{"id":3316721,"url":"https://alion.io/job/leidos-sr-windows-system-engineersme","title":"Sr Windows System Engineer/SME","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":273,"ghost_share":0.004,"stale_share":0.872,"repost_share":0.004,"time_to_fill_p50_days":28,"computed_at":"2026-10-28T05:59:10Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":107900,"max":195050,"currency":"USD","period":"year","gross":null,"usd_annual":195050},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Carbon Black","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"FedRAMP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"ServiceNow","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Sumo Logic","optional":true},{"name":"Windows Server","optional":true}],"status":"live","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-28T13:08:52Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"This highly skilled Windows Infrastructure Engineer position will have experience in securing, scaling, and supporting core enterprise identity and access management platforms. In this role, the candidate will serve as the subject matter expert and highest-tier escalation point for our Active Directory (AD) environment and Azure Active Directory /Microsoft Entra ID cloud integrations. They will be responsible for engineering and architecting robust identity solutions, managing our Enterprise Public Key Infrastructure (PKI), and providing high-level tier -3 architectural support to ensure optimal security, compliance, and system availability across our hybrid environment. This technical resource will support and engage with the infrastructure team on the various tasks being supported by the team at a higher technical level. The position will set standards the rest of the team builds to and serve as an escalation point when an issue escalates to Tier 3 support. They may also provide hands-on support in program operations, configuration, deployment, maintenance, monitoring, maintenance and trouble-shooting activities. A summary of the areas they will provide and qualifications.\nIdentify Architecture\nSecurity & PKI Management\nCloud Design\nAzure Engineering, Administration, and Optimization\nTier 3 Engineering and Trouble-shooting Support\nAccess Governance\nAutomation and Optimization\nDisaster Recovery\nContinuous Improvement\nDocumentation Compliance\nRequired Qualifications:\nBachelor’s degree (or equivalent) in computer science, information systems, engineering, or a related technical field, and eight (8) or more years of progressive Windows Infrastructure Engineer and Architect experience OR Master’s degree in a related field and at least 6 years of relevant experience in above areas. Equivalent experience can substitute for the degree.\nA minimum of six (6) years of experience in cloud operations, engineering, or related field.\nA minimum of three (3) years performing at a senior and lead level with design and architecture ownership for an enterprise Windows environment.\nFamiliarity with federal compliance (NIST, FISMA, FedRAMP) and CIS 4.0 controls.\nSignificant experience designing, operating and maintaining Microsoft Azure environments to include Zero Trust, hybrid cloud, and cross-domain architectures in mission environments.\nExperience with the configuration, deployment, and management of Microsoft Entra ID / Azure AD for centralized identity, single sign-on (SSO), and role-based access control (RBAC) across Azure tenants and subscriptions.\nDemonstrated experience with the integration of federated identity solutions with AWS Identity Center, Entra, or on-premises Active Directory.\nDevelop and enforce Azure governance frameworks, including Azure Policy, Management Groups, and Blueprints, ensuring alignment with DoD Zero Trust and least-privilege principles.\nExperience with Azure Monitor and cost optimization strategies.\nDeep expertise in Microsoft Azure architecture, Microsoft Entra ID and on-prem interoperability.\nAbility to script in one more of the following computer languages PowerShell or others. \nStrong understanding of federated identity, modern authentication protocols (SAML, OIDC, OAuth 2.0), and cross-cloud authentication mechanisms.\nDeep expertise in Microsoft Azure architecture, Microsoft Entra ID and on-prem interoperability.\nHands on experience with and knowledge of networking concepts (DNS, VPNs, load balancers, etc.) and cloud-based networking configurations.\nConfigure, maintain and upgrade 2019, 2022, & 2025 servers operating systems by performing system administration tasks related to:Microsoft Application installation and maintenance\n3rd Party software installation and maintenance\n\nConfigure, maintain and upgrade physical and virtual server installations in FTC datacenters, to include:OS installation and configuration\nOut of Band management configuration (iLO, etc.)\nHardware installation/maintenance (network adapter, memory, hard drives, etc.)\nRAID Configuration\nNetwork adapter configuration\nSCSI and Fiber Channel configuration \n\nExperience and ability to immediately contribute to Automation Tasks and Infrastructure-as-Code tools and templates.\nProvide experience designing, deploying, and maintaining Active Directory Certificate Services (AD CS) / PKI environments.\nApplied knowledge of system security engineering, including CIS and STIG hardening, vulnerability management, and federal compliance frameworks (FISMA, NIST SP 800-53).