Senior Windows Systems Engineer & Identity Specialist

Socket.dev; Pleasanton (CA); On-site; USD 175,000 - 195,000; Full time

Benefits offered by this job

Health Coverage

FSA Health and Dependent Care

401(k) Plan

Unlimited PTO

Holidays Paid

Cell Phone Allowance

Collaborative culture

Job summary

STN is seeking a Systems Engineer to own the day-to-day health, security, and lifecycle of Windows Server, Active Directory, and Microsoft 365 environments for managed-services customers. You will implement upgrades, manage DNS/DHCP, and maintain identity and access controls.

Responsibilities include writing PowerShell automation, patch cadence, backup validation, and supporting MFA/Conditional Access. Strong documentation and multi-customer communication are essential.

Qualifications

• 5+ years hands-on with Windows Server and Active Directory, DNS, DHCP, and Group Policy.
• Ability to run domain controller promotions or upgrades from a documented plan.
• Certificate management experience: AD CS or PKI lifecycle and renewals.
• PowerShell proficiency and automation depth (or Python/Ansible/Terraform).
• Strong patch management and endpoint security experience including MFA/CA.
• Experience with PCI and/or HIPAA regulated environments and change control.
• Microsoft 365 and Entra ID administration including Exchange Online.
• Backup/restore operations with Cohesity or Veeam understanding.

Responsibilities

• Administer Windows Servers across multi-customer environments (DNS/DHCP/GP).
• Plan and execute Active Directory upgrades from a documented plan.
• Develop PowerShell scripts for provisioning, reporting, and remediation.
• Manage Microsoft 365 and Entra ID including Exchange Online and CA policies.
• Own patch cadence, endpoint protection, and vulnerability remediation.
• Support MFA rollout, identity hygiene, and access reviews.

Skills

Windows Server

Active Directory

PowerShell

VMware vSphere/Hyper-V

Microsoft 365/Entra ID

Security & patch hygiene

Documentation

Education

Bachelor’s degree in IT/CS

Tools

PowerShell

Cohesity/Veeam

VMware vSphere

NinjaOne/Datto (RMM)

Job description

STN is seeking a Systems Engineer to own the day-to-day health, security, and lifecycle of Windows Server, Active Directory, and Microsoft 365 environments for managed-services customers. You will implement upgrades, manage DNS/DHCP, and maintain identity and access controls.

Responsibilities include writing PowerShell automation, patch cadence, backup validation, and supporting MFA/Conditional Access. Strong documentation and multi-customer communication are essential.