Systems Engineer II - Windows

CSX; Jacksonville (FL); On-site; USD 90,000 - 140,000; Full time

Job summary

CSX is seeking a Windows Systems Engineer in Jacksonville, FL to design, implement, and operate enterprise Windows Server platforms across on‑premises and cloud environments. You will lead patch management, security hardening, and platform currency initiatives while building automation through PowerShell, Ansible, and IaC practices.

You will collaborate with cloud, cybersecurity, and infrastructure teams to improve resilience, reliability, and regulatory compliance, and participate in on‑call

Qualifications

• Experience with Windows Server 2019, 2022, and 2025 platforms.
• Experience with Active Directory, DNS, DHCP and certificate services.
• Experience with Windows security hardening and compliance.
• Experience patching, maintenance, and lifecycle management.
• Experience with Azure IaaS and hybrid cloud environments.
• Experience with VMware vSphere and automation tooling.

Responsibilities

• Engineer and support Windows Server platforms across on‑premises and cloud.
• Design secure, highly available Windows Server infrastructure.
• Lead OS lifecycle management including upgrades and migrations.
• Develop automation with PowerShell, Ansible, and IaC practices.
• Establish standard configurations and security baselines.
• Coordinate patching for currency, security, and stability.
• Assess vulnerabilities and coordinate remediation with cybersecurity.
• Manage identity/access controls for Windows systems.
• Monitor health, performance, and capacity to meet SLAs.
• Investigate complex platform issues and provide escalation support.
• Maintain architectural docs, recovery plans, and procedures.
• Support disaster recovery and cyber resiliency initiatives.
• Evaluate new tech for security, automation, reliability benefits.
• Collaborate with cloud, security, networking, and automation teams.
• Ensure compliance with security policies and governance standards.

Skills

Windows Server administration

PowerShell scripting

Ansible automation

Infrastructure as Code

Azure IaaS administration

VMware vSphere

Security hardening

Patch management

Incident response

On-call support

Education

Bachelor's Degree/4-Year Degree

High School Diploma/GED

Tools

Azure Portal

PowerShell ISE

ServiceNow integrations

Active Directory

Group Policy

Job description

JOB DESCRIPTION

The Windows Systems Engineer is responsible for the engineering, security, lifecycle management, and operational support of enterprise Windows platforms across on‑premises and cloud environments. This role designs and maintains secure, highly available Windows Server infrastructure, leads patch management and platform currency initiatives, drives security hardening and configuration compliance, and supports vulnerability remediation efforts.

Job Summary

JOB DESCRIPTION

The Windows Systems Engineer is responsible for the engineering, security, lifecycle management, and operational support of enterprise Windows platforms across on‑premises and cloud environments. This role designs and maintains secure, highly available Windows Server infrastructure, leads patch management and platform currency initiatives, drives security hardening and configuration compliance, and supports vulnerability remediation efforts. The engineer maintains automation using PowerShell, Ansible, and ServiceNow integrations to reduce manual effort and improve consistency. Working closely with cloud, cybersecurity, and infrastructure teams, this position strengthens platform security, resiliency, operational stability, and regulatory compliance across the enterprise. Applicants will be required to engage in ongoing background checks throughout the duration of this position with continued passing results.

Primary Responsibilities

• Engineer, deploy, maintain, and support enterprise Windows Server platforms across on‑premises, private cloud, and public cloud environments.
• Design and implement secure, highly available Windows Server infrastructure solutions aligned with enterprise architecture and cybersecurity standards.
• Lead operating system lifecycle management activities, including platform currency, upgrades, migrations, and decommissioning.
• Develop and maintain automated provisioning, configuration management, and operational workflows using PowerShell, Ansible, and Infrastructure as Code practices.
• Establish and maintain standard Windows server configurations, security baselines, and hardened operating system images.
• Plan, coordinate, and execute operating system patching activities to ensure platform currency, security compliance, and operational stability.
• Analyze security vulnerabilities and configuration risks and implement remediation plans in coordination with cybersecurity teams.
• Implement and maintain identity, access management, and privileged access controls for Windows‑based systems and services.
• Monitor platform health, performance, reliability, and capacity to ensure adherence to service level objectives.
• Investigate and resolve complex platform issues, serving as an escalation resource for Windows infrastructure incidents and problem management activities.
• Develop and maintain technical standards, operational procedures, architectural documentation, and recovery plans.
• Support disaster recovery, backup, restoration, and cyber resiliency initiatives for Windows‑based infrastructure and applications.
• Evaluate emerging technologies and recommend platform improvements that enhance security, automation, reliability, and operational efficiency.
• Collaborate with cloud, security, networking, application, and automation teams to deliver integrated infrastructure solutions.
• Ensure all solutions comply with enterprise security policies, regulatory requirements, and operational governance standards.

