Windows Security Operations Engineer

Accenture i s a global professional services company with leading capabilities in digital, cloud, and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services, and Accenture Song — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 740,000+ people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries.

We are looking for a hands-on Security Engineer to protect and continuously improve Windows environments across Windows Server, Active Directory, endpoints, and Azure/hybrid services. You will translate vulnerability findings, alert data, and security-policy requirements into tested, automated, and auditable improvements — working alongside IAM, platform, cloud, and DevOps teams.

The role combines deep technical engineering with managed-service discipline: clear ownership, transparent communication, and verifiable outcomes delivered within customer governance processes.

This role participates in on-call rotations to provide 24/7 coverage for critical security events.

To keep it short, below are some key responsibilities:- Own Windows hardening profiles for servers, endpoints, and Active Directory; assess deviations, implement through the change process, and verify control effectiveness.

• Design and maintain GPO architecture including staged deployment, conflict analysis, change control, and rollback procedures.
• Own end-to-end remediation for assigned Windows findings: validate, prioritize by severity and exposure, remediate, rescan, and capture formal closure evidence.
• Provide technical input for risk exceptions and compensating controls; perform trend analysis to identify systemic weaknesses.
• Own Microsoft Intune and MDE policy, compliance, enrollment, integration, sensor health, and complex troubleshooting.
• Convert lessons learned into hardening improvements, detection contributions, automation, and runbook updates.
• Develop production-quality PowerShell and Ansible/AWX automation with version control, peer review, structured error handling, and secure credential management. Manage assigned work by risk, priority, SLA, and customer maintenance window; keep tickets, runbooks, and handovers accurate and current.

Requirements and technical knowledge:- Bachelor's degree in Computer Science, Information Security, Information Technology, or a closely related technical field.

• 3–5 years of hands-on experience in a Windows Server system administration and troubleshooting and/or security engineering role - services, registry, permissions, event logs, Defender Firewall, BitLocker, and secure remote management.
• Active Directory architecture: Forests, domains, trusts, GPOs, Kerberos/NTLM, DC hardening, gMSA, LAPS, privileged access, and recovery.
• Endpoint & server security: MDE or similar EDR onboarding, policies, alerts, exclusions, sensor health, and troubleshooting.
• Automation engineering: Production-grade PowerShell, Ansible/AWX, Git, secure credentials, error handling, rollback, and peer review.
• Azure/hybrid fundamentals: Entra ID, hybrid identity, Azure RBAC, network and monitoring dependencies, and shared responsibility.
• Logging & investigation: Windows and PowerShell logs plus SIEM tools such as Splunk for triage and containment.
• ITSM & change management: Incident, problem, change, and request processes, including risk, testing, rollback, and evidence. Bonus points if you have:- Vulnerability remediation: End-to-end lifecycle using Qualys or comparable: finding validation, risk prioritization, remediation, exceptions, rescanning, and formal closure evidence.
• Microsoft Intune security baselines for cloud-managed Windows.
• Microsoft Entra ID: Conditional Access, PIM, access reviews, hybrid join, and sync.
• Defender for Cloud and Servers: posture and workload protection.
• Windows LAPS, Credential Guard, BitLocker, Application Control, and ASR.
• PKI and AD CS: certificate authentication and TLS troubleshooting.
• Forensics and threat hunting. The Rest of the qualities, you know them:- Fluent in English, both verbal and written.
• Excellent communication skills and ability to collaborate effectively within a team. Benefits:- Certification
• Career Counselling
• 25 day paid vacation
• Flexible home office policy
• Options to buy shares
• Luxury health & dental insurance
• Food vouchers
• Multisport cards
• Employee Assistance Program