Sr. Windows Engineer (Top Secret)

Zachary Piper Solutions is seeking a Senior Windows Engineer (MECM) to support DOE National Nuclear Security Administration in Washington, D.C. The team is seeking an engineer to design, integrate, and deploy Microsoft Endpoint Configuration Manager for the critical stockpile management and nuclear security agency. Details below:

Location: Washington, D.C. (100% onsite)



This job opens for applications on 9/28/2026. Applications for this job will be accepted for at least 30 days from the posting date   

Responsibilities of the Windows Engineer:  

• Install, configure, maintain, and support Windows servers, workstations, and related software to ensure optimal performance and availability.
• Deploy, configure, and maintain Microsoft Endpoint Configuration Manager (MECM)
• Manage operating system patching, upgrades, and security updates to maintain system security, compliance, and reliability.
• Monitor server health, system performance, and resource utilization to proactively identify and resolve issues.
• Troubleshoot and remediate hardware, software, and network-related issues with minimal impact to business operations.
• Administer Active Directory, including user accounts, group memberships, permissions, and Group Policy management.
• Implement and maintain security controls, including firewalls, antivirus solutions, encryption, and vulnerability remediation measures.
• Manage backup and recovery solutions, perform testing, and support disaster recovery planning to ensure business continuity.
• Automate administrative tasks and system configurations using PowerShell and scripting tools to improve operational efficiency.
• Maintain accurate system documentation, operational procedures, and technical reports to support ongoing administration and compliance efforts.
• Collaborate with vendors to troubleshoot system issues, improve reliability, and manage SSL certificate deployment and renewal.
• Evaluate server and network architectures and recommend enhancements to improve performance, scalability, and resiliency.
• Administer and support IIS and related web technologies to ensure reliable hosting and operation of web services.
• Partner with cross-functional teams to resolve complex technical issues and serve as an escalation point for advanced support needs.
• Contribute to process improvement initiatives by developing and refining operational procedures, workflows, and service delivery practices.

Qualifications of the Windows Engineer: 

• Bachelor’s degree in a related discipline and 10+ years of system administration and engineering experience
• Active Top Secret clearance
• IAT II Certification required (Sec+, CySA+, etc.)
• Microsoft certification highly preferred (MCSE, MCSA, etc.)
• Must have experience deploying and administering Microsoft Endpoint Configuration Manager (MECM)
• Experience with PowerShell and Bash scripting for automation and troubleshooting
• Experience with virtualization technologies including VMware
• Experience maintaining Active Directory and Group Policy

Compensation of the Windows Engineer:

• Total compensation based on experience level - $170,000-$190,000 **based on experience level**
• Full Benefits: PTO/Holidays, Medical, Dental, and Vision, 401k

#LI-MK1 #LI-Onsite

Keywords: Windows Server, Windows 10/11, Active Directory, Group Policy (GPO), Azure Active Directory (Microsoft Entra ID), PowerShell, Windows Administration, Systems Engineering, Server Management, Server Hardening, Patch Management, Vulnerability Management, IIS Administration, DNS, DHCP, TCP/IP, SCCM, MECM, system administrator, system engineer, vmware, virtualization, top secret, ts/sci, Federal, W2, opentowork, Network Troubleshooting, VMware, Hyper-V, Virtualization, SCCM (Microsoft Configuration Manager), Intune, WSUS, File and Print Services, Backup and Recovery, Disaster Recovery, TS/SCI, High Availability, Failover Clustering, Load Balancing, Security Compliance, Endpoint Security, Microsoft Defender, Identity and Access Management (IAM), Privileged Access Management (PAM), SSL Certificates, PKI, LDAP, Kerberos, Windows Authentication, Performance Monitoring, Capacity Planning, System Automation, Scripting, Incident Response, Change Management, Configuration Management, Infrastructure Management, Log Analysis, Event Viewer, SIEM, Splunk, ELK Stack, Monitoring and Alerting, Technical Documentation, Root Cause Analysis, IT Operations, Server Migration, Cloud Administration, Azure, Microsoft 365, Exchange Administration, SharePoint, Cross-Functional Collaboration, Problem Resolution, Process Improvement, Asset Management, Risk Mitigation, Enterprise Infrastructure, Operational Support, ITIL, ServiceNow, Jira, Network Security, Endpoint Management, Systems Integration, Troubleshooting, System Optimization, Business Continuity, Security Best Practices.