Windows Engineer (Expert)

BAE Systems•Herndon, VA

27d•$149,603 - $254,317

About The Position

We are seeking an experienced Windows Automation & Patching Engineer to support multiple enterprise domains. This role is responsible for engineering, automating, and maintaining patching and configuration management solutions across a complex, heterogeneous IT environment spanning physical, virtual, and cloud-based systems. The successful candidate will engineer automated solutions that simplify patch distribution, reduce manual effort, increase reliability, and support the organization’s transition toward cloud-enabled operations. This includes developing and maintaining scripts, workflows, and infrastructure-as-code to enhance system management at scale.

Requirements

11+ years of relevant experience with a Bachelor’s degree, 9+ years with a Master’s degree
Core System Engineering & Troubleshooting
Tier 3 troubleshooting experience in enterprise Windows environments
Hands-on experience with Windows Server OS 2016, 2019, and 2022
Knowledge of Active Directory, DNS, DHCP
Patching, Automation & Configuration Management
Advanced PowerShell scripting
Experience with WSUS across multiple enclaves and in offline/air-gapped systems.
Familiarity with cloud patching tools (Azure Update Management, AWS SSM)
Familiarity with SCCM/ConfigMgr or similar enterprise patching tools
Experience with vulnerability remediation automation and STIG compliance workflows
Virtualization & Infrastructure
Experience with VMware (vSphere 4.x–6.x) and Microsoft Hyper-V (2016–2022)
Experience with commercial cloud providers including Azure, Google Cloud (GCP), and Oracle Cloud (OCI)
Professional Skills
Ability to prioritize and execute tasks effectively
Ability to work independently or within a team
Willingness and ability to learn new technologies quickly
Strong customer service and communication skills

Nice To Haves

Cloud certifications (Azure/AWS)
Experience with automation/orchestration tools such as AWS Lambda
Experience with cloud-native monitoring tools (Azure Sentinel, CloudWatch) or Splunk automation
Experience creating enterprise-level documentation and architectural diagrams
Experience with DSC, CI/CD pipelines, GitHub/GitLab, Jenkins Pipeline
Experience with AWS services including VPC, EC2, ELB, S3, IAM, Security Groups, Fleet Manager, and EventBridge

Responsibilities

Manage and automate patch deployment and configuration management across multiple domains and enclaves.
Develop automation solutions using PowerShell, Python, APIs, or orchestration frameworks to streamline system updates and administrative tasks.
Support hybrid and cloud patching capabilities using tools such as Azure Update Management, AWS Systems Manager (SSM), and SCCM/ConfigMgr.
Engineer improvements to the enterprise patching infrastructure and contribute to the design of a new automated update and hotfix distribution system.
Perform automation-driven server configuration, baseline enforcement, compliance reporting, and STIG/vulnerability remediation.
Provide Tier 3 troubleshooting and root-cause analysis for complex Windows systems.
Migrate, refactor, and modernize traditional server workloads to support cloud compatibility and virtualization strategies.
Monitor infrastructure performance, proactively identify issues, and implement automated remediation with minimal user impact.
Translate customer requirements into hardware/software specifications and perform system integration, verification, and validation.
Prepare technical documentation, diagrams, and patching process workflows for customer and team use.
Work independently in a fast-paced environment while maintaining strong communication and problem-solving skills.
Deliver strong customer service and collaborate effectively with technical teams.