Windows Systems Engineer

Computer World Services Corp (CWS) is seeking a highly motivated, detail-oriented, and technically proficient Windows System Engineer to support the National Institute of Environmental Health Sciences (NIEHS) enterprise IT environment. This position plays a critical role in ensuring the reliability, availability, performance, and security of the enterprise endpoint management infrastructure. Responsibilities include maintaining the SCCM/MECM hierarchy, managing site systems and associated services, optimizing content distribution, supporting software deployment and security patching, and maintaining infrastructure health. The Windows System Engineer will support Windows Desktop and Server administration, system hardening, vulnerability remediation, automation, backup and recovery, and infrastructure monitoring. The position works closely with cybersecurity, desktop engineering, server administration, networking, and IT operations teams to maintain a secure, stable, and efficient enterprise environment. Key Tasks & Responsibilities

Infrastructure Engineering and Administration

• Design, build, configure, maintain, and optimize the enterprise SCCM/MECM infrastructure.
• Configure and manage boundaries, boundary groups, client settings, discovery methods, and content distribution strategies across the enterprise.
• Maintain SCCM/MECM database health, perform regular maintenance tasks, backups, and disaster recovery planning and testing.
• Plan and execute upgrades, cumulative updates, and hotfixes for the SCCM/MECM infrastructure.
• Monitor infrastructure health, performance, and capacity; troubleshoot site system failures, replication issues, and content distribution problems.
• Manage role-based access control (RBAC), security scopes, and overall hardening of the SCCM/MECM environment.
• Install, configure, administer, and troubleshoot management points, distribution points, software update points, service connection points, and other SCCM/MECM infrastructure components.
• Troubleshoot site system failures, database connectivity, replication issues, client communication failures, and content distribution problems.
• Maintain technical documentation, infrastructure diagrams, configuration baselines, and standard operating procedures for the SCCM/MECM environment.
• Install, configure, maintain, patch, and troubleshoot Microsoft Windows Server operating systems and associated services.
• Support the daily operation of enterprise Windows server infrastructure across physical and virtual environments.
• Assist with Active Directory, Group Policy, DNS, DHCP, and other Microsoft enterprise infrastructure services.
• Implement configuration changes, operating system updates, and infrastructure enhancements following established change management procedures.
• Monitor Windows Server performance, availability, system logs, and resource utilization.
• Assist with Windows Server workloads operating in VMware vSphere and vCenter environments.
• Coordinate with virtualization, storage, network, and backup teams to resolve infrastructure-related issues.

Security Hardening and Vulnerability Management

• Implement and maintain Windows systems and SCCM/MECM security hardening standards aligned with organizational and applicable federal cybersecurity requirements.
• Apply least-privilege principles to SCCM/MECM administrative access and infrastructure service accounts.
• Support the implementation of secure configurations and security baselines consistent with applicable NIST, CISA, and organizational requirements.
• Identify and remediate security vulnerabilities affecting Windows Server systems, SCCM/MECM infrastructure components, and associated services.
• Analyze vulnerability scan results, CVEs, security advisories, and configuration findings to determine appropriate remediation actions.
• Support remediation activities associated with applicable CISA Binding Operational Directives and federal cybersecurity requirements.
• Coordinate with cybersecurity teams to prioritize remediation efforts, validate corrective actions, and track outstanding vulnerabilities.
• Support security patch deployment, compliance monitoring, and reporting across managed Windows systems.
• Maintain documentation of security configurations, remediation activities, and system compliance status.

Patch Management, and Endpoint Configuration

• Support the development, testing, deployment, and maintenance of SCCM/MECM applications, packages, programs, task sequences, and configuration baselines.
• Configure and maintain software update points and associated Windows Server Update Services (WSUS) components.
• Manage software update synchronization, deployment packages, maintenance windows, and update distribution.
• Troubleshoot failed software deployments, update installations, client compliance issues, and content delivery failures.
• Support automated remediation of vulnerable, obsolete, unsupported, or prohibited software.
• Monitor deployment success rates, patch compliance, and endpoint configuration status.
• Support enterprise software lifecycle management and operating system upgrade activities.

Automation and Operational Improvement

• Develop, test, maintain, and troubleshoot PowerShell scripts supporting Windows Server and SCCM/MECM administration.
• Automate repetitive administrative activities, configuration checks, system maintenance, and operational reporting.
• Support automated vulnerability remediation and configuration compliance validation.
• Develop reusable scripts and documented procedures for common infrastructure management activities.
• Identify opportunities to improve infrastructure efficiency through automation and standardized processes.

Education & Experience

Education

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field (or equivalent experience)

Experience

• 5-8 years of experience in Windows system administration in enterprise environments
• Experience supporting VMware virtualized environments
• Experience with enterprise backup and monitoring systems

Certifications

• ITIL 4 Foundation
• Microsoft Certified: Windows Server Hybrid Administrator Associate or comparable Microsoft infrastructure certification.
• Microsoft endpoint management or Configuration Manager-related certifications.
• Microsoft Certified: Azure Administrator Associate.
• CompTIA Security+.
• VMware Certified Professional – Data Center Virtualization (VCP-DCV).

Security Clearance

Applicants must be able to obtain a Public Trust clearance

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations. Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at hr@cwsc.com.