This role is responsible for designing, building, and maintaining automation frameworks that implement security-driven configuration changes across Windows servers, workstations, and Active Directory infrastructure in response to CVEs and emergent threats.

The engineer translates security intent into repeatable automated tasks that can be deployed safely at scale. They partner closely with cybersecurity teams to operationalize advisories and with AD platform teams to ensure changes align with enterprise standards.

Typical responsibilities include:

• Automating GPO creation, modification, and rollback
• Automating Windows and application patch deployment
• Creating AD-safe configuration enforcement workflows
• Building guardrails that prevent unsafe or partial deployments
• Rapidly converting CVE guidance into deployable updates within hours
• Supporting break-glass? mitigation scenarios with...