Security Tool Engineer - Senior Windows Systems Administrator

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance.

What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded.  The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

Security Tool Engineer - Senior Windows Systems Administrator

Position Overview

The Senior Windows Systems Administrator runs and secures the Windows Server and desktop environment that supports HHS security tools (Windows Server 2016–2022, Windows 10/11), and applies the security tooling, automation and project leadership expected of a Security Tool Engineer IV.

Key Responsibilities

• Design, implement and maintain Windows Server 2016, 2019 and 2022 environments, keeping them reliable, secure and well-tuned.
• Administer on-premises Active Directory, Group Policy Objects, user account management, DHCP, DNS, Certificate Services and IPv4/IPv6 addressing.
• Manage and optimize Active Directory and IIS configurations to meet operational requirements.
• Build and support Windows Server Failover Clustering (WSFC).
• Write, maintain and troubleshoot advanced PowerShell and PowerCLI scripts that automate repetitive work, and run administration and O&M from the command line.
• Design and operate a disaster recovery and backup strategy using hybrid cloud solutions such as CommVault Metallic and Cohesity.
• Deploy and troubleshoot OS updates, upgrades, security patches and software on Windows 10/11 desktops and Windows Servers, physical and virtual.
• Troubleshoot LAN/WAN connectivity, throughput and related network problems.
• Lead and coordinate initiatives, managing requirements, schedules and actions so projects deliver on time.
• Work with Security, Infrastructure and Operations teams to develop and manage automation scripts that improve security operations.
• Maintain and troubleshoot existing security infrastructure alongside server and networking teams.
• Implement and manage advanced solutions for infrastructure management, security operations and threat intelligence, integrated with existing security tools.
• Troubleshoot information security systems and give strategic guidance on extending their capabilities.
• Keep assessing and improving frameworks and stay current on security and automation technologies.
• Keep detailed documentation of system designs, configurations, processes and service records.
• Analyze implementation requirements, modify existing systems and prepare specifications from customer requests.
• Collaborate with cross-functional teams, and lead and mentor junior team members.
• Take part in a 24/7/365 on-call rotation.
• Required Qualifications
• About 8+ years of information security work experience, including hands-on Windows administration.
• Windows administration across on-premises Active Directory, GPOs, user account management, DHCP, DNS, TCP/IP, IPv4/IPv6, Certificate Services and WSFC.
• Administration of Windows Server 2016–2025 and Windows 10/11 in physical and virtualized environments.
• Advanced PowerShell and PowerCLI scripting, plus scripting in Python, Bash or similar for security automation.
• Backup and disaster recovery design with hybrid cloud tools such as CommVault Metallic and Cohesity.
• Patch, update and upgrade deployment across Windows desktops and servers.
• Ability to lead initiatives and to troubleshoot LAN/WAN and throughput issues.
• Knowledge of or familiarity with CIS Control 4, NIST SP 800-53 Revision 5 and DISA STIGs for hardening.
• InfoSec certification is required; Microsoft certifications are preferred.
• Education: a computer science, CIS, information security or IT bachelor's degree (or higher) with about 8+ years of information security experience, or an equivalent combination of education, certifications and IT experience.
• Work authorization: U.S. work authorization and E-Verify eligibility.
• Ability to obtain an HHS public trust determination, with elevated-privilege access expected to need a high-risk (Tier 4) investigation.
• Preferred certification: current Microsoft certification such as Windows Server Hybrid Administrator Associate, Identity and Access Administrator Associate or Cybersecurity Architect Expert.
• The actual base salary offered will be determined based on a variety of factors, including, but not limited to, the candidate’s relevant years and depth of experience, skills and qualifications, education, certifications, internal equity, and the specific requirements of the position. Candidates should not assume they will be offered the top of the posted range, as compensation is based on the individual qualifications and overall fit for the role.