Windows Security Operations Engineer

About the role

Accenture is seeking a hands‑on Security Engineer to protect and continuously improve Windows environments, including Windows Server, Active Directory, endpoints, and Azure/hybrid services. The role blends deep technical engineering with a managed‑service discipline, providing 24/7 on‑call coverage for critical security events.

Key responsibilities

• Own Windows hardening profiles for servers, endpoints and Active Directory, assess deviations and verify control effectiveness.
• Design, maintain and deploy GPO architecture with staged rollout, conflict analysis and rollback procedures.
• Lead end‑to‑end remediation of Windows findings: validation, prioritisation, remediation, rescanning and formal closure evidence.
• Provide technical input for risk exceptions, perform trend analysis and convert lessons learned into hardening improvements and automation.
• Manage Microsoft Intune and MDE policies, compliance, enrollment, sensor health and complex troubleshooting.
• Develop production‑grade PowerShell and Ansible/AWX automation with version control, peer review and secure credential management.

Required profile

• Bachelor’s degree in Computer Science, Information Security, IT or related field.
• 3–5 years of hands‑on experience in Windows Server administration or security engineering.
• Strong knowledge of Active Directory architecture, GPOs, Kerberos/NTLM, LAPS and privileged access management.
• Experience with endpoint detection and response (MDE or similar), Azure/hybrid identity and RBAC.
• Proven ability to work within ITSM, change management and incident‑response processes.

Required skills

• Windows Server, Active Directory, GPO design and deployment
• PowerShell scripting, Ansible/AWX automation, Git
• Microsoft Intune, Microsoft Defender for Endpoint (MDE)
• Azure Entra ID, Azure RBAC, hybrid identity concepts
• SIEM tools such as Splunk, logging and investigation
• Vulnerability remediation tools (Qualys or comparable)
• Security baselines: LAPS, BitLocker, Credential Guard, ASR, PKI, AD CS

What we offer

• Certification support and career counselling
• 25 days paid vacation and flexible home‑office policy
• Luxury health & dental insurance, food vouchers, Multisport cards
• Employee Assistance Program and options to buy shares