Windows Systems Engineer
LiveRamp is the data collaboration platform of choice for the world’s most innovative companies. A groundbreaking leader in consumer privacy, data ethics, and foundational identity, LiveRamp is setting the new standard for building a connected customer view with unmatched clarity and context while protecting precious brand and consumer trust. LiveRamp offers complete flexibility to collaborate wherever data lives to support the widest range of data collaboration use cases-within organizations, between brands, and across its premier global network of top-quality partners.
Hundreds of global innovators, from iconic consumer brands and tech giants to banks, retailers, and healthcare leaders turn to LiveRamp to build enduring brand and business value by deepening customer engagement and loyalty, activating new partnerships, and maximizing the value of their first-party data while staying on the forefront of rapidly evolving compliance and privacy requirements.
The mission of our Business Technology (BT) team is to empower LiveRamp’s workforce through technology solutions that make their work easier, faster, and more effective. Within BT, our Client Services team plays a fundamental role in this work. Our Windows Systems Engineers design, implement, and operate the Windows platform and related services that power LiveRamp’s global workforce.
You will:
Windows platform engineering & administration
Own the Windows client and supporting server platformfor corporate IT, including standard images, configuration baselines, and security policies.
Design, implement, and maintain standardized Windows build imagesand gold images (e.g., through Intune, Autopilot, Configuration Manager, or similar tools).
Administer Windows Serverinstances supporting BT services (e.g., file, print, app, and infrastructure services) including patching, troubleshooting, and performance tuning.
Ensure Windows endpoints and servers meet LiveRamp’s security standards, including encryption, endpoint protection, and compliance baselines.
Endpoint management (Windows-focused)
Administer and optimize Microsoft Intune, Workspace ONE, or similar toolsfor Windows endpoint management:
Device enrollment and compliance
Configuration profiles and policies
Software deployment and updates
Implement and maintain Windows Updateand patch management strategies for clients and servers, balancing security and stability.
Collaborate with Security to deploy and manage CrowdStrike, Netskope, and other security toolson Windows endpoints and servers.
Maintain accurate, automated inventory of Windows devicesand installed software, supporting license management and lifecycle planning.
Automation & integration
Identify opportunities to automate Windows lifecycletasks (onboarding, offboarding, group policy, software deployment, access changes, patching).
Build and maintain automation using PowerShell, Python, or other scripting languagestargeting Windows environments.
Utilize REST APIs, Graph API, and integration platformsto connect Intune, Azure AD, on-prem AD (if applicable), ITSM, and asset management systems.
Adopt configuration-as-code and infrastructure-as-code patterns (e.g., Git-based policy definitions, scripted server builds, policy as code).
Identity, directory, and access (Windows ecosystem)
Work with Azure Active Directoryand/or on-prem Active Directoryto manage users, groups, devices, and policies.
Support and optimize Single Sign-On (SSO)and conditional access policies in partnership with Security and Identity teams.
Troubleshoot authentication and authorization issues impacting Windows users and services.
Incident response, troubleshooting & escalation
Provide Tier 3-4 supportfor complex Windows-related incidents (OS, hardware, drivers, group policy, app compatibility, performance, and security).
Troubleshoot issues across the Windows stack: OS, hardware, endpoint management, VPN, Wi-Fi, identity, and line-of-business apps.
Own complex incidents and problems end-to-end, driving root cause analysis and sustainable fixes through configuration and automation.
Document troubleshooting steps, known issues, and runbooksto enable support teams and self-service.
Optimize & innovate
Continually assess the Windows user experienceand platform health, leveraging monitoring and metrics to prioritize improvements.
Propose and implement enhancements in areas like Autopilot, app deployment strategies, self-service, device performance, and security posture.
Evaluate new features in Windows, Intune, Azure AD, and related tools, piloting changes and rolling them out safely at scale.
Educate & enable
Provide guidance to users and BT teammates on Windows best practices, features, and self-service tools.
Develop and deliver training, workshops, and documentationfocused on Windows usage, troubleshooting, and self-help.
