Enterprise Engineer I

TAMKO Careers•Dallas, TX

About The Position

The Enterprise Engineer I is a hands-on technical role responsible for supporting and optimizing a predominantly Windows-based enterprise environment (Windows 11 and Windows Server 2022/2025). This position drives secure, repeatable, and efficient operations across hybrid infrastructure platforms, including Azure, VMware, and Hyper-V. The primary focus of the role includes Azure administration, infrastructure automation using Ansible and PowerShell, and virtualization management and automation within vSphere and Hyper-V environments. Secondary responsibilities include supporting and enhancing monitoring and endpoint management platforms such as Zabbix and SCCM/Intune, as well as contributing to zero-touch provisioning and autonomous infrastructure initiatives. Summary of Essential Job Functions To perform this job successfully, an individual must be able to perform each essential function satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. Other duties may also be assigned.

Requirements

3-5 years in enterprise Windows engineering (desktop/server) with solid Ansible, PowerShell, vSphere/Hyper-V experience.
Solid AD/GPO knowledge; ability to translate security baselines into code and support audit requirements.
Habitual use of Git, CI-style testing, idempotence, least-privilege, and safe rollbacks.
Good troubleshooting skills across WinRM, GPO/application of policy, networking, and virtualization.

Nice To Haves

Microsoft (Azure-focused), VMware VCP, or Hyper-V certifications; experience with Zerto, Cohesity, Wasabi, Zabbix, SCCM/Intune.

Responsibilities

Windows automation at scale: Build and maintain Ansible roles/playbooks (via AWX) and PowerShell to provision, configure, harden, and remediate Windows servers/desktops (idempotent, version-controlled, secret-safe).
vSphere/Hyper-V automation: Deploy from templates, customize/rename hosts, join domain, install software, handle reboots with verification, and manage capacity/lifecycle using Ansible + vSphere APIs and PowerShell/Hyper-V cmdlets.
Azure integration: Automate Azure resource changes (CLI/PowerShell) and hybrid identity tasks tied to AD/Entra; enforce RBAC via code.
AD/GPO engineering: Operate AD DS, DNS/DHCP, GPO/gMSA; codify and enforce baselines (RDP, password/lockout, firewall, registry) with compliance evidence.
Patching & compliance: Orchestrate Windows patch workflows and post-patch reviews; track drift and remediation (SCCM/Intune).
Observability & DR: Integrate automation with Zabbix for actionable alerts and with ServiceNow for tickets; script Zerto/Cohesity/Wasabi runbooks and test drills.
Zero-touch: Contribute to Autopilot/Intune zero touch deployments of endpoints.