Azure, Windows & Linux System Engineer

Job Description

Azure, Windows & Linux System Engineer – Elkhart, IN –

Start Date:

Right Away – Zip Code: 46514

• Design, implement, and configure MDR/SIEM/EDR solutions using Microsoft Sentinel and Microsoft Defender for Endpoint.
• Lead large‑scale rollout of endpoint agents across Azure, Windows, Linux, and OT environments.
• Develop and maintain Ansible playbooks to automate deployments and configuration at scale.
• Create and optimize Power Shell and Bash scripts to streamline onboarding, validation, and troubleshooting processes.
• Provision and manage Azure resources, including Log Analytics Work spaces, resource groups, RBAC roles, and service principals.
• Configure and maintain Sentinel data ingestion pipelines using Azure Monitor Agent (AMA) and Data Collection Rules (DCRs).
• Implement and maintain syslog/CEF forwarding from network and security devices.
• Integrate logs from platforms such as Check Point and Extreme Networks into the SIEM.
• Deploy and onboard Microsoft Defender for Endpoint across Windows and Linux systems.
• Validate telemetry flow and ensure endpoints are correctly reporting to the SIEM.
• Troubleshoot Windows Server (2019/2022/2025) and Active Directory issues, including GPOs, service accounts, and RBAC permissions.
• Perform Linux system administration tasks on Rocky Linux and Ubuntu (package management, system services, firewall configuration).
• Ensure all implementations align with organizational security standards and PCI compliance requirements.
• Maintain awareness of PCI‑scoped environments during deployment and data ingestion activities.
• Work cross‑functionally with security, infrastructure, and operations teams to ensure successful deployments.
• Create and maintain technical documentation, runbooks, and operational procedures.
• Conduct testing and validation of data pipelines, detections, and endpoint coverage.
• Continuously improve deployment processes and system performance through automation and best practices.

• Ansible playbook development for at‑scale Windows/Linux/OT rollout.
• Azure administration – Log Analytics Work spaces, resource groups, RBAC, service principals.
• Sentinel data ingestion – AMA, DCRs, syslog/CEF forwarders.
• Microsoft Defender for Endpoint deployment on Windows and Linux servers.
• Rocky Linux and Ubuntu administration competence for troubleshooting package management, system services, firewalls on the Linux side; GPO, services, and AD account/RBAC.
• Windows Server 2019/2022/2025 and Active Directory competence for troubleshooting GPO, service accounts, and AD RBAC for the DC/server agent rollout.
• Check Point and Extreme Networks basic knowledge (for the syslog server).
• Power Shell and Bash scripting.
• PCI scope awareness.

• Adheres to all company policies and procedures including, but not limited to those identified within the Standards of Business Conduct and the Employee Handbook, as may be amended from time to time.
• Adheres to all applicable laws and regulations and the company’s governance/compliance program.
• Becomes knowledgeable of internal control responsibilities through training and instruction. Responsible and accountable for internal control performance within their area of responsibility. Participates in the internal controls self‑assessment process.
• Ensures concerns with internal control design or performance and process changes that impact internal control execution are communicated to management.
• Possesses a full and complete understanding of the internal control requirements within their area of ownership/responsibility. Responsible and accountable for internal control implementation and performance within their area of ownership/responsibility. Ensures proper internal control change management protocol is followed.

• Medical / Health Benefits with multiple plan options, Flexible Spending Accounts, Dental and Vision.
• 401k.
• On‑the‑job training / cross‑training.
• Life Insurance, disability insurance.
• Voluntary life insurance for family members available.
• Accident and critical illness insurance optional.
• Scheduled performance reviews.

EOE/F/M/D/V