Windows Cyber Range Automation Engineer

Booz Allen Hamilton; North Dakota; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a Windows Systems Automation Engineer to design, automate, and secure Windows Server and workstation environments for isolated cyber ranges supporting DoD missions.

You will combine Windows administration, cloud engineering, and infrastructure-as-code practices using PowerShell, AWS CDK, CloudFormation, and Terraform to build repeatable deployment pipelines and secure configurations.

Qualifications

• 6+ years of experience administering or engineering Windows Server environments.
• 2+ years of experience supporting a U.S. Government or federal environment.
• Experience with Active Directory, DNS, Group Policy, and automated domain provisioning.
• Experience developing PowerShell automation for infrastructure deployment, configuration, and security auditing.
• Experience with infrastructure-as-code tools such as AWS CDK, CloudFormation, or Terraform.
• Experience using Git and CI/CD pipelines to manage and deploy infrastructure changes.
• Experience with automated patching, compliance tracking, and endpoint management.
• Knowledge of STIGs, NIST SP 800-53 controls, and Windows security-hardening practices.
• Experience troubleshooting complex system, identity, network, and application issues.
• HS diploma or GED.
• DoD 8570/8140 IAT Level II-compliant certification, such as Security+, CySA+, or GSEC.
• Ability to obtain an IAT Level III-compliant certification, such as SecurityX, CISSP, or CCNP Security, within 6 months of start date.
• Experience administering Windows workloads in AWS (Nice to have).
• Experience with AWS Systems Manager, Secrets Manager, IAM, S3, or CloudWatch (Nice to have).
• Experience with AWS EC2 Image Builder, Packer, or another automated image-building platform (Nice to have).
• Experience with AWS CDK and TypeScript (Nice to have).
• Experience with PowerShell Desired State Configuration or Pester (Nice to have).
• Experience automating Microsoft Office and enterprise application deployment (Nice to have).
• Experience with SCCM, MECM, Chocolatey, or similar software-management tools (Nice to have).
• Experience administering Linux systems in a hybrid environment (Nice to have).
• Experience with SQL Server, PostgreSQL, or MongoDB (Nice to have).
• Experience building cyber ranges, test environments, or other disposable cloud infrastructure (Nice to have).
• Ability to clearly communicate technical designs and troubleshooting findings to engineers, operators, and leadership (Nice to have).

Responsibilities

• Automate Windows Server and workstation deployments using AWS CDK, CloudFormation, Terraform, or similar infrastructure-as-code tools.
• Design and maintain Active Directory, DNS, Group Policy, and identity services for isolated range environments.
• Develop advanced PowerShell scripts for provisioning, domain joins, configuration management, security auditing, and software installation.
• Build and maintain reusable Windows machine images through automated image pipelines.
• Apply STIGs and other security-hardening standards to Windows servers and endpoints.
• Automate patching, vulnerability remediation, inventory, and compliance reporting.
• Integrate systems with secrets management, logging, monitoring, and remote-management services.
• Develop automated tests and deployment validation to identify configuration issues before release.
• Troubleshoot complex Windows, Active Directory, authentication, networking, and application issues.
• Maintain technical documentation, configuration standards, and operational runbooks.

Skills

Windows administration

Cyber security basics

Automation scripting

Infrastructure as code

Education

HS diploma or GED

DoD 8570/8140 IAT Level II cert (e.g., Security+, CySA+)

IAT Level III-ready within 6 months

Tools

AWS CDK

CloudFormation

Terraform

PowerShell

Active Directory

DNS

Group Policy

SCCM/MECM

Packer

Job description

Booz Allen Hamilton is seeking a Windows Systems Automation Engineer to design, automate, and secure Windows Server and workstation environments for isolated cyber ranges supporting DoD missions.

You will combine Windows administration, cloud engineering, and infrastructure-as-code practices using PowerShell, AWS CDK, CloudFormation, and Terraform to build repeatable deployment pipelines and secure configurations.