Windows Systems Engineer - Security Hardening

About the role

Plexlane is hardening and modernizing Windows infrastructure on a security-modernization program and needs a hands-on engineer for Windows hardening, systems administration, and hypervisor work. This role is remote with periodic onsite work and travel across North America and the UK (Canada, Seattle, and the UK).

What you'll do

• Harden Windows Server and Windows endpoints to recognized security baselines (CIS, DISA STIG, and/or Microsoft security baselines).
• Configure and manage Group Policy, security settings, patching, and endpoint protection.
• Perform hands-on Windows administration: builds, configuration, troubleshooting, and remediation.
• Provision, harden, and maintain hypervisor/virtualization hosts (Hyper-V and/or VMware).
• Support secure configuration, vulnerability remediation, and compliance evidence.
• Document configurations and runbooks; travel onsite as needed.

Must-haves

• 5+ years hands-on Windows systems engineering/administration.
• Demonstrated Windows hardening to a recognized baseline (CIS / DISA STIG / Microsoft baselines).
• Strong Group Policy, PowerShell, patch management, and endpoint security.
• Hands-on hypervisor experience (Hyper-V and/or VMware ESXi).
• Able and willing to travel internationally and work onsite (Canada, Seattle, UK); valid passport.
• U.S. Green Card holder or U.S. Citizen (this role cannot provide visa sponsorship).

Nice-to-haves

• Azure / Entra ID, Intune / SCCM.
• SIEM and vulnerability tooling; security certifications (Security+, MCSE).
• Scripting/automation at scale; experience in regulated or GCC High environments.

Engagement

• 1099 contract, $40-50/hr, remote (U.S.) with periodic onsite travel (Canada, Seattle, UK).

About Plexlane

Plexlane is an AI-enabled IT, security and transformation firm. Plexlane is an equal-opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected status.

Pay: $40.00 - $50.00 per hour

Application Question(s):

• Are you a U.S. Citizen or U.S. Green Card holder? (This role cannot provide visa sponsorship.)
• This role requires periodic onsite travel to Canada, Seattle, and the UK. Are you able and willing to travel internationally, and do you hold a valid passport?
• Do you have hands-on experience hardening Windows Server and endpoints to a recognized security baseline (CIS, DISA STIG, or Microsoft security baselines)?
• Do you have hands-on hypervisor/virtualization experience with Hyper-V and/or VMware (provisioning, hardening, and maintenance)?
• This is a 1099 contract role. Are you able to work on a 1099 basis?

Willingness to travel:

• 25% (Preferred)

Work Location: Remote