Mentor junior engineers and support staff in Windows systems engineering and scripting.
Your team will:
You’ll be part of the Business Technology - Client Services team, a globally distributed group responsible for:
Delivering an exceptional desktop computer experience for all LiveRampers.
Partnering with Security, Network Engineering, and other BT teams to keep our environment secure, performant, and reliable.
Administering and automating key business applications and services used across the company.
Enabling leaders and teams to move faster by removing technology friction and operational toil wherever it appears.
About you:
An insatiable need to help people and feel the satisfaction of delighting your customers, even while your primary focus is on systems engineering and automation.
Incredible patience and empathy when working with users and teams who may be less technically deep, and the ability to explain Windows and infrastructure concepts clearly.
At least 5 years of experiencein Windows systems engineering, systems administration, or IT operations, with significant hands-on responsibility for Windows platforms in an enterprise environment.
Strong experience administering Windows clientenvironments:
Standard images and Autopilot/OSD
Group Policy (or equivalent modern management policies)
Application deployment and support
Solid experience administering Windows Server, including roles such as file/print, application, and infrastructure services.
Deep proficiency with Microsoft Intune, Workspace ONE, Configuration Manager, or similar tools for Windows device management.
Strong PowerShellskills (and optionally Python) for automation of Windows configuration, reporting, and lifecycle tasks.
Experience deploying and operating security tools on Windows(e.g., CrowdStrike, Netskope, disk encryption, VPN, certificates).
Experience designing, implementing, and maintaining automations and integrationsacross Windows, Azure AD, on-prem AD (if applicable), ITSM, and asset systems.
Experience with Google Workspace (gSuite)and Microsoft 365administration.
A solid understanding of networking concepts(DNS, DHCP, VPN, Wi-Fi, routing, firewalls) as they relate to Windows clients and servers.
Experience with monitoring, logging, and alerting for Windows endpoints and servers, and using data to drive reliability and performance improvements.
Experience with AI tools or modern automation platforms in IT operations is a plus.
An ISO, ITIL, or similar certification, or a strong desire to obtain them.
Preferred skills
Experience working in a fast-paced, high-growth, or global technology company.
Experience with hybrid identitymodels (Azure AD + on-prem AD) and modern management transitions.
Prior experience contributing to or leading Windows migration or modernization projects(e.g., Windows 10 to 11, on-prem to Intune).
Comfort working across multiple time zones and collaborating with global, cross-functional teams.
Experience contributing to or authoring documentation, runbooks, automation playbooks, and user-facing help content.
Experience with infrastructure-as-code or configuration-as-code practices (e.g., Git-backed definitions for policies and scripts).
Benefits:
Flexible paid time off, paid holidays, options for working from home, and paid parental leave.
Comprehensive Benefits Package: LiveRamp offers a comprehensive benefits package designed to help you be your best self in your personal and professional lives. Our benefits package offers medical, dental, vision, accident, life and disability, an employee assistance program, voluntary benefits as well as perks programs for your healthy lifestyle, career growth, and more. Your medical benefits extend to your dependents including parents.
More about us:
LiveRamp’s mission is to connect data in ways that matter, and doing so starts with our people. We know that inspired teams enlist people from a blend of backgrounds and experiences. And we know that individuals do their best when they not only bring their full selves to work but feel like they truly belong. Connecting LiveRampers to new ideas and one another is one of our guiding principles-one that informs how we hire, train, and grow our global team across nine countries and four continents. Click here to learn more about Diversity, Inclusion, & Belonging (DIB) at LiveRamp.
We use automated decision systems (ADS) as part of our recruitment and hiring process. If you require an accommodation or believe that the use of an ADS may create a barrier to your application or participation in the hiring process due to a disability or other protected characteristic, please let us know. We are committed to providing reasonable accommodations and ensuring an equitable hiring experience for all candidates.
To all recruitment agencies: LiveRamp does not accept agency resumes. Please do not forward resumes to our jobs alias, LiveRamp employees or any other company location. LiveRamp is not responsible for any fees related to unsolicited resumes.