Windows Security Engineer

Apply Now

Experienced Professionals

London, New York

Information Security

Aureviums

A Career with Aurevium's Global Information Security Team

The Global Information Security Team at Aurevium is responsible for developing, implementing, and managing a comprehensive security program to protect the confidentiality, integrity, and availability of our information assets. Our team consists of security professionals with expertise across a broad range of security disciplines.

What You’ll Do

As part of the team, you will:

- Design and implement secure Windows Server and Active Directory architectures at scale.

- Architect and maintain hybrid identity solutions, integrating on-premise Active Directory with EntraID (Azure AD) and Okta.

- Configure and manage AD delegation models following the principle of least privilege.

- Implement and maintain identity protection solutions, such as Defender for Identity, CrowdStrike Identity Protection, and Quest Active Roles.

- Develop and enforce security standards for Windows Server deployments, including bare metal, VMware, and public cloud (AWS, Azure, GCP).

- Collaborate with Endpoint Engineering teams to secure Windows endpoints using tools like SCCM and InTune.

- Manage Windows Firewall and ASR rules across our endpoint estate.

- Contribute to monitoring and maturing the Windows patching and vulnerability management program.

- Perform security assessments and audits of Windows infrastructure.

- Monitor and respond to security incidents involving Windows infrastructure.

- Collaborate with infrastructure and security teams on identity and access management initiatives.

What’s Required

We are looking for candidates who bring:

- A Bachelor's degree in Computer Science, Information Security, or a related field.

- 7+ years of experience in Windows Server administration and security, with expertise in Active Directory, Group Policy, AzureAD/EntraID, ADFS, DFS, SMB/CIFS, IIS, SQL Server, Kerberos, LDAP, NTLM, DNS, WMI, LAPS, Bitlocker, and related Microsoft Server technologies.

- Experience with common versions of Windows Server (2012, 2016, 2019, 2022, and 2025) and Windows 10-11 desktop OS.

- Strong general knowledge of core infrastructure, including Networking, storage, and virtualization/VMware.

- Advanced knowledge of AD delegation models and associated best practices.

- Experience with identity protection platforms (e.g., Defender for Identity, CrowdStrike Identity Protection).

- Proficiency in navigating and triaging Windows event logs.

- Familiarity with Centrify for integrating Linux with Active Directory.

- Familiarity with Quest Active Directory security products (e.g., Active Roles).

- Strong proficiency in PowerShell.

We Take Care of Our People

At Aurevium, we invest in our people, their careers, health, and well-being. When you work here, we provide:

- Fully-paid health care benefits.

- Generous parental and family leave policies.

- Volunteer opportunities.

- Support for employee-led affinity groups representing women, people of color, and the LGBT+ community.

- Mental and physical wellness programs.

- Tuition assistance.

- A 401(k) savings program with employer match and more.

Apply Now

Still Exploring?

Browse Open Roles

P72 Careers - Footer
0.121846s