Windows Server System Administrator

Schedule: Standard hours; typical day 8:00 AM–4:00 PM ET, with some on-call as needed

Clearance: Public Trust — must be in place before start

Program: ATF / ESA VRole Summary

Key Responsibilities: Configure and troubleshoot Windows Server operating systems supporting Active Directory, DNS, and Certificate Authorities. Manage and maintain Active Directory systems. Manage DNS, Certificate Authority, Certificate Management, and authentication services including ADFS, SAML, SSO, and OKTA.Apply STIG and VPR adjustments as required. Manage certificate environments to ensure certificates are issued and installed without outages. Develop scripts to monitor and check the health of Active Directory, DNS, and Certificate Authorities. Design, develop, and support scalable, redundant infrastructure across physical, virtualized, and cloud environments. Install, configure, and manage Windows-based Certificate Authority servers. Install, configure, and maintain group management policies, including role-based management. Set up administrator and service accounts and maintain system documentation. Tune system performance and install system-wide software. Apply NIST and DISA security controls and security-hardening changes based on best practices. Validate and implement critical system patches and allocate directory storage space. Improve existing infrastructure using current technology best practices and cross-application integrations. Collaborate with engineering teams and system owners to influence design and architect solutions in multi-tiered environments. Manage project priorities, deliverables, and deadlines. Produce clear documentation for delivered solutions. Support DevOps culture and cross-functional collaboration across development, product, and QA teams. Support development of a data pipeline and machine learning services.

Required Technical Skills: Microsoft Active Directory. Entra ID/Azure AD.DNS.Certificate Administration and Certificate Management. Certificate Authorities. Authentication services including ADFS, SAML, SSO, and OKTA.Windows Server and Windows OS Tier II & III support. PowerShell and scripting languages. DevOps tools. Workflow orchestration, including workflows executed at predefined times with data dependencies. STIG and VPR adjustments. NIST and DISA security controls. Security hardening. Certificate authorities and certificate platforms including Microsoft, Digicert, Entrust/Sectigo, and SSL.com. Physical, virtualized, and cloud infrastructure. Group management policies and role-based management. System performance tuning, patching, permissions, administrator/service accounts, and system documentation.

Preferred / Nice-to-Have Skills: Experience establishing large computer clusters. Continuous Configuration Automation (CCA) methods for flexible, programmatic infrastructure and application resource deployment and management. Cloud technologies including Entra and AWS.Integrating Windows services such as AD and ADFS into cloud architectures. Networking experience with TCP/UDP, ICMP, DNS, infrastructure services, and security. CompTIA Security+.Microsoft Certified Professional.3 years of server patching, backups, and permission management.4 years of experience in an operations role. Government contracting experience, particularly with the DOJ.DOJ or DOD Clearance.

Qualifications & Experience: Bachelor’s degree in Computer Science, Systems Engineering, or related technical field, with 8+ years of systems engineering or administration experience; or 6+ years with an MS/MIS degree. The broader education requirement indicates a Bachelor’s degree with 8–12 years of prior relevant experience or a Master’s degree with 6–10 years of prior relevant experience. Additional years of experience and/or relevant certifications may be considered in lieu of a degree.5 years of experience with directory services, including Microsoft Active Directory and Entra ID/Azure AD, Certificate Administration, and DNS.4 years of experience providing Tier II & III Windows support for Windows OS.3 years of experience with ADFS, OKTA, or other authentication services. Ability to work effectively with people across disciplines and varying levels of technical experience. Ability to work independently without constant supervision. Ability to communicate complex technical concepts effectively, both verbally and in writing. Willingness to work on-call as needed in addition to regular business hours. Public Trust security investigation required; the selected candidate cannot begin until the customer grants the required clearance.

About the Team / Company: The role supports the ESA V IT Services program, which provides services to several Department of Justice customers, including help desk, deskside support, Windows engineering and maintenance, managed print services, ITSM, Account Management Services, Cybersecurity, cloud technologies, and other IT services. The position is part of the ESA V engineering team and will participate in daily Teams meetings and Service Now ticket flow.