Windows Systems Engineer

LiveRamp is shaping the future of responsible data collaboration between the world’s leading brands, retailers, financial services providers, and healthcare innovators. As consumers embrace new AI-driven experiences, the LiveRamp data collaboration network exponentially expands the breadth and accuracy of the data on which marketing AI capabilities operate, powering deeper customer insight and measurable performance on a global scale. LiveRamp is headquartered in San Francisco, California, with offices worldwide. Learn more at LiveRamp.com http://LiveRamp.com.

YOU WILL

WINDOWS PLATFORM ENGINEERING & ADMINISTRATION

- Own the Windows client and supporting server platform for corporate IT, including standard images, configuration baselines, and security policies.

- Design, implement, and maintain standardized Windows build images and gold images (e.g., Autopilot, Configuration Manager, or similar tools).

- Administer Windows Server instances supporting BT services (e.g., file, print, app, and infrastructure services) including patching, troubleshooting, and performance tuning.

- Ensure Windows endpoints and servers meet LiveRamp’s security standards, including encryption, endpoint protection, and compliance baselines.

ENDPOINT MANAGEMENT (WINDOWS-FOCUSED)

- Administer and optimize Workspace ONE, or similar tools for Windows endpoint management:

- Device enrollment and compliance

- Configuration profiles and policies

- Software deployment and updates

- Implement and maintain Windows Update and patch management strategies for clients and servers, balancing security and stability.

- Collaborate with Security to deploy and manage CrowdStrike, Netskope, and other security tools on Windows endpoints and servers.

- Maintain accurate, automated inventory of Windows devices and installed software, supporting license management and lifecycle planning.

AUTOMATION & INTEGRATION

- Identify opportunities to automate Windows lifecycle tasks (onboarding, offboarding, group policy, software deployment, access changes, patching).

- Build and maintain automation using PowerShell, Python, or other scripting languages targeting Windows environments.

- Utilize REST APIs, Graph API, and integration platforms to connect Intune, Azure AD, on-prem AD (if applicable), ITSM, and asset management systems.

- Adopt configuration-as-code and infrastructure-as-code patterns (e.g., Git-based policy definitions, scripted server builds, policy as code).

IDENTITY, DIRECTORY, AND ACCESS (WINDOWS ECOSYSTEM)

- Work with Azure Active Directory and/or on-prem Active Directory to manage users, groups, devices, and policies.

- Support and optimize Single Sign-On (SSO) and conditional access policies in partnership with Security and Identity teams.

- Troubleshoot authentication and authorization issues impacting Windows users and services.

INCIDENT RESPONSE, TROUBLESHOOTING & ESCALATION