IT - Sr Staff Systems Engineer (Active Directory and Windows Server Administration)

Cadence is seeking a Sr Staff Systems Engineer to manage and secure Active Directory and Windows Server environments. This role involves day-to-day administration, version upgrades, GPO management, authentication policy setup, and working with core services like DNS/DHCP. The specialist will ensure security and integrity through regular audits, vulnerability management, patch deployment, and security hardening, utilizing PowerShell for automation.

Must Have

• Manage and secure Active Directory environments.
• Administer Windows Server environments (2016/2019 and above).
• Perform OS hardening, vulnerability, and patch management.
• Maintain and troubleshoot Group Policy Objects (GPOs).
• Set up and manage authentication Policies / Silos, gMSA.
• Work with DNS, DHCP, and other AD-integrated services.
• Monitor and troubleshoot Kerberos, NTLM, and account lockouts.
• Conduct regular audits of AD objects and permissions.
• Proficiency in PowerShell scripting for automation.
• 15 years of experience in Active Directory and Windows server support.
• In-depth knowledge of Active Directory, Kerberos, GPOs, DNS, DHCP.
• Strong understanding of Windows Server administration.
• Familiarity with hybrid identity security best practices.
• Strong troubleshooting and analytical skills.
• Good written and verbal communication skills.
• Engineering degree (Computers/Electronics).

Perks & Benefits

• Paid vacation
• Paid holidays
• 401(k) plan with employer match
• Employee stock purchase plan
• Medical plan options
• Dental plan options
• Vision plan options

Job Summary:

We are looking for a skilled detail-oriented specialist to manage and secure Active Directory environment, Windows server administration including OS hardening, vulnerability, patch management. Candidate with solid background in Windows based environment and Active Directory architecture, identity, and access management, and securing directory services against evolving threats.

Job Description:

• Provide day-to-day administration and support of Microsoft Active Directory environments (version 2016/209 and above).
• Version upgrade of Windows Active Directory. Setting up Read/Write and Read only domain controllers.
• Maintain and troubleshoot Group Policy Objects (GPOs) to ensure secure and consistent configurations.
• Setup and manager authentication Policies / Silos, gMSA.
• Work with DNS, DHCP, and other core services closely integrated with AD.
• Perform regular audits and cleanup of AD objects to maintain a secure and efficient environment.
• Monitor and troubleshoot authentication issues including Kerberos, NTLM, and account lockouts.
• Ensure the security and integrity of the Active Directory infrastructure.
• Conduct regular audits of AD objects, group memberships, and permissions to identify and remediate misconfigurations or security risks.
• Administer and maintain Windows Server environments. Implement and maintain security hardening across Windows Servers. Version 2016/1029 and above
• Analyze security bulletins, prioritize patches based on risk, and deploy patches.
• Document changes, configurations, and standard operating procedures.
• Proficiency in PowerShell or other scripting languages for task automation.

Requirements:

• 15 years of experience in support of Active directory and windows server environments.
• In-depth knowledge of Active Directory, Kerberos, GPOs, DNS, and DHCP.
• Strong understanding of Microsoft Windows Server environments and administration.
• Familiarity with security best practices for hybrid identity environments.
• Proficiency with PowerShell scripting and other scripting tools for auditing, automation, and remediation.
• Strong troubleshooting and analytical skills.
• Good written and verbal Communications Skills.

Education:

• Should have engineering degree (Computers/Electronics)

The annual salary range for California is $136,500 to $253,500. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the salary range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location. Our benefits programs include: paid vacation and paid holidays, 401(k) plan with employer match, employee stock purchase plan, a variety of medical, dental and vision plan options, and more.