Senior Staff System Engineer

Title: Sr Staff Systems Engineer

Location: San Jose, CA

Duration: Permanent

Salary: DOE - $130-$150K/Year

Job Description:

1. 10 years’ experience

2. Extensive Microsoft Active Directory (NOT Azure AD) knowledge and experience

3. Preferably experience in a Microsoft O365 environment

4. PowerShell knowledge and practice

5. Must be able to work from San Jose office (onsite/in-person)

6. Bachelor’s degree in engineering/Technical field is a must

Job Summary:

We are looking for a skilled detail-oriented specialist to manage and secure Active Directory environment, Windows server administration including OS hardening, vulnerability, patch management. Candidate with solid background in Windows based environment and Active Directory architecture, identity, and access management, and securing directory services against evolving threats.

Job Description:

• Provide day-to-day administration and support of Microsoft Active Directory environments (version 2016/209 and above).
• Version upgrade of Windows Active Directory. Setting up Read/Write and Read only domain controllers.
• Maintain and troubleshoot Group Policy Objects (GPOs) to ensure secure and consistent configurations.
• Setup and manager authentication Policies / Silos, gMSA.
• Work with DNS, DHCP, and other core services closely integrated with AD.
• Perform regular audits and cleanup of AD objects to maintain a secure and efficient environment.
• Monitor and troubleshoot authentication issues including Kerberos, NTLM, and account lockouts.
• Ensure the security and integrity of the Active Directory infrastructure.
• Conduct regular audits of AD objects, group memberships, and permissions to identify and remediate misconfigurations or security risks.
• Administer and maintain Windows Server environments. Implement and maintain security hardening across Windows Servers. Version 2016/1029 and above
• Analyze security bulletins, prioritize patches based on risk, and deploy patches.
• Document changes, configurations, and standard operating procedures.
• Proficiency in PowerShell or other scripting languages for task automation.

Requirements:

• 10 years of experience in support of Active directory and windows server environments.
• In-depth knowledge of Active Directory, Kerberos, GPOs, DNS, and DHCP.
• Strong understanding of Microsoft Windows Server environments and administration.
• Experience with a Microsoft O365 environment is a plus.
• Familiarity with security best practices for hybrid identity environments.
• Proficiency with PowerShell scripting and other scripting tools for auditing, automation, and remediation.
• Strong troubleshooting and analytical skills.
• Good written and verbal Communications Skills.