Windows Engineer

Job Description

BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the government, federal law enforcement officials, and troops deployed around the world.

At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie and a shared ambition to lead the world in defense technologies and national security services. We offer flexible work environment to support the balance in your life and keep you performing at your best. Be a part of a company that is part of the community; driven to improve our future and protect our freedom.

We are seeking an experienced Windows Automation & Patching Engineer to support multiple enterprise domains. This role is responsible for engineering, automating, and maintaining patching and configuration management solutions across a complex, heterogeneous IT environment spanning physical, virtual, and cloud-based systems.

The successful candidate will engineer automated solutions that simplify patch distribution, reduce manual effort, increase reliability, and support the organization’s transition toward cloud-enabled operations. This includes developing and maintaining scripts, workflows, and infrastructure-as-code to enhance system management at scale.

Responsibilities:

• Manage and automate patch deployment and configuration management across multiple domains and enclaves.

• Develop automation solutions using PowerShell, Python, APIs, or orchestration frameworks to streamline system updates and administrative tasks.

• Support hybrid and cloud patching capabilities using tools such as Azure Update Management, AWS Systems Manager (SSM), and SCCM/ConfigMgr.

• Engineer improvements to the enterprise patching infrastructure and contribute to the design of a new automated update and hotfix distribution system.

• Perform automation-driven server configuration, baseline enforcement, compliance reporting, and STIG/vulnerability remediation.

• Provide Tier 3 troubleshooting and root-cause analysis for complex Windows systems.

• Migrate, refactor, and modernize traditional server workloads to support cloud compatibility and virtualization strategies.

• Monitor infrastructure performance, proactively identify issues, and implement automated remediation with minimal user impact.