Description

Hardens Windows servers and workstations to meet NIST SP 800-53 security controls, implementing configuration baselines and continuous monitoring.

This role is on-site.

Responsibilities

• Install, configure, and maintain Windows Server (2019/2022+) and Windows 10/11 environments.
• Implement security controls across NIST families including Access Control (AC), Configuration Management (CM), and System & Communications Protection (SC).
• Manage Group Policy Objects (GPOs), Intune policies, and security baselines to enforce least privilege and firewall rules.
• Perform hardening tasks such as enforcing deny-by-default execution policies, configuring host-based firewalls, and enabling BitLocker.
• Document system security plans (SSP), POA&Ms, and audit evidence for compliance assessments.

Required Skills

• 2+ years of hands-on experience administering Windows servers and workstations in enterprise environments.
• Proficiency with Active Directory, Group Policy, and PowerShell for automation.
• Experience with Microsoft Intune, SCCM/MECM, and Defender suite.
• Understanding of NIST SP 800-53 control families as applied to endpoints and servers.
• Familiarity with compliance tools like Nessus/Tenable and vulnerability remediation.
• Knowledge of Azure AD/Entra ID and Microsoft Defender for Endpoint compliance policies.

Preferred Skills

• Microsoft Certified: Windows Server Hybrid Administrator Associate or Endpoint Administrator.
• CompTIA Security+ certification.

Key Skills

Education

Any Graduate