\nExtensive experience with Visio or other networking diagram tools and solid understanding of Networking principles.\nExcellent troubleshooting skills with the ability to resolve complex technical issues in a timely manner.\nStrong problem-solving skills and ability to conduct root cause analysis.\nActively participate in the process of reviewing and improving operational processes, procedures, technology, and documentation. Support the program team in efforts to improve service delivery to the customer. Adopt program directed procedural changes, process changes, and tool changes as required for the role.\nPerform work activities in accordance with program processes, procedures, and service level agreements.\nSupport other anticipated requirements that will emerge and are reasonably aligned to the role supporting server elements of the infrastructure.\nDemonstrated ability to complete technical projects independently, with strong organizational skills and attention to detail.\nCreate, monitor and drive to resolution change requests and trouble tickets for service level changes that affect Windows Servers and applications installed on Windows servers.\nExcellent written and verbal communication skills. This includes drafting SOPs and technical documentation as well as communication with senior program and customer leadership.\nMust be able to prepare data and presentations then active participation and presenting in Leidos and customer meetings as required.\nundefined\nMust be able to present designs, plans, courses of action, and analyses of alternatives to technical leadership personnel and boards for approvals.\nServiceNow experience and review incoming ServiceNow tickets and work to resolve any incident tickets and service requests as assigned for:\no Server builds\no Server configuration changes\no Windows Permissions changes\no File Server ACL changes\nApplication maintenance for: Symantec Endpoint Protection (Servers), Carbon Black Protection (Servers), DNS/DHCP Updates, & Active Directory (including Group Policy Objects).\nMaintain status of assigned tickets in accordance with program standards and program SLAs, including quality of status and timeliness of updates.\nRequired Certifications\nCurrent DoD 8570/8140 baseline certification appropriate for Intermediate System Administrator roles (e.g., Security+, GSEC, SSCP, or equivalent).\nPreferred Certifications - Any other certifications in support of the stated work scope requirements is a plus such as:\n· Sumo Logic Certified Administrator\n· Sumo Logic Certified Security & Compliance\n· MCSA: Windows Server 2008.\n· MCITP: Enterprise Administrator.\n· MCSE: Security on Microsoft Win Server 2003.\n· MCSA: Security on Microsoft Win Server 2003.\n· MCSE: Security on Microsoft Win 2000.\n· MCSA: Security on Microsoft Win 2000.\n· MCSE on Microsoft Win Server 2003.\n· MCSA on Microsoft Win Server 2003.\n· MCSE on Microsoft Win 2000.\n· MCSA on Microsoft Win 2000.\n· Microsoft Certified Professional.\nClearance, Citizenship, and Work Conditions\nBackground requirements: Must possess, or be eligible to obtain and successfully complete, a Public Trust background investigation and/or Public Trust clearance.\nCitizenship: Must be a U.S. Citizen.\nLocation: Telework: Work primarily offsite with the need to support on site as needed to meet the needs of the program. Remote support from locations other than FTC must be approved by the Leidos TO4 Program Manager.\n Hours: FTC core hours, Monday through Friday, 8:00 a.m. to 5:00 p.m. EST, with occasional overtime, weekend work, or after-hours response to critical outages and scheduled maintenance windows. (Hybrid: Onsite 2x per week. Hours charged limited to no more than 40 hours per week, unless specifically approved by the Leidos TO4 Program Manager.\nPhysical requirements: Ability to lift 50+ pounds.\nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nOctober 26, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\nPay Range:\nPay Range $107,900.00 - $195,050.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":9438,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","C4ISR","Defense Manufacturing","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-27T05:37:13Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":24}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":28,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":195050,"is_top_pay":true},"html_url":"https://alion.io/job/leidos-sr-windows-system-engineersme","json_url":"https://alion.io/job/leidos-sr-windows-system-engineersme.json","meta":{"generated_at":"2026-10-28T14:07:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19232,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-sr-windows-system-engineersme"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-sr-windows-system-engineersme"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-sr-windows-system-engineersme"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-sr-windows-system-engineersme\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-sr-windows-system-engineersme"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3316721}},{"tool":"search_jobs","arguments":{"company":"leidos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3316721},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}