Windows Engineer Tier 2

ABOUT THE ROLE

This Windows Engineer – Tier 2 position supports a critical federal IT infrastructure contract at the U.S. Department of Energy headquarters in Washington, DC. The selected candidate will design, integrate, implement, and provide engineering support for Windows server systems and applications — including the build-out of new server environments. A primary emphasis of this role is Microsoft Endpoint Configuration Manager (MECM).

The engineer will manage and maintain both physical and virtual Windows server infrastructure, collect performance data from across the environment, and develop automated workflows that build on existing tools, processes, and platforms. This is a hands-on, on-site position requiring deep technical expertise, a team-oriented mindset, and alignment with PRI core values: trust, efficiency, and commitment.

ROLES & RESPONSIBILITIES

• Install, configure, and maintain Windows servers, workstations, and associated software to ensure optimal system performance.
• Apply OS patches, updates, and security fixes to ensure system security, compliance, and regular software upgrades.
• Continuously monitor system health, server performance, and resource usage to identify issues and optimize efficiency.
• Diagnose and resolve hardware, software, and network issues related to Windows environments, ensuring minimal disruption to operations.
• Administer user accounts, permissions, and group policies via Active Directory and other tools to ensure appropriate access controls.
• Implement and enforce security policies including firewalls, antivirus, encryption, and vulnerability management to safeguard Windows systems.
• Configure, test, and manage backup solutions; ensure disaster recovery plans are in place for system restoration.
• Automate routine administrative tasks and system configurations using PowerShell or other scripting languages to enhance operational efficiency.
• Maintain clear and detailed documentation of system configurations, procedures, and troubleshooting steps; assist with reporting and metric collection as needed.
• Provide advanced administration of Windows Active Directory, including trusts, functional levels, migrations, and group policies.
• Develop and track change requests for software upgrades and patches, ensuring systems remain up-to-date and secure.
• Work with vendors to resolve configuration issues and improve system reliability; install and manage SSL certificates on Windows systems as needed.
• Analyze network and server design, recommending modifications to enhance performance, reliability, and scalability.
• Monitor, manage, and remediate server vulnerabilities based on security scans and reports.
• Understand and manage IIS (Internet Information Services) and related web technologies to ensure smooth operation of web services.
• Collaborate with cross-functional teams to resolve complex technical issues and serve as a point of escalation for support-related matters.
• Contribute to process development within the functional area and where it connects to other operational processes.
• Perform other related duties as assigned.

TECHNICAL ENVIRONMENT

Microsoft

Linux

Splunk

Ansible

Tenable / GEMS

NON-NEGOTIABLE REQUIREMENTS

• Active Top Secret clearance with investigation current within the last 5 years — NON-NEGOTIABLE.
• On-site presence required — this position is NOT remote-eligible.
• New hire start dates are the 1st and 16th of each month — candidate must be available to begin on one of these dates.

SUCCESS METRICS & KPIS

Performance for this role will be assessed against the following key indicators. Candidates should be prepared to speak to prior experience in each area during the screening process.

KPI / Metric

Description

1. System Uptime & Availability

Maintain high availability of Windows servers and infrastructure.

2. Issue Resolution Time

Speed and efficiency in resolving system failures and performance problems.

3. Patch Management

Effective deployment of security patches and updates across Windows systems.

4. System Performance & Optimization

Optimize servers and workstations for speed, reliability, and efficiency.

5. Security & Compliance

Ensure Windows environments meet organizational and regulatory standards.

6. Backup & Disaster Recovery

Effectiveness of backup solutions and system restoration capability.

7. User Satisfaction & Support

Quality of support for Windows-related user issues.

8. Automation & Scripting

Automate common tasks and configurations via PowerShell or equivalent.

9. Documentation & Knowledge Sharing

Thoroughness and clarity of system documentation.

10. Proactive Problem Prevention

Identify and address potential issues before they impact operations.

11. Collaboration & Teamwork

Collaborate effectively with network, security, and support teams.

IMPORTANT NOTICES TO APPLICANTS

Drug Testing & Background Investigation

Prospective applicants are hereby notified that pre-employment drug testing for the absence of illegal drugs as defined in 10 CFR 707.4 will be conducted by the employer. A background investigation by the Federal government may be required to obtain an access authorization prior to employment, and subsequent reinvestigations may be required.

Counterintelligence Evaluation — 10 CFR Part 709

This position is covered by the Counterintelligence Evaluation Program regulations at 10 CFR Part 709. Applicants are advised that successful completion of a counterintelligence evaluation may include a counterintelligence-scope polygraph examination as a condition of employment.

Equal Employment Opportunity

This position and all hiring decisions will be made without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Federal Contractor Compliance

As a federal contractor, Intrinsic Resolution, LLC complies with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA). No disability-related inquiries will be made prior to a conditional offer of employment, except as permitted by applicable law.

Employee Rights Under the NLRA

As a federal contractor, the Company complies with Executive Order 13496 and informs employees of their rights under the National Labor Relations Act (NLRA). Information regarding these rights is available at the workplace and from the National Labor Relations Board.

Service Contract Labor Standards (SCLS)

This position is covered by the Service Contract Labor Standards (SCLS). Compensation and fringe benefits will be provided in accordance with the applicable U.S. Department of Labor wage determination and any applicable collective bargaining agreement.

Pay: $85.00 - $91.45 per hour

Benefits:

• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Application Question(s):

• US citizenship is required for this program support. Are you a US citizen?

Experience:

• Microsoft: 4 years (Required)
• Ansible: 1 year (Preferred)
• Linux: 2 years (Required)
• Splunk: 3 years (Required)
• • Install, configure, and maintain Windows servers: 3 years (Required)
• • Install, configure, and maintain Windows workstations: 3 years (Required)
• Vulnerability Management and tools: 4 years (Required)

Location:

• Washington, DC 20585 (Required)

Security clearance:

• Top Secret (Required)

Work Location: In person