Windows Server & AD Security Administrator

About the role

The Windows Server & Active Directory Security Administrator is responsible for protecting and maintaining a large‑scale Windows environment. You will manage patch deployment, harden Active Directory, and enforce security baselines across more than 10,000 endpoints, ensuring compliance with internal standards and industry benchmarks such as CIS.

Key responsibilities

• Oversee end‑to‑end Windows Server patch management using WSUS and SCCM, monitor compliance and generate audit reports.
• Implement and maintain Active Directory security best practices, including privileged access management, role‑based access control, and secure Kerberos policies.
• Design, enforce, and continuously tune Group Policy Objects and security baselines for servers and workstations.
• Support internal and external audits by providing evidence of patching and configuration compliance.
• Maintain and support on‑premises and hybrid Windows Server environments, perform health checks, and participate in automation initiatives.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Networking or a related field.
• 4–8+ years of experience in Windows Server administration and Active Directory management in large enterprises.
• Proven experience managing environments with 10,000+ endpoints is highly preferred.

Required skills

• Windows Server OS (2016/2019/2022)
• Active Directory architecture and security
• WSUS and SCCM for patch management
• Group Policy Object (GPO) design and enforcement
• CIS Benchmarks and system hardening practices
• Kerberos authentication and policy configuration
• Endpoint security concepts