Sr. Windows Engineer (Top Secret)

ZP Group; Washington (District of Columbia); On-site; USD 170,000 - 190,000; Full time

Benefits offered by this job

Full benefits (PTO/Holidays, Medical, 

Dental, Vision, 401k

Job summary

ZP Group is seeking a Windows Engineer to install, configure, and manage Windows servers, endpoints, and related software in a 100% onsite Washington, D.C. environment. Responsibilities include MECM deployment, AD/GP administration, patching, security, and disaster recovery planning.

The role requires a Top Secret clearance, IAT II certification, and experience with PowerShell, Bash, and VMware. Microsoft certifications are highly preferred, and a strong focus on security and reliability is

Qualifications

• Bachelor’s degree in a related discipline; 10+ years of system administration and engineering experience.
• Active Top Secret clearance.
• IAT II Certification required (Sec+, CySA+, etc.).
• Microsoft certification highly preferred (MCSE, MCSA, etc.).
• Must have experience deploying and administering MECM.
• Experience with PowerShell and Bash scripting for automation and troubleshooting.
• Experience with virtualization technologies including VMware.
• Experience maintaining Active Directory and Group Policy.

Responsibilities

• Install, configure, maintain, and support Windows servers, workstations, and related software.
• Deploy, configure, and maintain MECM.
• Manage OS patching, upgrades, and security updates.
• Monitor server health and performance; resolve issues.
• Troubleshoot hardware, software, and network issues.
• Administer Active Directory and Group Policy.

Skills

10+ years of experience

Education

Bachelor’s degree

Tools

MECM (Microsoft Endpoint Configuration Manager)

PowerShell scripting

Bash scripting

VMware virtualization

Active Directory

Group Policy

IIS Administration

Job description

Location: Washington, D.C. (100% onsite)

Responsibilities of the Windows Engineer:

• Install, configure, maintain, and support Windows servers, workstations, and related software to ensure optimal performance and availability.
• Deploy, configure, and maintain Microsoft Endpoint Configuration Manager (MECM)
• Manage operating system patching, upgrades, and security updates to maintain system security, compliance, and reliability.
• Monitor server health, system performance, and resource utilization to proactively identify and resolve issues.
• Troubleshoot and remediate hardware, software, and network-related issues with minimal impact to business operations.
• Administer Active Directory, including user accounts, group memberships, permissions, and Group Policy management.
• Implement and maintain security controls, including firewalls, antivirus solutions, encryption, and vulnerability remediation measures.
• Manage backup and recovery solutions, perform testing, and support disaster recovery planning to ensure business continuity.
• Automate administrative tasks and system configurations using PowerShell and scripting tools to improve operational efficiency.
• Maintain accurate system documentation, operational procedures, and technical reports to support ongoing administration and compliance efforts.
• Collaborate with vendors to troubleshoot system issues, improve reliability, and manage SSL certificate deployment and renewal.
• Evaluate server and network architectures and recommend enhancements to improve performance, scalability, and resiliency.
• Administer and support IIS and related web technologies to ensure reliable hosting and operation of web services.
• Partner with cross-functional teams to resolve complex technical issues and serve as an escalation point for advanced support needs.
• Contribute to process improvement initiatives by developing and refining operational procedures, workflows, and service delivery practices.

Qualifications of the Windows Engineer:

• Bachelor’s degree in a related discipline and 10+ years of system administration and engineering experience
• Active Top Secret clearance
• IAT II Certification required (Sec+, CySA+, etc.)
• Microsoft certification highly preferred (MCSE, MCSA, etc.)
• Must have experience deploying and administering Microsoft Endpoint Configuration Manager (MECM)
• Experience with PowerShell and Bash scripting for automation and troubleshooting
• Experience with virtualization technologies including VMware
• Experience maintaining Active Directory and Group Policy

Compensation of the Windows Engineer:

• Total compensation based on experience level - $170,000-$190,000 **based on experience level**
• Full Benefits: PTO/Holidays, Medical, Dental, and Vision, 401k

#LI-MK1 #LI-Onsite

Keywords: Windows Server, Windows 10/11, Active Directory, Group Policy (GPO), Azure Active Directory (Microsoft Entra ID), PowerShell, Windows Administration, Systems Engineering, Server Management, Server Hardening, Patch Management, Vulnerability Management, IIS Administration, DNS, DHCP, TCP/IP, SCCM, MECM, system administrator, system engineer, vmware, virtualization, top secret, ts/sci, Federal, W2, opentowork, Network Troubleshooting, VMware, Hyper-V, Virtualization, SCCM (Microsoft Configuration Manager), Intune, WSUS, File and Print Services, Backup and Recovery, Disaster Recovery, TS/SCI, High Availability, Failover Clustering, Load Balancing, Security Compliance, Endpoint Security, Microsoft Defender, Identity and Access Management (IAM), Privileged Access Management (PAM), SSL Certificates, PKI, LDAP, Kerberos, Windows Authentication, Performance Monitoring, Capacity Planning, System Automation, Scripting, Incident Response, Change Management, Configuration Management, Infrastructure Management, Log Analysis, Event Viewer, SIEM, Splunk, ELK Stack, Monitoring and Alerting, Technical Documentation, Root Cause Analysis, IT Operations, Server Migration, Cloud Administration, Azure, Microsoft 365, Exchange Administration, SharePoint, Cross-Functional Collaboration, Problem Resolution, Process Improvement, Asset Management, Risk Mitigation, Enterprise Infrastructure, Operational Support, ITIL, ServiceNow, Jira, Network Security, Endpoint Management, Systems Integration, Troubleshooting, System Optimization, Business Continuity, Security Best Practices.