IT - Sr Staff Systems Engineer (Active Directory, Powershell, and Windows/O365 Infrastructure Administration)

Job Summary:

We are looking for a skilled detail-oriented specialist to manage and secure Cadence’s Active Directory environment, Windows server administration including OS hardening, vulnerability, patch management. Candidate with solid background in Windows based environment and Active Directory architecture, identity, and access management, and securing directory services against evolving threats.

Job Description:

• Provide day-to-day administration and support of Microsoft Active Directory environments (version 2016/209 and above).

• Version upgrade of Windows Active Directory. Setting up Read/Write and Read only domain controllers.

• Maintain and troubleshoot Group Policy Objects (GPOs) to ensure secure and consistent configurations.

• Setup and manager authentication Policies / Silos, gMSA.

• Work with DNS, DHCP, and other core services closely integrated with AD.

• Perform regular audits and cleanup of AD objects to maintain a secure and efficient environment.

• Monitor and troubleshoot authentication issues including Kerberos, NTLM, and account lockouts.

• Ensure the security and integrity of the Active Directory infrastructure.

• Conduct regular audits of AD objects, group memberships, and permissions to identify and remediate misconfigurations or security risks.

• Administer and maintain Windows Server environments. Implement and maintain security hardening across Windows Servers. Version 2016/1029 and above

• Analyze security bulletins, prioritize patches based on risk, and deploy patches.

• Document changes, configurations, and standard operating procedures.

• Proficiency in PowerShell or other scripting languages for task automation.

Requirements:

• 10+ years of experience in support of Active directory and windows server environments.

• Proficiency with PowerShell scripting and other scripting tools for auditing, automation, and remediation.

• In-depth knowledge of Active Directory, Kerberos, GPOs, DNS, and DHCP.

• Strong understanding of Microsoft Windows Server environments and administration.

• Experience with a Microsoft O365 environment is a plus.

• Familiarity with security best practices for hybrid identity environments.

• Strong troubleshooting and analytical skills.

• Good written and verbal Communications Skills.

Education:

• Must have a Bachelors Degree in Engineering/Technical field.

Job Location:

• This is an onsite position. Must be able to work in-person from Cadence’s San Jose office; Monday through Thursday.

The annual salary range for California is $136,500 to $253,500. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the salary range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location. Our benefits programs include: paid vacation and paid holidays, 401(k) plan with employer match, employee stock purchase plan, a variety of medical, dental and vision plan options, and more.