Windows Security Engineer : Remote

We re looking for a Windows expert with a proven track record of designing, automating, and securing largescale enterprise environments. You ll own core Windows platform services (AD, DNS/DHCP, NPS/RADIUS), build and run certificate management as a service (CMaaS), and lead automation across tens of thousands of endpoints and servers. You ll also be our SCCM expert for endpoint computing (Windows 10/11), bringing handson systems administration depth and toptier troubleshooting across OS, apps, networking, and identity. Our footprint is hybrid data center with multicloud (AWS + Google Cloud Platform).

• 8+ years designing, building, and operating enterprise Windows platforms (server + endpoint); 8+ years owning AD, DNS/DHCP, NPS at large scale (10k+ endpoints or equivalent).
• Proven track record delivering:
• Largescale SCCM (MECM) programs: OSD/Task Sequences, application packaging, SUP/WSUSpatching at fleet scale, compliance baselines, and reporting.
• Endpoint computing outcomes: high patch compliance, stable driver/firmware lifecycle, reduced login times, and resilient EAPTLS/WiFi/VPN experiences.
• PKI/CMaaS implementations (ADCS, ACM Private CA, Google Cloud Platform CAS, Venafi, Vault PKI, ACME) with automated issuance/renewal and expiry prevention.
• Automation/IaC (PowerShell/DSC, Terraform, Packer) with CI/CD and testing.
• Troubleshooting expertise:demonstrated success using Sysinternals, WPR/WPA, WinDbg, ETW/WEF, PerfMon, Wireshark, and Windows eventing to drive root cause and preventative engineering.
• Deep AWS experience for Windows workloads; practical Google Cloud Platform experience for Windows services.
• Strong security background: Windows hardening, least privilege/tiered admin, RBAC/PAM integration, WEF SIEM pipelines, zerotrustaligned patterns.

Excellent docs/design writing; ability to lead through influence across Infra, Security, SRE, and Networking.