Minimum Qualifications

• Bachelor's Degree/4-Year Degree
• 3 or more years of experience with Windows Server systems administration

Equivalent Minimum Qualifications

• High School Diploma/GED
• 8+ years of enterprise systems administration experience
• Demonstrated expertise in Windows Server systems administration systems administration

Preferred Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Engineering, or related field
• 5 or more years of experience administering Windows Server in large enterprise environments
• Microsoft Windows Server Administrator Associate or Windows Server Hybrid Administrator Associate certification
• Microsoft Azure Administrator Associate (AZ-104) certification

Knowledge And Skills

• Experience managing Windows Server 2019, 2022, and 2025 platforms
• Experience with Active Directory, Group Policy, DNS, DHCP, and certificate services
• Experience with Windows Server security hardening, vulnerability remediation, and compliance requirements
• Experience planning and executing Windows Server patching, maintenance, and lifecycle management
• Experience administering Microsoft Azure IaaS virtual machines and hybrid cloud environments
• Experience with VMware vSphere administration and guest operating system management
• Experience with PowerShell scripting and infrastructure automation
• Experience with Ansible Automation Platform for idempotent systems administration
• Experience with enterprise backup, recovery, and disaster recovery technologies
• Experience monitoring and troubleshooting Windows Server performance, availability, and capacity
• Experience supporting highly available and mission‑critical production environments
• Experience with configuration management, desired state configuration, or infrastructure‑as‑code practices
• Strong understanding of identity and access management principles and privileged access controls
• Experience working within ITIL‑based operational and change management processes
• Strong analytical, troubleshooting, and problem‑solving skills
• Ability to communicate technical concepts effectively to technical and non‑technical audiences
• Experience participating in on‑call production support and incident response activities

Job Requirements

• Participation in a rotating on‑call support schedule
• Work hours may vary to support maintenance windows, outages, and project implementations
• Occasional travel for site assessments, deployments, and project support

About Us

CSX is passionate about building a workforce that reflects the values and behaviors of ONE CSX. We are nationally recognized for our commitment to diversity and engagement, as well as our support for veterans and reservists. CSX, based in Jacksonville, Florida, is a premier transportation company. It provides rail, intermodal and rail‑to‑truck transload services and solutions to customers across a broad array of markets, including energy, industrial, construction, agricultural, and consumer products. For nearly 200 years, CSX has played a critical role in the nation's economic expansion and industrial development. Its network connects every major metropolitan area in the eastern United States, where nearly two‑thirds of the nation's population resides. It also links more than 230 short‑line railroads and more than 70 ocean, river and lake ports with major population centers and farming towns alike. More information about CSX Corporation and its subsidiaries is available at www.csx.com. Connect with us on Facebook X LinkedIn Instagram YouTube

Closing Statement

At CSX, two of our six Guiding Principles are Valuing and Developing Employees as well as Operating Safely. We are committed to offering our team members the most competitive compensation and benefits package available, unlimited opportunities for development and growth throughout an exciting and rewarding career, and the safest work environment possible. CSX is an Equal Opportunity Employer Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Click here to view the EEO is Law poster. CSX Transportation and its subsidiaries are not seeking outside assistance or accepting unsolicited resumes from staffing agencies or search firms for employment or contractor opportunities. Any resumes submitted by an outside vendor to any employee at CSX via e‑mail, Internet, or directly to hiring managers without a valid written search agreement in place with the Talent Acquisition / HR department will be deemed the sole property of CSX. No placement fee will be paid in the event a candidate is hired as a result of the referral, or through other means. This role offers an annual salary range based on experience and qualifications. In addition to base salary we provide an annual bonus opportunity. At CSX, we prioritize valuing and developing employees, as well as operating safely. We are committed to offering our team members competitive compensation, a comprehensive benefits package, and unlimited growth opportunities. Our benefits support financial, physical, emotional, and social well‑being, with health plans, wellness programs, and customizable coverage options. Learn more about our benefits here .