Windows Security Operations Engineer

•        Own Windows hardening profiles for servers, endpoints, and Active Directory; assess deviations, implement through the change process, and verify control effectiveness.

•        Design and maintain GPO architecture including staged deployment, conflict analysis, change control, and rollback procedures.

•        Own end-to-end remediation for assigned Windows findings: validate, prioritize by severity and exposure, remediate, rescan, and capture formal closure evidence.

•        Provide technical input for risk exceptions and compensating controls; perform trend analysis to identify systemic weaknesses.

•        Own Microsoft Intune and MDE policy, compliance, enrollment, integration, sensor health, and complex troubleshooting.

•        Convert lessons learned into hardening improvements, detection contributions, automation, and runbook updates.

•        Develop production-quality PowerShell and Ansible/AWX automation with version control, peer review, structured error handling, and secure credential management.

Manage assigned work by risk, priority, SLA, and customer maintenance window; keep tickets, runbooks, and handovers accurate and current.

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a closely related technical field.
• 3–5 years of hands-on experience in a Windows Server system administration and troubleshooting and/or security engineering role - services, registry, permissions, event logs, Defender Firewall, BitLocker, and secure remote management.
• Active Directory architecture: Forests, domains, trusts, GPOs, Kerberos/NTLM, DC hardening, gMSA, LAPS, privileged access, and recovery.
• Endpoint & server security: MDE or similar EDR onboarding, policies, alerts, exclusions, sensor health, and troubleshooting.
• Automation engineering: Production-grade PowerShell, Ansible/AWX, Git, secure credentials, error handling, rollback, and peer review.
• Azure/hybrid fundamentals: Entra ID, hybrid identity, Azure RBAC, network and monitoring dependencies, and shared responsibility.
• Logging & investigation: Windows and PowerShell logs plus SIEM tools such as Splunk for triage and containment.
• ITSM & change management: Incident, problem, change, and request processes, including risk, testing, rollback, and evidence.

• Vulnerability remediation: End-to-end lifecycle using Qualys or comparable: finding validation, risk prioritization, remediation, exceptions, rescanning, and formal closure evidence.
• Microsoft Intune security baselines for cloud-managed Windows.
• Microsoft Entra ID: Conditional Access, PIM, access reviews, hybrid join, and sync.
• Defender for Cloud and Servers: posture and workload protection.
• Windows LAPS, Credential Guard, BitLocker, Application Control, and ASR.
• PKI and AD CS: certificate authentication and TLS troubleshooting.
• Forensics and threat hunting.

• Fluent in English, both verbal and written.
• Excellent communication skills and ability to collaborate effectively within a team.

Visit us at www.accenture.com 

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.