We are seeking an experienced Information Security Architect with strong Microsoft Windows infrastructure expertise to support the delivery of security solutions to our customers. This role will focus on implementing and securing Windows-based environments.

The ideal candidate will have hands-on experience with Active Directory, Group Policy management, endpoint protection, and role-based access control, and will work directly with customer environments to design, configure, and deploy secure Windows infrastructure solutions.

This hybrid position is located at our East Syracuse, NY, office.

About the Role

This position plays a key role in delivering and implementing information security solutions for customers, ensuring Windows environments are configured securely and aligned with customer regulations. The role requires both strong technical expertise and the ability to work collaboratively with team mates to successfully deploy and support security solutions.

Key Responsibilities

• Architecture Design: Develop, document, and maintain comprehensive security architectures, network designs, and cloud infrastructures

• Risk & Vulnerability Management: Evaluate deliverable systems to identify weaknesses, perform security reviews, and execute ethical hacks or penetration tests.

• Leadership & Guidance: Lead information technology analysts, security engineers, and deployment teams to coordinate effective security protocols and align projects with security guidelines

• Design, implement, and manage Group Policy Objects (GPOs) to enforce security configurations and organizational standards within customer environments.

• Configure, administer, and harden Windows Server and Windows workstation systems as part of security solution deployments.

• Implement and maintain Active Directory security configurations, including user/group management, OU structures, and policy enforcement.

• Design and implement role-based access control (RBAC) and least-privilege access models.

• Deploy, configure, and manage endpoint protection and antivirus solutions.

• Apply system hardening practices aligned with industry security frameworks and best practices.

• Perform security assessments of Windows environments and implement remediation actions.

• Assist in creating secure configurations, patch processes, and compliance with security policies.

• Document system configurations, security controls, and deployment procedures for customer environments.

• Provide technical guidance and knowledge transfer to customer stakeholders when appropriate.

Compensation

• $101,600 - $132,000

The compensation range provided is a general guideline. When extending an offer, Saab, Inc. considers factors including (but not limited to) the role and associated responsibilities, location, and market and business considerations, as well as the candidate's work experience, key skills, and education/training.

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience).

• 6 - 8+ years of experience administering and securing Microsoft Windows environments.

• Strong hands-on experience with Active Directory administration.

• Proven experience creating and managing Group Policy Objects (GPOs).

• Experience implementing role-based access control and identity management practices.

• Hands-on experience deploying or managing endpoint protection / antivirus platforms.

• Solid understanding of Windows security architecture and system hardening techniques.

• Experience performing security assessments and remediation

Preferred Qualifications

• Experience with Ansible or PowerShell scripting and automation.

• Familiarity with security monitoring tools and SIEM platforms.

• Knowledge of security frameworks such as NIST, CIS Benchmarks, or ISO 27001.

• Experience supporting enterprise or multi-tenant environments.

• Relevant certifications such as:

  • CompTIA Security+

  • CISSP

  • Microsoft security or identity certifications

  • GIAC certifications

Desired Tool Experience

Experience with the following tools and applications is highly desirable.

• Microsoft Hyper-V Virtualization

• Splunk

• PDQ

• RSA Authentication Manager

Key Skills

• Windows security architecture

• Active Directory administration

• Group Policy design and management

• Endpoint security and antivirus management

• Identity and access management (IAM)

• System hardening and vulnerability remediation

• Security assessments and remediation

• Customer-facing technical delivery and documentation

Citizenship Requirements:

Must be a U.S. citizen. Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Saab provides an excellent working environment offering professional growth opportunities, competitive wages, work-life balance, a business casual atmosphere and comprehensive benefits.

Highlights include:

• Medical, vision, and dental insurance for employees and dependents

• Generous paid time off, including 8 designated holidays

• 401(k) with employer contributions

• Tuition assistance and student loan assistance

• Wellness and employee assistance resources

• Employee stock purchase opportunities

• Short-term and long-term disability coverage