Sr. Windows Engineer (Top Secret)

Zachary Piper Solutions; Washington, Northern (District of Columbia, KY); Hybrid; USD 170,000 - 190,000; Full time

Benefits offered by this job

PTO/Holidays

Medical, Dental, Vision

401k

Job summary

Zachary Piper Solutions is seeking a Windows Engineer in Washington, DC, onsite. The role focuses on deploying MECM, AD, GPOs, and security controls, with heavy emphasis on automation using PowerShell and Bash.

Candidates should have a 10+ year track record in system administration and hold a Top Secret clearance. MCSE/MCSA certifications are highly preferred, and experience with VMware is required.

Qualifications

• Bachelor’s degree or higher in a related field with 10+ years of experience in system administration and engineering.
• Active Top Secret clearance is required.
• IAT II Certification (e.g., Sec+, CySA+) is required.
• Microsoft certifications (MCSE, MCSA) are highly preferred.
• Must have experience deploying and administering MECM.
• Experience with PowerShell and Bash scripting for automation and troubleshooting.
• Experience with virtualization technologies including VMware and Hyper-V.
• Experience maintaining Active Directory and Group Policy.

Responsibilities

• Install, configure, maintain, and support Windows servers, workstations, and related software.
• Deploy, configure, and maintain MECM.
• Manage OS patching, upgrades, and security updates.
• Monitor server health and performance; proactively resolve issues.
• Troubleshoot hardware, software, and network issues with minimal business impact.
• Administer AD, including users, groups, permissions, and GPOs.
• Implement security controls including firewalls, antivirus, encryption, and vulnerability remediation.
• Manage backup and disaster recovery planning; test recoveries.
• Automate tasks and configurations using PowerShell and scripting tools.
• Maintain documentation, procedures, and reports for compliance.

Skills

PowerShell scripting

Bash scripting

Active Directory

Group Policy

DNS/DHCP/TCP/IP

VMware virtualization

SCCM/MECM

Security best practices

Education

Bachelor’s degree in a related discipline

Top Secret clearance

IAT II Certification

MCSE/MCSA certification

Tools

MECM

Microsoft Endpoint Configuration Manager

Intune

VMware

Hyper-V

SCCM

Job description

Location: Washington, D.C. (100% onsite)

Responsibilities of the Windows Engineer:

• Install, configure, maintain, and support Windows servers, workstations, and related software to ensure optimal performance and availability.
• Deploy, configure, and maintain Microsoft Endpoint Configuration Manager (MECM)
• Manage operating system patching, upgrades, and security updates to maintain system security, compliance, and reliability.
• Monitor server health, system performance, and resource utilization to proactively identify and resolve issues.
• Troubleshoot and remediate hardware, software, and network-related issues with minimal impact to business operations.
• Administer Active Directory, including user accounts, group memberships, permissions, and Group Policy management.
• Implement and maintain security controls, including firewalls, antivirus solutions, encryption, and vulnerability remediation measures.
• Manage backup and recovery solutions, perform testing, and support disaster recovery planning to ensure business continuity.
• Automate administrative tasks and system configurations using PowerShell and scripting tools to improve operational efficiency.
• Maintain accurate system documentation, operational procedures, and technical reports to support ongoing administration and compliance efforts.
• Collaborate with vendors to troubleshoot system issues, improve reliability, and manage SSL certificate deployment and renewal.
• Evaluate server and network architectures and recommend enhancements to improve performance, scalability, and resiliency.
• Administer and support IIS and related web technologies to ensure reliable hosting and operation of web services.
• Partner with cross-functional teams to resolve complex technical issues and serve as an escalation point for advanced support needs.
• Contribute to process improvement initiatives by developing and refining operational procedures, workflows, and service delivery practices.

Qualifications of the Windows Engineer:

• Bachelor’s degree in a related discipline and 10+ years of system administration and engineering experience
• Active Top Secret clearance
• IAT II Certification required (Sec+, CySA+, etc.)
• Microsoft certification highly preferred (MCSE, MCSA, etc.)
• Must have experience deploying and administering Microsoft Endpoint Configuration Manager (MECM)
• Experience with PowerShell and Bash scripting for automation and troubleshooting
• Experience with virtualization technologies including VMware
• Experience maintaining Active Directory and Group Policy

Compensation of the Windows Engineer:

• Total compensation based on experience level - $170,000-$190,000 **based on experience level**
• Full Benefits: PTO/Holidays, Medical, Dental, and Vision, 401k

#LI-MK1 #LI-Onsite

Keywords: Windows Server, Windows 10/11, Active Directory, Group Policy (GPO), Azure Active Directory (Microsoft Entra ID), PowerShell, Windows Administration, Systems Engineering, Server Management, Server Hardening, Patch Management, Vulnerability Management, IIS Administration, DNS, DHCP, TCP/IP, SCCM, MECM, system administrator, system engineer, vmware, virtualization, top secret, ts/sci, Federal, W2, opentowork, Network Troubleshooting, VMware, Hyper-V, Virtualization, SCCM (Microsoft Configuration Manager), Intune, WSUS, File and Print Services, Backup and Recovery, Disaster Recovery, TS/SCI, High Availability, Failover Clustering, Load Balancing, Security Compliance, Endpoint Security, Microsoft Defender, Identity and Access Management (IAM), Privileged Access Management (PAM), SSL Certificates, PKI, LDAP, Kerberos, Windows Authentication, Performance Monitoring, Capacity Planning, System Automation, Scripting, Incident Response, Change Management, Configuration Management, Infrastructure Management, Log Analysis, Event Viewer, SIEM, Splunk, ELK Stack, Monitoring and Alerting, Technical Documentation, Root Cause Analysis, IT Operations, Server Migration, Cloud Administration, Azure, Microsoft 365, Exchange Administration, SharePoint, Cross-Functional Collaboration, Problem Resolution, Process Improvement, Asset Management, Risk Mitigation, Enterprise Infrastructure, Operational Support, ITIL, ServiceNow, Jira, Network Security, Endpoint Management, Systems Integration, Troubleshooting, System Optimization, Business Continuity, Security Best Practices.