Windows Security Operations Engineer

Accenture is a global professional services company with leading capabilities in digital, cloud, and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services, and Accenture Song — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 740,000+ people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries.

We are looking for a hands-on Security Engineer to protect and continuously improve Windows environments across Windows Server, Active Directory, endpoints, and Azure/hybrid services. You will translate vulnerability findings, alert data, and security-policy requirements into tested, automated, and auditable improvements — working alongside IAM, platform, cloud, and DevOps teams.

The role combines deep technical engineering with managed-service discipline: clear ownership, transparent communication, and verifiable outcomes delivered within customer governance processes.

This role participates in on-call rotations to provide 24/7 coverage for critical security events.

To keep it short, below are some key responsibilities:

•        Own Windows hardening profiles for servers, endpoints, and Active Directory; assess deviations, implement through the change process, and verify control effectiveness.

•        Design and maintain GPO architecture including staged deployment, conflict analysis, change control, and rollback procedures.

•        Own end-to-end remediation for assigned Windows findings: validate, prioritize by severity and exposure, remediate, rescan, and capture formal closure evidence.

•        Provide technical input for risk exceptions and compensating controls; perform trend analysis to identify systemic weaknesses.

•        Own Microsoft Intune and MDE policy, compliance, enrollment, integration, sensor health, and complex troubleshooting.

•        Convert lessons learned into hardening improvements, detection contributions, automation, and runbook updates.

•        Develop production-quality PowerShell and Ansible/AWX automation with version control, peer review, structured error handling, and secure credential management.

Manage assigned work by risk, priority, SLA, and customer maintenance window; keep tickets, runbooks, and handovers accurate and current.

Requirements and technical knowledge:

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a closely related technical field.
• 3–5 years of hands-on experience in a Windows Server system administration and troubleshooting and/or security engineering role - services, registry, permissions, event logs, Defender Firewall, BitLocker, and secure remote management.
• Active Directory architecture: Forests, domains, trusts, GPOs, Kerberos/NTLM, DC hardening, gMSA, LAPS, privileged access, and recovery.
• Endpoint & server security: MDE or similar EDR onboarding, policies, alerts, exclusions, sensor health, and troubleshooting.
• Automation engineering: Production-grade PowerShell, Ansible/AWX, Git, secure credentials, error handling, rollback, and peer review.
• Azure/hybrid fundamentals: Entra ID, hybrid identity, Azure RBAC, network and monitoring dependencies, and shared responsibility.
• Logging & investigation: Windows and PowerShell logs plus SIEM tools such as Splunk for triage and containment.
• ITSM & change management: Incident, problem, change, and request processes, including risk, testing, rollback, and evidence.

Bonus points if you have:

• Vulnerability remediation: End-to-end lifecycle using Qualys or comparable: finding validation, risk prioritization, remediation, exceptions, rescanning, and formal closure evidence.
• Microsoft Intune security baselines for cloud-managed Windows.
• Microsoft Entra ID: Conditional Access, PIM, access reviews, hybrid join, and sync.
• Defender for Cloud and Servers: posture and workload protection.
• Windows LAPS, Credential Guard, BitLocker, Application Control, and ASR.
• PKI and AD CS: certificate authentication and TLS troubleshooting.
• Forensics and threat hunting.

The Rest of the qualities, you know them:

• Fluent in English, both verbal and written.
• Excellent communication skills and ability to collaborate effectively within a team.

Benefits:

• Certification
• Career Counselling
• 25 day paid vacation
• Flexible home office policy
• Options to buy shares
• Luxury health & dental insurance
• Food vouchers
• Multisport cards
• Employee Assistance Program

#LI-EU

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us atwww.accenture.com

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.