windows Servers across multiple customer environments (DNS, DHCP, GPO, file/print, cert services).
• Plan and execute Active Directory work (domain controllers upgrades, promotions/demotions, OS upgrades, site changes).
• Develop and maintain PowerShell scripts for provisioning, reporting, bulk changes, and automation.
• Manage Microsoft 365 and Entra ID: Exchange Online, mail flow, licensing, mailbox moves, CA policy.
• Oversee patch cadence across servers/endpoints and remediation of vulnerabilities.
• Support MFA/Conditional Access rollouts and maintain identity hygiene.
• Monitor backups and test restores; address upscale failures per RPO/RTO.
• Build/retire Windows servers across virtualization and cloud IaaS.
• Operate VMware vSphere or Hyper-V: host/cluster health, VM lifecycle, snapshots.
• Act as L3 escalation for service desk; drive root-cause analyses and update runbooks.
• Follow change management: risk assessment, maintenance windows, rollback plans.
• Maintain runbooks, architecture docs, and configuration baselines.
• Provide evidence for PCI/HIPAA reviews (patch reports, access reviews, restore tests).

Skills

Windows Server

Active Directory

PowerShell

Security patching

MFA/Conditional Access

Azure IaaS

VMware vSphere/Hyper-V

Documentation

Education

Bachelor's degree in IT/CS

Tools

NinjaOne

Datto

Cohesity

Veeam

Intune

SCCM/MECM

Job description

STN, Inc. is seeking a Windows Systems Engineer to own the health, security, and lifecycle of Windows Server, AD, and Microsoft 365 for managed-services customers. Hybrid role based in Pleasanton, CA, reporting to the Sr Manager - Service Desk, NOC/SOC, Systems & Network Administration.

The role emphasizes automation, vulnerability remediation, and cross-team collaboration across MSP environments, with a focus on PCI/HIPAA compliance and documented change control.