Principal Windows Server Engineer

We are seeking a highly skilled Windows Server Engineer to join our Infrastructure Engineering team. This role is responsible for the engineering, administration, security, automation, and lifecycle management of enterprise Windows Server platforms supporting critical business applications and services. The ideal candidate will have deep expertise in Windows Server administration, patch management, operating system upgrades, performance optimization, infrastructure automation, software deployment, compliance reporting, and server lifecycle management. This position will collaborate with application owners, security teams, storage teams, virtualization teams, cloud engineers, and operations personnel to ensure a secure, reliable, and highly available server environment.

• Engineer, deploy, configure, and maintain enterprise Windows Server environments.

• Manage server operating systems including Windows Server 2016, 2019, and 2022.

• Perform server builds, provisioning, decommissioning, and lifecycle management activities.

• Maintain server standards, hardening guidelines, and operational procedures.

• Support physical, virtual, and cloud-based Windows infrastructure.

• Plan, schedule, and execute operating system patching activities.

• Coordinate maintenance windows with application and business stakeholders.

• Remediate security vulnerabilities identified through internal and external scans.

• Ensure compliance with corporate security and regulatory requirements.

• Produce patching compliance metrics and executive-level reporting.

• Lead Windows Server upgrade and migration initiatives.

• Develop migration strategies from legacy operating systems.

• Perform impact assessments and compatibility analysis.

• Coordinate application validation and testing activities.

• Maintain upgrade roadmaps and lifecycle plans.

• Install, configure, and maintain infrastructure software agents and management tools.

• Support deployment of:

• Monitoring agents

• Backup agents

• Security software

• Endpoint management tools

• Vulnerability scanning tools

• Logging and observability platforms

• Develop automated software deployment processes.

• Develop automation using:

• PowerShell

• Desired State Configuration (DSC)

• Ansible

• Infrastructure-as-Code frameworks

• Automate repetitive operational and administrative tasks.

• Create self-service capabilities where appropriate.

• Improve operational efficiency through workflow automation.

• Monitor and analyze Windows Server performance.

• Identify CPU, memory, disk, and network bottlenecks.

• Perform root cause analysis for performance issues.

• Develop capacity forecasts and growth recommendations.

• Optimize operating system configurations for performance and stability.

• Maintain inventory of Windows Server assets.

• Track software licensing consumption and compliance.

• Produce audit support documentation and reports.

• Partner with asset management and procurement teams.

• Support internal and external compliance reviews.

• Implement and maintain security baselines.

• Support Active Directory and Group Policy administration.

• Ensure compliance with SOX, security, and infrastructure standards.

• Participate in security incident response activities.

• Drive remediation efforts for identified risks and vulnerabilities.

• Provide Level 3 engineering support for critical incidents.

• Participate in outage investigations and root cause analyses.

• Develop permanent corrective actions to prevent recurrence.

• Support after-hours maintenance and incident response when required.

• Maintain architecture diagrams and operational documentation.

• Develop standard operating procedures and technical runbooks.

• Create executive and operational dashboards.

• Report on patch compliance, server health, vulnerability status, and lifecycle metrics.

• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent experience.

• 7+ years of Windows Server administration experience in a large enterprise environment.

• Hands-on experience with:

• Windows Server 2016/2019/2022

• Active Directory

• Group Policy

• PowerShell scripting

• Microsoft IIS

• Windows Failover Clustering

• DNS and DHCP

• Experience with enterprise patching solutions.

• Experience supporting virtualized environments using VMware or Hyper-V.

• Strong troubleshooting and root cause analysis skills.

• Experience managing infrastructure in regulated environments.

• Microsoft certifications (AZ-800, AZ-801, Azure Administrator, etc.).

• Experience with:

• Azure

• AWS

• SCCM / MECM

• Tanium

• ServiceNow

• Splunk

• Dynatrace

• SolarWinds

• Ansible

• Terraform

• Experience with infrastructure security and vulnerability management programs.

• Experience supporting large-scale environments consisting of hundreds or thousands of servers.

• Familiarity with disaster recovery and business continuity processes.

• Windows Server 2016/2019/2022

• Windows Core Administration

• PowerShell

• DSC

• Ansible

• Terraform

• Splunk

• Dynatrace

• Grafana

• SolarWinds

• VMware vSphere

• Hyper-V

• Microsoft Azure

• AWS

• Active Directory

• Group Policy

• MFA

• Vulnerability Management

• Security Hardening

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

AT&T will not hire any applicants for this position who require employer sponsorship now or in the future. 

Joining our team comes with amazing perks and benefits:

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

Weekly Hours:

Time Type:

Location:

Salary Range: