Senior Server Windows Engineer

The Senior Server Windows Engineer will provide systems administration and migration support for over 2000 windows operating on-premises and cloud tenants/environments within AWS, Azure, Google, and Oracle. This will include working with a team of server engineers to troubleshoot issues for multiple systems in multiple datacenter locations.  The candidate will provide engineering support, implementation, and design services for Microsoft-based systems across the enterprise.  The candidate will be responsible for resolving and completing assigned tasks and change requests and will act as an escalation for support issues.

This position requires a mixture of engineering, operations, hands on technical and support skills. Qualified candidates should have excellent troubleshooting and analytical skills. The individual will work closely with technical leads, infrastructure and operations teams and other cross-department teams to evaluate business needs and provide end-to-end technical solutions and manage, operate, monitor, audit, and harden server assets.

Full-time Onsite at DOT HQ, Washington DC. Ideal candidate will cover later shift providing support ending sometime between 5pm and 7pm daily.  
 

Job Duties:

• Once every 2-3 months support server infrastructure in a 24x7 on-call escalation capacity as part of a team rotation.
• Identify opportunities to innovate, extend, and enhance service delivery everywhere possible including through automation and scripting. 
• Performs security hardening, patching and server certificate updates. 
• Run system scans and analyze reports on system vulnerabilities on over 2000 windows servers in the enterprise.
• Maintain and update environmental documentation, standard Operating Procedures, and engineering documentation.
• Provide support to system administrators to resolve issues when required provide support in response to outages including conducting root cause analysis. 
• Recognize and escalate risks, issues, and concerns when necessary.
• Analyze vulnerability reports identify areas of responsibility for remediation. 
• Resolve known exploited vulnerabilities, prioritizing critical and highs.
• Facilitate coordination of vulnerability remediations across the team. 
• Develop and provide recommendations and remediations for vulnerabilities. 
• Harden Windows OS with secure versions of Transport Layer Security (TLS), and cipher suites according to NIST policy.
• Assist Security Operations personnel in developing Plan of Action & Milestones (POAM’s) for vulnerabilities requiring long-lead time resolve. 
• Work closely with the SCCM/Deployment team to perform routine and bulk patching as well as reporting. 
• Provide on-call support and manage ticket queue.
• Demonstrate a strong appetite to learn and translate evolving threats into real world recommendations.
• Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.
• Provide support for new enterprise systems and in support of engineering solutions to address existing issues.
• Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps