Windows Systems Engineer Full Time

Hundreds of global innovators, from iconic consumer brands and tech giants to banks, retailers, and healthcare leaders turn to LiveRamp to build enduring brand and business value by deepening customer engagement and loyalty, activating new partnerships, and maximizing the value of their first-party data while staying on the forefront of rapidly evolving compliance and privacy requirements.

The mission of our Business Technology (BT) team is to empower LiveRamp’s workforce through technology solutions that make their work easier, faster, and more effective. Within BT, our Client Services team plays a fundamental role in this work. Our Windows Systems Engineers design, implement, and operate the Windows platform and related services that power LiveRamp’s global workforce.

You Will

Windows platform engineering & administration

• Own the Windows client and supporting server platform for corporate IT, including standard images, configuration baselines, and security policies.
• Design, implement, and maintain standardized Windows build images and gold images (e.g., through Intune, Autopilot, Configuration Manager, or similar tools).
• Administer Windows Server instances supporting BT services (e.g., file, print, app, and infrastructure services) including patching, troubleshooting, and performance tuning.
• Ensure Windows endpoints and servers meet LiveRamp’s security standards, including encryption, endpoint protection, and compliance baselines.

Endpoint management (Windows-focused)

• Administer and optimize Microsoft Intune, Workspace ONE, or similar tools for Windows endpoint management:
• Device enrollment and compliance
• Configuration profiles and policies
• Software deployment and updates
• Implement and maintain Windows Update and patch management strategies for clients and servers, balancing security and stability.
• Collaborate with Security to deploy and manage CrowdStrike, Netskope, and other security tools on Windows endpoints and servers.
• Maintain accurate, automated inventory of Windows devices and installed software, supporting license management and lifecycle planning.

Automation & integration

• Identify opportunities to automate Windows lifecycle tasks (onboarding, offboarding, group policy, software deployment, access changes, patching).
• Build and maintain automation using PowerShell, Python, or other scripting languages targeting Windows environments.
• Utilize REST APIs, Graph API, and integration platforms to connect Intune, Azure AD, on-prem AD (if applicable), ITSM, and asset management systems.
• Adopt configuration-as-code and infrastructure-as-code patterns (e.g., Git-based policy definitions, scripted server builds, policy as code).

Identity, directory, and access (Windows ecosystem)

• Work with Azure Active Directory and/or on-prem Active Directory to manage users, groups, devices, and policies.
• Support and optimize Single Sign-On (SSO) and conditional access policies in partnership with Security and Identity teams.
• Troubleshoot authentication and authorization issues impacting Windows users and services.

Incident response, troubleshooting & escalation

• Provide Tier 3–4 support for complex Windows-related incidents (OS, hardware, drivers, group policy, app compatibility, performance, and security).
• Troubleshoot issues across the Windows stack: OS, hardware, endpoint management, VPN, Wi‑Fi, identity, and line-of-business apps.
• Own complex incidents and problems end‑to‑end, driving root cause analysis and sustainable fixes through configuration and automation.
• Document troubleshooting steps, known issues, and runbooks to enable support teams and self‑service.

Optimize & innovate

• Continually assess the Windows user experience and platform health, leveraging monitoring and metrics to prioritize improvements.
• Propose and implement enhancements in areas like Autopilot, app deployment strategies, self-service, device performance, and security posture.
• Evaluate new features in Windows, Intune, Azure AD, and related tools, piloting changes and rolling them out safely at scale.

Educate & enable

• Provide guidance to users and BT teammates on Windows best practices, features, and self‑service tools.
• Develop and deliver training, workshops, and documentation focused on Windows usage, troubleshooting, and self‑help.
• Mentor junior engineers and support staff in Windows systems engineering and scripting.

