Windows Systems Engineer

Computer World Services Corp (CWS) is seeking a highly motivated, detail-oriented, and technically proficient Windows System Engineer to support the National Institute of Environmental Health Sciences (NIEHS) enterprise IT environment.

This position plays a critical role in ensuring the reliability, availability, performance, and security of the enterprise endpoint management infrastructure. Responsibilities include maintaining the SCCM/MECM hierarchy, managing site systems and associated services, optimizing content distribution, supporting software deployment and security patching, and maintaining infrastructure health.

The Windows System Engineer will support Windows Desktop and Server administration, system hardening, vulnerability remediation, automation, backup and recovery, and infrastructure monitoring. The position works closely with cybersecurity, desktop engineering, server administration, networking, and IT operations teams to maintain a secure, stable, and efficient enterprise environment.

Key Tasks & Responsibilities Infrastructure Engineering and Administration

• Design, build, configure, maintain, and optimize the enterprise SCCM/MECM infrastructure.
• Configure and manage boundaries, boundary groups, client settings, discovery methods, and content distribution strategies across the enterprise.
• Maintain SCCM/MECM database health, perform regular maintenance tasks, backups, and disaster recovery planning and testing.
• Plan and execute upgrades, cumulative updates, and hotfixes for the SCCM/MECM infrastructure.
• Monitor infrastructure health, performance, and capacity; troubleshoot site system failures, replication issues, and content distribution problems.
• Manage role-based access control (RBAC), security scopes, and overall hardening of the SCCM/MECM environment.
• Install, configure, administer, and troubleshoot management points, distribution points, software update points, service connection points, and other SCCM/MECM infrastructure components.
• Troubleshoot site system failures, database connectivity, replication issues, client communication failures, and content distribution problems.
• Maintain technical documentation, infrastructure diagrams, configuration baselines, and standard operating procedures for the SCCM/MECM environment.
• Install, configure, maintain, patch, and troubleshoot Microsoft Windows Server operating systems and associated services.
• Support the daily operation of enterprise Windows server infrastructure across physical and virtual environments.
• Assist with Active Directory, Group Policy, DNS, DHCP, and other Microsoft enterprise infrastructure services.
• Implement configuration changes, operating system updates, and infrastructure enhancements following established change management procedures.
• Monitor Windows Server performance, availability, system logs, and resource utilization.
• Assist with Windows Server workloads operating in VMware vSphere and vCenter environments.
• Coordinate with virtualization, storage, network, and backup teams to resolve infrastructure-related issues.

Security Hardening and Vulnerability Management

• Implement and maintain Windows systems and SCCM/MECM security hardening standards aligned with organizational and applicable federal cybersecurity requirements.
• Apply least-privilege principles to SCCM/MECM administrative access and infrastructure service accounts.
• Support the implementation of secure configurations and security baselines consistent with applicable NIST, CISA, and organizational requirements.
• Identify and remediate security vulnerabilities affecting Windows Server systems, SCCM/MECM infrastructure components, and associated services.
• Analyze vulnerability scan results, CVEs, security advisories, and configuration findings to determine…