Description

You will own Windows and Linux security hardening, Active Directory administration, and endpoint protection at scale.

This role is hybrid.

Responsibilities

• Administer Active Directory, Group Policy Objects, and security templates.
• Implement CIS Benchmarks for Windows, Linux, and endpoint systems.
• Manage endpoint security platforms (Defender for Endpoint, CrowdStrike, SentinelOne, Trellix, or Symantec).
• Execute vulnerability management using Tenable, Qualys, or Rapid7.
• Deploy security controls including PAM, MFA, encryption, and application whitelisting.

Required Skills

• 5+ years of experience in Windows Server and Active Directory Administration.
• Hands-on expertise with Group Policy Objects and AD security best practices.
• Strong scripting experience using PowerShell for automation and policy deployment.
• Proficiency with vulnerability management tools: Tenable, Qualys, or Rapid7.
• Knowledge of security frameworks: CIS, NIST, and ISO 27001.
• Experience with endpoint security platforms (Microsoft Defender, CrowdStrike, SentinelOne, Trellix, or Symantec).
• Understanding of security controls: PAM, MFA, Endpoint Encryption, Application Whitelisting, Device Control.

Preferred Skills

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Security certifications (CISSP, Security+, Microsoft Security, GIAC, or CIS Benchmark-related).
• Experience in enterprise-scale security operations and compliance environments.

Key Skills

Education

Bachelor's degree