Windows Administrator – Server & AD Security

About the role

The Windows Server & Active Directory Security Administrator is responsible for protecting and maintaining a large‑scale Windows environment. You will manage patch deployment, harden Active Directory, and enforce security baselines across more than 10,000 endpoints, ensuring compliance with internal policies and industry standards such as CIS.

Key responsibilities

• Oversee end‑to‑end Windows Server patch management using WSUS and SCCM, monitor compliance and generate audit reports.
• Implement and maintain Active Directory security best practices, including privileged access management, role‑based access control, and Kerberos policy hardening.
• Conduct periodic reviews of user rights, privileged accounts, group memberships and service accounts, and remediate identified vulnerabilities.
• Design, enforce and continuously fine‑tune Group Policy Objects and security baselines for servers and workstations.
• Support internal and external audits by providing evidence of patching and configuration compliance.
• Maintain documentation of system configurations, patch status and AD changes, and collaborate with cybersecurity teams on incident response.
• Perform regular health checks, proactive maintenance, and contribute to automation initiatives for the Windows infrastructure.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Networking or a related field.
• 4–8+ years of experience in Windows Server administration and Active Directory management in large enterprises.
• Proven experience supporting 10,000+ endpoints is highly preferred.

Required skills

• Windows Server OS (2016/2019/2022).
• Active Directory architecture and security.
• WSUS and SCCM for patch management.
• Group Policy Object (GPO) design and enforcement.
• CIS Benchmarks and system hardening practices.
• Kerberos authentication and policy configuration.
• Endpoint security configuration and compliance tools.