Windows Systems Engineer

LiveRamp is the data collaboration platform of choice for the world’s most innovative companies. A groundbreaking leader in consumer privacy, data ethics, and foundational identity, LiveRamp is setting the new standard for building a connected customer view with unmatched clarity and context while protecting precious brand and consumer trust. LiveRamp offers complete flexibility to collaborate wherever data lives to support the widest range of data collaboration use cases—within organizations, between brands, and across its premier global network of top-quality partners.

Hundreds of global innovators, from iconic consumer brands and tech giants to banks, retailers, and healthcare leaders turn to LiveRamp to build enduring brand and business value by deepening customer engagement and loyalty, activating new partnerships, and maximizing the value of their first-party data while staying on the forefront of rapidly evolving compliance and privacy requirements.

The mission of our Business Technology (BT) team is to empower LiveRamp’s workforce through technology solutions that make their work easier, faster, and more effective. Within BT, our Client Services team plays a fundamental role in this work. OurWindows Systems Engineers design, implement, and operate the Windows platform and related services that power LiveRamp’s global workforce.

You will:

Windows platform engineering & administration

• Own theWindows client and supporting server platform for corporate IT, including standard images, configuration baselines, and security policies.

• Design, implement, and maintain standardizedWindows build images and gold images (e.g., through Intune, Autopilot, Configuration Manager, or similar tools).

• AdministerWindows Server instances supporting BT services (e.g., file, print, app, and infrastructure services) including patching, troubleshooting, and performance tuning.

• Ensure Windows endpoints and servers meet LiveRamp’s security standards, including encryption, endpoint protection, and compliance baselines.

Endpoint management (Windows-focused)

• Administer and optimizeMicrosoft Intune, Workspace ONE, or similar tools for Windows endpoint management:

  • Device enrollment and compliance

  • Configuration profiles and policies

  • Software deployment and updates

• Implement and maintainWindows Update and patch management strategies for clients and servers, balancing security and stability.

• Collaborate with Security to deploy and manageCrowdStrike, Netskope, and other security tools on Windows endpoints and servers.

• Maintain accurate, automatedinventory of Windows devices and installed software, supporting license management and lifecycle planning.

Automation & integration

• Identify opportunities toautomate Windows lifecycle tasks (onboarding, offboarding, group policy, software deployment, access changes, patching).

• Build and maintain automation usingPowerShell, Python, or other scripting languages targeting Windows environments.

• UtilizeREST APIs, Graph API, and integration platforms to connect Intune, Azure AD, on-prem AD (if applicable), ITSM, and asset management systems.

• Adopt configuration-as-code and infrastructure-as-code patterns (e.g., Git-based policy definitions, scripted server builds, policy as code).

Identity, directory, and access (Windows ecosystem)

• Work withAzure Active Directory and/or on-premActive Directory to manage users, groups, devices, and policies.

• Support and optimizeSingle Sign-On (SSO) and conditional access policies in partnership with Security and Identity teams.

• Troubleshoot authentication and authorization issues impacting Windows users and services.

Incident response, troubleshooting & escalation

• ProvideTier 3–4 support for complex Windows-related incidents (OS, hardware, drivers, group policy, app compatibility, performance, and security).

• Troubleshoot issues across the Windows stack: OS, hardware, endpoint management, VPN, Wi‑Fi, identity, and line-of-business apps.

• Own complex incidents and problems end‑to‑end, driving root cause analysis and sustainable fixes through configuration and automation.

• Document troubleshooting steps, known issues, andrunbooks to enable support teams and self‑service.

Optimize & innovate

• Continually assess theWindows user experience and platform health, leveraging monitoring and metrics to prioritize improvements.

• Propose and implement enhancements in areas like Autopilot, app deployment strategies, self-service, device performance, and security posture.

• Evaluate new features inWindows, Intune, Azure AD, and related tools, piloting changes and rolling them out safely at scale.

Educate & enable

• Provide guidance to users and BT teammates on Windows best practices, features, and self‑service tools.

• Develop and delivertraining, workshops, and documentation focused on Windows usage, troubleshooting, and self‑help.

• Mentor junior engineers and support staff in Windows systems engineering and scripting.

Your team will:

You’ll be part of theBusiness Technology – Client Services team, a globally distributed group responsible for:

• Delivering an exceptional desktop computer experience for all LiveRampers.

• Partnering with Security, Network Engineering, and other BT teams to keep our environment secure, performant, and reliable.

• Administering and automating key business applications and services used across the company.

• Enabling leaders and teams to move faster by removing technology friction and operational toil wherever it appears.

About you:

• An insatiable need to help people and feel the satisfaction of delighting your customers, even while your primary focus is on systems engineering and automation.

• Incredible patience and empathy when working with users and teams who may be less technically deep, and the ability to explain Windows and infrastructure concepts clearly.

• At least5 years of experience inWindows systems engineering, systems administration, or IT operations, with significant hands-on responsibility for Windows platforms in an enterprise environment.

• Strong experience administeringWindows client environments:

  • Standard images and Autopilot/OSD

  • Group Policy (or equivalent modern management policies)

  • Application deployment and support

• Solid experience administeringWindows Server, including roles such as file/print, application, and infrastructure services.

• Deep proficiency withMicrosoft Intune, Workspace ONE, Configuration Manager, or similar tools for Windows device management.

• StrongPowerShell skills (and optionally Python) for automation of Windows configuration, reporting, and lifecycle tasks.

• Experience deploying and operatingsecurity tools on Windows (e.g., CrowdStrike, Netskope, disk encryption, VPN, certificates).

• Experience designing, implementing, and maintainingautomations and integrations across Windows, Azure AD, on‑prem AD (if applicable), ITSM, and asset systems.

• Experience withGoogle Workspace (gSuite) andMicrosoft 365 administration.

• A solid understanding ofnetworking concepts (DNS, DHCP, VPN, Wi‑Fi, routing, firewalls) as they relate to Windows clients and servers.

• Experience with monitoring, logging, and alerting for Windows endpoints and servers, and using data to drive reliability and performance improvements.

• Experience with AI tools or modern automation platforms in IT operations is a plus.

• An ISO, ITIL, or similar certification, or a strong desire to obtain them.

Preferred skills

• Experience working in a fast‑paced, high‑growth, or global technology company.

• Experience withhybrid identity models (Azure AD + on‑prem AD) and modern management transitions.

• Prior experience contributing to or leading Windowsmigration or modernization projects (e.g., Windows 10 to 11, on‑prem to Intune).

• Comfort working across multiple time zones and collaborating with global, cross‑functional teams.

• Experience contributing to or authoringdocumentation, runbooks, automation playbooks, and user‑facing help content.

• Experience with infrastructure‑as‑code or configuration‑as‑code practices (e.g., Git-backed definitions for policies and scripts).

Benefits:

• Flexible paid time off, paid holidays, options for working from home, and paid parental leave.

• Comprehensive Benefits Package: LiveRamp offers a comprehensive benefits package designed to help you be your best self in your personal and professional lives. Our benefits package offers medical, dental, vision, accident, life and disability, an employee assistance program, voluntary benefits as well as perks programs for your healthy lifestyle, career growth, and more. Your medical benefits extend to your dependents including parents.

More about us:

LiveRamp’s mission is to connect data in ways that matter, and doing so starts with our people. We know that inspired teams enlist people from a blend of backgrounds and experiences. And we know that individuals do their best when they not only bring their full selves to work but feel like they truly belong. Connecting LiveRampers to new ideas and one another is one of our guiding principles—one that informs how we hire, train, and grow our global team across nine countries and four continents. Clickhereto learn more about Diversity, Inclusion, & Belonging (DIB) at LiveRamp.

We use automated decision systems (ADS) as part of our recruitment and hiring process. If you require an accommodation or believe that the use of an ADS may create a barrier to your application or participation in the hiring process due to a disability or other protected characteristic, please let us know. We are committed to providing reasonable accommodations and ensuring an equitable hiring experience for all candidates.

To all recruitment agencies: LiveRamp does not accept agency resumes. Please do not forward resumes to our jobs alias, LiveRamp employees or any other company location. LiveRamp is not responsible for any fees related to unsolicited resumes.