Senior Systems Engineer

Department: Engineering / Infrastructure
Reports To: VP Engineering
Location: McKinney TX (Hybrid / Remote flexibility)

Position Summary

The Senior Windows Systems Engineer is responsible for the design implementation and management of enterprise-grade Microsoft Windows infrastructure with a primary focus on Active Directory (AD) and related Windows services. This individual will serve as a technical subject matter expert (SME) for authentication identity management and Windows-based systems ensuring reliability scalability and security across the enterprise or managed client environments.

Key Responsibilities

Active Directory & Identity Services

• Design implement and maintain Active Directory forests domains and trusts in complex multi-site enterprise environments.

• Manage and secure Group Policy Objects (GPOs) Organizational Units (OUs) and delegated administration structures.

• Configure and support AD-integrated DNS DHCP and Certificate Services (PKI).

• Monitor and maintain replication health FSMO roles and domain controllers.

• Integrate and troubleshoot hybrid identity with Azure AD / Entra ID including Conditional Access and SSO configurations.

Windows Server Infrastructure

• Build configure and support Windows Server systems () across physical and virtualized environments (VMware Hyper-V Azure).

• Maintain server patching hardening and compliance with security baselines (CIS NIST SOC2).

• Automate common administrative tasks using PowerShell and configuration management tools.

• Manage DFS print services file permissions and shared storage systems.

Enterprise Systems & Support

• Provide advanced troubleshooting and root-cause analysis for Windows-based systems and authentication issues.

• Collaborate with network security and cloud teams to ensure cohesive system performance and security.

• Support BCDR strategies including backups replication and failover of AD and Windows workloads.

• Participate in on-call rotation for escalated systems incidents.

Project & Process Leadership

• Lead infrastructure upgrade and migration projects (e.g. domain consolidation AD modernization Azure AD Connect upgrades).

• Contribute to standardization efforts and documentation (runbooks diagrams SOPs).

• Mentor junior engineers and provide escalation support for complex technical issues.

• Drive continuous improvement through automation monitoring and proactive maintenance.

Required Qualifications

• 7 years of experience supporting enterprise Windows Server environments.

• Expert-level knowledge of Active Directory GPO DNS DHCP and ADCS.

• Strong PowerShell scripting and automation skills.

• Experience with Azure AD / Entra ID integration and hybrid identity solutions.

• Proficiency with Windows clustering DFS and performance monitoring tools.

• Understanding of networking fundamentals (TCP/IP routing VLANs firewalls).

• Familiarity with security frameworks and best practices for privileged access management.

Preferred Qualifications

• Microsoft certifications (e.g. MS-102 AZ-104 or legacy MCSE).

• Experience in managed services or multi-tenant enterprise environments.

• Exposure to Intune MDM or Microsoft Endpoint Manager.

• Experience with automation/orchestration tools (Ansible Terraform or similar).

• Familiarity with SIEM integration (Microsoft Sentinel Splunk etc.).

Key Attributes

• Strong analytical and problem-solving skills.

• Excellent written and verbal communication; able to document and present technical concepts clearly.

• Self-motivated and able to work independently or as part of a distributed team.

• Commitment to operational excellence and service quality.