Senior Windows Infrastructure Security Engineer Date Posted:
13 October 2026
Closing Date:
November 12, 2026
Recruiter:
Saab Location:
Clyde, New York Salary:
USD145,000
to
USD175,000
Job Type & Industry:
Security Engineer Contract Type:
Permanent Job Reference:
3019026294-2 Apply for this job now Job Description SAAB is seeking a Senior Information Security Engineer to secure and optimize our Windows infrastructure supporting advanced defense and manufacturing systems. In this mission-driven role, you will design and harden Windows servers and Active Directory, implement security controls, and lead vulnerability management and incident response. You will collaborate with cross-functional engineering teams to embed security into system design, support audits and compliance, and mentor junior staff. Join Saab's innovative, global environment to protect critical systems that contribute to long-term societal security. Responsibilities Design, implement, and secure Windows-based infrastructure supporting Saab's defense and manufacturing operations Harden Windows servers, Active Directory, and related services following security best practices and compliance requirements Implement and manage security controls, including endpoint protection, patch management, and identity/access management Conduct vulnerability assessments, security monitoring, and incident response for Windows platforms Collaborate with cross-functional engineering and IT teams to integrate security into system design and deployment Develop and maintain security documentation, standards, and procedures for Windows environments Support audits, risk assessments, and remediation activities for regulated defense programs Mentor junior engineers and contribute to continuous improvement of cybersecurity capabilities Required Skills Windows Server administration Active Directory and Group Policy Identity and Access Management (IAM) Endpoint security tools (EDR/AV) Vulnerability assessment and remediation Security monitoring and incident response Power Shell scripting and automation Network security fundamentals Security frameworks and compliance (NIST, ISO 27001) Patch management SIEM tools Public Key Infrastructure (PKI)