Windows Systems Engineer

Computer World Services • Morrisville, NC

4d

About The Position

Computer World Services Corp (CWS) is seeking a highly motivated, detail-oriented, and technically proficient Windows Systems Engineer to support the National Institute of Environmental Health Sciences (NIEHS) enterprise IT environment. The role is responsible for the reliability, availability, performance, and security of enterprise endpoint management infrastructure, including maintaining the SCCM/MECM hierarchy, managing site systems and services, optimizing content distribution, supporting software deployment and security patching, and maintaining infrastructure health.

The engineer supports Windows desktop and server administration, system hardening, vulnerability remediation, automation, backup and recovery, and infrastructure monitoring. The position works closely with cybersecurity, desktop engineering, server administration, networking, and IT operations teams to maintain a secure, stable, and efficient enterprise environment. Applicants must be able to obtain a Public Trust clearance.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent experience.
• 5–8 years of experience in Windows system administration in enterprise environments.
• Experience supporting VMware virtualized environments.
• Experience with enterprise backup and monitoring systems.
• Applicants must be able to obtain a Public Trust clearance.

Nice To Haves

• ITIL 4 Foundation certification.
• Microsoft Certified: Windows Server Hybrid Administrator Associate or comparable Microsoft infrastructure certification.
• Microsoft endpoint management or Configuration Manager-related certifications.
• Microsoft Certified: Azure Administrator Associate.
• CompTIA Security+.
• VMware Certified Professional – Data Center Virtualization (VCP-DCV).

Responsibilities

• Design, build, configure, maintain, and optimize enterprise SCCM/MECM infrastructure.
• Configure and manage boundaries, boundary groups, client settings, discovery methods, and content distribution strategies.
• Maintain SCCM/MECM database health; perform maintenance and backups; and plan and test disaster recovery.
• Plan and execute SCCM/MECM upgrades, cumulative updates, and hotfixes.
• Monitor infrastructure health, performance, and capacity, and troubleshoot site system failures, replication issues, database connectivity, client communication failures, and content distribution problems.
• Manage role-based access control, security scopes, and hardening of the SCCM/MECM environment.
• Install, configure, administer, and troubleshoot management points, distribution points, software update points, service connection points, and other SCCM/MECM components.
• Maintain technical documentation, infrastructure diagrams, configuration baselines, and standard operating procedures.
• Install, configure, maintain, patch, and troubleshoot Microsoft Windows Server operating systems and associated services.
• Support daily operations of enterprise Windows Server infrastructure across physical and virtual environments.
• Assist with Active Directory, Group Policy, DNS, DHCP, and other Microsoft enterprise infrastructure services.
• Implement configuration changes, operating system updates, and infrastructure enhancements using established change management procedures.
• Monitor Windows Server performance, availability, system logs, and resource utilization.
• Assist with Windows Server workloads in VMware vSphere and vCenter environments and coordinate with virtualization, storage, network, and backup teams to resolve infrastructure issues.
• Implement and maintain Windows and SCCM/MECM security hardening standards aligned with organizational and applicable federal requirements.
• Apply least-privilege principles to administrative access and infrastructure service accounts, and support secure configurations and baselines aligned with NIST, CISA, and organizational requirements.
• Identify and remediate vulnerabilities affecting Windows Server systems, SCCM/MECM infrastructure, and associated services.
• Analyze vulnerability scans, CVEs, security advisories, and configuration findings to determine remediation actions.
• Support remediation associated with applicable CISA Binding Operational Directives and federal cybersecurity requirements.
• Coordinate with cybersecurity teams to prioritize remediation, validate corrective actions, and track outstanding vulnerabilities.
• Support security patch deployment, compliance monitoring, and reporting across managed Windows systems; document security configurations, remediation, and compliance status.
• Develop, test, deploy, and maintain SCCM/MECM applications, packages, programs, task sequences, and configuration baselines.
• Configure and maintain software update points and associated WSUS components.
• Manage software update synchronization, deployment packages, maintenance windows, and update distribution.
• Troubleshoot failed software deployments and update installations, client compliance issues, and content delivery failures.
• Support automated remediation of vulnerable, obsolete, unsupported, or prohibited software.
• Monitor deployment success rates, patch compliance, and endpoint configuration status.
• Support enterprise software lifecycle management and operating system upgrade activities.
• Develop, test, maintain, and troubleshoot PowerShell scripts for Windows Server and SCCM/MECM administration.
• Automate repetitive administrative activities, configuration checks, system maintenance, and operational reporting.
• Support automated vulnerability remediation and configuration compliance validation.
• Develop reusable scripts and documented procedures for common infrastructure management activities.
• Identify opportunities to improve infrastructure efficiency through automation and standardized processes.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level