Windows Server Engineer

Job description

Expected Work Experience: 3 to 6 Years Job Summary Software Engineer with strong focus on technical architecture within Digital Commerce & Experience, responsible for designing and implementing secure server and database baselines aligned to CIS Level 1 standards. Candidate must have relevant experience of 3 to 6 Years. The role involves assessing legacy environments, defining compensating controls, and resolving security hardening exceptions in collaboration with application owners. Key Responsibilities • Design and build CIS Level 1 baselines per member server cohort by OS generation. • Assess legacy Windows Server 2012 R2 and LCOP hosts and define compensating controls. • Implement SQL Level 1 CIS benchmarks across 7 database servers. • Resolve server-side hardening exceptions with application owners, ensuring business functionality is maintained. • Collaborate with architecture and security teams to align server and database configurations with enterprise security standards. • Contribute to technical architecture decisions for Digital Commerce & Experience platforms, ensuring secure and scalable designs. • Document baseline configurations, exceptions, and compensating controls for audit and compliance purposes. • Participate in reviews of existing infrastructure to identify security posture gaps and recommend improvements. • Support implementation and validation of hardening changes across environments (development, test, production). • Assist in troubleshooting issues arising from security hardening and baseline changes in coordination with cross-functional teams. Other Capabilities • Strong understanding of operating system concepts, especially Windows Server generations and their security configurations. • Familiarity with CIS benchmarks and industry-standard security hardening practices for servers and databases. • Ability to work effectively with application owners and stakeholders to balance security and usability. • Good analytical and problem-solving skills to assess legacy systems and define practical compensating controls. • Effective communication skills to explain technical security changes to non-technical stakeholders. • Ability to work in a structured, process-driven environment and adhere to architectural and security governance. • Collaborative mindset with willingness to support broader Digital Commerce & Experience initiatives. Qualifications and Skills • Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field (or equivalent practical experience). • Experience in Digital Commerce & Experience platforms and related technical architecture. • Hands-on experience with designing and implementing CIS Level 1 baselines for servers and databases. • Knowledge of SQL Server security configuration and CIS benchmark implementation. • Understanding of legacy Windows Server environments (including 2012 R2) and associated security challenges. • Exposure to technical architecture principles, including scalability, reliability, and security-by-design. • Familiarity with security hardening tools, configuration management, and automation is an advantage. • Awareness of compliance and audit requirements related to infrastructure security.