Windows Systems Engineer: AD, 365, Security & Automation

STN Inc; Pleasanton (CA); On-site; USD 175,000 - 195,000; Full time

Benefits offered by this job

Health Coverage – Medical, Dental &amp

Vision

Job summary

STN Inc. seeks a Systems Engineer to own day-to-day health, security, and lifecycle of Windows Server, Active Directory, and Microsoft 365 for managed-services customers.

You will administer servers, AD upgrades, and certificate lifecycle, author PowerShell automation, and manage 365/Entra ID including Exchange Online. Strong patching discipline and multi-customer communication are key.

Qualifications

• 5+ years hands-on with Windows Server and Active Directory.
• Experience with DNS, DHCP, and Group Policy administration.
• Ability to script with PowerShell and automate tasks.
• Experience with PKI, AD CS, or certificate lifecycle.
• Knowledge of security, patching, MFA, and CA concepts.
• Experience with PCI/HIPAA regulated environments.
• Microsoft 365 and Entra ID administration including Exchange Online.
• Virtualization experience with VMware vSphere or Hyper-V.

Responsibilities

• Administer Windows Server environments across multiple customer sites.
• Plan and execute Active Directory domain upgrades and topology changes.
• Develop and maintain PowerShell scripts for provisioning and automation.
• Manage Microsoft 365, Entra ID, and Exchange Online configurations.
• Own patch cadence and endpoint protection, address vulnerabilities.
• Support MFA/Conditional Access rollouts and identity hygiene.
• Monitor backups and run test restores, ensure RPO/RTO targets.
• Maintain runbooks and documentation for multi-customer environments.
• Act as L3 escalation point for service desk and drive root-cause analysis.

Skills

Windows Server

Active Directory

DNS/DHCP

Group Policy

PowerShell

Security & patching

Microsoft 365

VMware/Hyper-V

Education

Bachelor's degree in IT

Tools

Cohesity

Veeam

Intune

SCCM/MECM

NinjaOne

Datto

Nessus

Qualys

Job description

STN Inc. seeks a Systems Engineer to own day-to-day health, security, and lifecycle of Windows Server, Active Directory, and Microsoft 365 for managed-services customers.

You will administer servers, AD upgrades, and certificate lifecycle, author PowerShell automation, and manage 365/Entra ID including Exchange Online. Strong patching discipline and multi-customer communication are key.