Job Title: Information Systems Architect – Advanced (On-Prem Systems Engineer)
Location: 100% Remote (Candidates must reside in the Eastern Time Zone)
Position Type: Contract – 12 Months (Possibility of Extension)
Interview Process: 2 Virtual Rounds
Must Have Skills:
- 5+ years of experience in Active Directory administration, including domain services, replication, delegation, permissions, and domain controller troubleshooting.
- 5+ years of experience with Group Policy (GPO) design, configuration, scoping, filtering, troubleshooting, and change management in enterprise environments.
- 5+ years of hands-on PowerShell scripting experience, including automation, modules, error handling, remote execution, and scheduled scripts.
- 3+ years of experience implementing CIS benchmarks or equivalent security hardening baselines on Windows endpoints using GPO and scripting.
- 5+ years of Windows Server administration, including server provisioning, configuration, patching, upgrades, troubleshooting, and decommissioning.
- Strong experience with Active Directory and Group Policy automation using PowerShell.
- Experience with Azure DevOps for work tracking, script repositories, and technical documentation.
- Experience with formal IT service management processes, service requests, and change controls.
- Experience creating and maintaining SOPs, runbooks, change records, and technical documentation.
Desired Skills:
- Experience with enterprise task automation, workflow orchestration, and automation platforms beyond PowerShell.
- Experience with endpoint patch management, including Windows OS and third-party application patching.
- Knowledge of third-party application packaging, deployment automation, and tools such as PDQ.
- Experience with Public Key Infrastructure (PKI) and Active Directory Certificate Services (AD CS).
- Familiarity with enterprise security compliance, configuration management, and remediation processes.
- Experience collaborating with senior administrators and cross-training technical teams.
Job Responsibilities:
- Administer and maintain enterprise Active Directory environments, including domain services, permissions, delegation, and access management.
- Create, modify, test, troubleshoot, and retire Group Policy Objects (GPOs) according to operational and security requirements.
- Implement CIS security baselines through GPO configurations and PowerShell-based remediation under the guidance of the Senior Server Administrator.
- Develop, test, maintain, and optimize PowerShell scripts for system administration, automation, auditing, remediation, and reporting.
- Identify repetitive administrative tasks and replace manual processes with reliable, documented automation solutions.
- Manage the complete Windows Server lifecycle, including installation, configuration, patching, upgrades, troubleshooting, and decommissioning.
- Execute assigned tasks based on priorities established by the Server Operations Team Manager.
- Track, update, and manage assigned work items, technical deliverables, and operational backlogs using Azure DevOps.
- Process service requests and change controls through the designated IT Service Management platform.
- Maintain scripts, GPO configurations, runbooks, SOPs, and technical documentation in Azure DevOps throughout task execution.
- Collaborate with the Senior Server Administrator to ensure knowledge sharing and operational continuity across AD, GPO, and CIS security processes.
- Reduce Active Directory and Group Policy backlogs while maintaining accurate progress and completion records.
- Implement and document CIS remediation activities, including before-and-after configuration states.
- Build and maintain a centralized library of tested PowerShell scripts and reusable administrative automation.
- Ensure all technical deliverables, scripts, code, and documentation are stored in the organization's Azure DevOps repository.
- Develop and maintain SOPs for recurring Active Directory, Group Policy, and security hardening activities.
- Support cross-training to ensure multiple team members can execute and troubleshoot critical administrative processes.
- Monitor deliverables and performance metrics, including backlog reduction, CIS implementation, automation coverage, and documentation completeness.
- Perform additional on-premises infrastructure responsibilities as assigned by the Server Operations Team Manager.