Your Team Will

You’ll be part of the Business Technology – Client Services team, a globally distributed group responsible for:

• Delivering an exceptional desktop computer experience for all LiveRampers.
• Partnering with Security, Network Engineering, and other BT teams to keep our environment secure, performant, and reliable.
• Administering and automating key business applications and services used across the company.
• Enabling leaders and teams to move faster by removing technology friction and operational toil wherever it appears.

About You

• An insatiable need to help people and feel the satisfaction of delighting your customers, even while your primary focus is on systems engineering and automation.
• Incredible patience and empathy when working with users and teams who may be less technically deep, and the ability to explain Windows and infrastructure concepts clearly.
• At least 5 years of experience in Windows systems engineering, systems administration, or IT operations, with significant hands-on responsibility for Windows platforms in an enterprise environment.
• Strong experience administering Windows client environments:
• Standard images and Autopilot/OSD
• Group Policy (or equivalent modern management policies)
• Application deployment and support
• Solid experience administering Windows Server, including roles such as file/print, application, and infrastructure services.
• Deep proficiency with Microsoft Intune, Workspace ONE, Configuration Manager, or similar tools for Windows device management.
• Strong PowerShell skills (and optionally Python) for automation of Windows configuration, reporting, and lifecycle tasks.
• Experience deploying and operating security tools on Windows (e.g., CrowdStrike, Netskope, disk encryption, VPN, certificates).
• Experience designing, implementing, and maintaining automations and integrations across Windows, Azure AD, on‑prem AD (if applicable), ITSM, and asset systems.
• Experience with Google Workspace (gSuite) and Microsoft 365 administration.
• A solid understanding of networking concepts (DNS, DHCP, VPN, Wi‑Fi, routing, firewalls) as they relate to Windows clients and servers.
• Experience with monitoring, logging, and alerting for Windows endpoints and servers, and using data to drive reliability and performance improvements.
• Experience with AI tools or modern automation platforms in IT operations is a plus.
• An ISO, ITIL, or similar certification, or a strong desire to obtain them.

Preferred Skills

• Experience working in a fast‑paced, high‑growth, or global technology company.
• Experience with hybrid identity models (Azure AD + on‑prem AD) and modern management transitions.
• Prior experience contributing to or leading Windows migration or modernization projects (e.g., Windows 10 to 11, on‑prem to Intune).
• Comfort working across multiple time zones and collaborating with global, cross‑functional teams.
• Experience contributing to or authoring documentation, runbooks, automation playbooks, and user‑facing help content.
• Experience with infrastructure‑as‑code or configuration‑as‑code practices (e.g., Git-backed definitions for policies and scripts).

Benefits

• Flexible paid time off, paid holidays, options for working from home, and paid parental leave.
• Comprehensive Benefits Package: LiveRamp offers a comprehensive benefits package designed to help you be your best self in your personal and professional lives. Our benefits package offers medical, dental, vision, accident, life and disability, an employee assistance program, voluntary benefits as well as perks programs for your healthy lifestyle, career growth, and more. Your medical benefits extend to your dependents including parents.

More About Us

LiveRamp’s mission is to connect data in ways that matter, and doing so starts with our people. We know that inspired teams enlist people from a blend of backgrounds and experiences. And we know that individuals do their best when they not only bring their full selves to work but feel like they truly belong. Connecting LiveRampers to new ideas and one another is one of our guiding principles—one that informs how we hire, train, and grow our global team across nine countries and four continents. Click here to learn more about Diversity, Inclusion, & Belonging (DIB) at LiveRamp.

We use automated decision systems (ADS) as part of our recruitment and hiring process. If you require an accommodation or believe that the use of an ADS may create a barrier to your application or participation in the hiring process due to a disability or other protected characteristic, please let us know. We are committed to providing reasonable accommodations and ensuring an equitable hiring experience for all candidates.

To all recruitment agencies: LiveRamp does not accept agency resumes. Please do not forward resumes to our jobs alias, LiveRamp employees or any other company location. LiveRamp is not responsible for any fees related to unsolicited resumes.