Windows Administrator (m/f/d)

Role Purpose

Windows Server Patch Management

• Oversee end-to-end patch management lifecycle for Windows Servers using WSUS and SCCM
• Ensure timely deployment of OS and application patches across large-scale environments
• Monitor patch compliance and generate reports for audits and management review
• Troubleshoot patch deployment failures and implement remediation plans
• Align patching practices with CIS Benchmarks and internal policies

Active Directory Security & Hardening

• Implement and maintain Active Directory (AD) security best practices, including:

+ Role-Based Access Control (RBAC)

• + Secure Kerberos configuration and policies
• Conduct periodic reviews of:
• + User access rights and privileged accounts
• + Group memberships and service accounts
• Identify and remediate AD vulnerabilities and misconfigurations

Group Policy & Endpoint Security Baselines

• Design and enforce Group Policy Objects (GPOs) for enterprise-wide security configurations
• Implement security baselines across 10,000+ endpoints (servers and workstations)
• Ensure systems comply with:
• + Internal security standards
• + CIS Benchmark configurations
• Continuously monitor and fine-tune GPOs for efficiency and compliance

Compliance & Security Operations

• Ensure infrastructure adheres to internal security policies and regulatory requirements
• Support internal and external audits by providing evidence of patching and configuration compliance
• Maintain documentation of system configurations, patch status, and AD changes
• Collaborate with cybersecurity teams to respond to vulnerabilities and incidents

Infrastructure Maintenance & Support

• Maintain and support Windows Server environments (on-premises and hybrid)
• Perform regular system health checks and proactive maintenance
• Support identity and access management processes within AD
• Participate in infrastructure improvement initiatives and automation efforts

Education

• Bachelor’s degree in:
• + Information Technology
• + Computer Science
• + Networking or related field

Experience

• 4–8+ years of experience in:

+ Windows Server Administration

• + Active Directory management in large enterprise environments
• Proven experience managing 10,000+ endpoints is highly preferred
• Hands-on experience with:
• + WSUS and SCCM for patch management
• + GPO design and enforcement

Technical Skills

• Strong knowledge of:

+ Windows Server OS (2016/2019/2022)

• + Active Directory architecture and security
• + Kerberos authentication and policies
• Experience with:
• + CIS Benchmarks and system hardening practices
• + Endpoint security configuration and compliance tools
• Familiarity with:
• + Hybrid environments (on-prem + Azure AD)
• + PowerShell scripting for automation

Soft Skills

• Strong problem-solving and troubleshooting ability
• Attention to detail with a strong security mindset
• Ability to manage tasks in large, complex environments
• Effective communication and teamwork skills

Certifications (Preferred / Required)

• Microsoft Certified: Windows Server Hybrid Administrator Associate

• Microsoft 365 Certified: Security Administrator Associate

• Additional certifications (nice to have):

• Risk Awareness & Mitigation