Sr. Systems Engineer

The contractor will support OFR’s efforts to engineer, build, configure and maintain the OFR’s Windows, Cloud, Virtualization and Storage systems following best practices to better ensure that OFR designs, deploys and sustains secure, high quality, highly available information technology solutions that align with operational objectives.

Duties include but not limited to:

• Expert in Active Directory/Entra ID administration in a Hybrid Environment

• Proficiency in Active Directory administration, FSMO roles, replication, and OU management

• Knowledge of PKI, CAC/ALT-token authentication, and certificate lifecycle management

• Expert in Microsoft 365 Management (Hybrid) administration including Exchange Online, Teams, and OneDrive for Business.
• Experienced in Virtualization; Manage and optimize virtualization platforms (e.g., VXRail/VMware/Horizon).
• Systems administration of Windows systems using PowerShell, scripting, and automation.
• Desktop/Laptop deployment and management.
• Amazon Web Services Windows instances deployment and administration - a plus
• SCCM (MECM) / Intune administration in a co-managed environment, including patching, package prep and deployment and reporting on Windows devices - a plus
• Documentation, development of system diagrams and SOPs
• Conducting integration testing, transition and acceptance and training from the Engineering phase to the production phase.

Coordinate activities at the system interface boundaries with other contractors and Government organizations.

Key Tasks & Responsibilities

Microsoft Active Directory: Administer and maintain Active Directory (AD) and Group Policy Objects (GPOs). Manage user accounts, permissions, and security groups. Implement AD best practices and troubleshoot AD-related issues. Perform regular AD health checks and ensure system integrity. Administer DHCP, DNS, and file/directory permissions. Utilize PowerShell for automation, reporting, and system management. Manage folder and file share permissions following least-privilege principles.

Office 365 Management (Hybrid): Administer Office 365 environment, including Exchange Online, Teams, and OneDrive for Business. Manage user accounts, licensing, and service configurations. Lead and drive Microsoft 365 upgrades, migrations, and platform modernization effort. Implement best practices around identity, access, and compliance policies using Conditional Access, DLP, Sensitivity Labels, and Defender for Office 365.

Virtualization: Manage and optimize virtualization platforms (e.g., VXRail/VMware/Horizon). Oversee virtual machine creation, configuration, and performance tuning. Ensure high availability and disaster recovery solutions for virtual environments. Troubleshoot and resolve virtualization-related issues.

Server Maintenance: Oversee physical and virtual servers Monitor server performance, conduct regular updates, and perform backups. Troubleshoot and resolve server issues to minimize downtime. Implement and manage server security patches and updates.

Documentation and Reporting: Maintain accurate and up-to-date documentation for all IT systems and procedures. Create and manage system diagrams, configuration records, and troubleshooting guides. Generate regular reports on system performance, security incidents, and project status.

Collaboration and Support: Work closely with other IT staff, departments, and external vendors to resolve technical issues. Provide guidance and mentorship to junior IT staff and helpdesk personnel. Participate in IT planning and strategy sessions.

• 10+ or more years of IT experience in an Active Directory environment
• Experienced in M365 Hybrid environment (on-prem / M365)
• Experience with Windows PowerShell scripting.

Must have experience in the following technologies:

• Expert in Active Directory/Entra ID administration in a hybrid environment
• Experience with Okta, including installation, configuration, and migrations
• Certificate lifecycle management
• Expert in Microsoft 365 administration
• VxRail / VMware / Horizon management and administration
• Systems administration of Windows systems using PowerShell, scripting, and automation
• Manage Engine tools (ADManager/ADAudit/AD360)
• BeyondTrust (Bomgar) solutions experience a plus (Remote Assistance/PAM)
• Windows server deployment in cloud (AWS) and virtualized environments (VMware) (Windows 2019/20222 experience preferred)
• Documentation, development of system diagrams and SOPs
• Conducting integration testing, transition and acceptance and training from the Engineering phase to the production phase.
• Coordinate activities at the system interface boundaries with other contractors and Government organizations.

Preference given for experience in the following technologies:

• Active Directory/Entra ID

• Microsoft 365 administration

• Certificate lifecycle management

• Skilled in using Active Directory Group Policies to manage and configure security settings on Windows as well as general Active Directory administration

• Worked in VMware environments with Horizon VDI solutions or Windows AWS Workspaces solution
• MDM Solution such as Intune
• Excellent written and verbal communications skills

• Preference given for Microsoft certifications
• Preference given for VMWare certification
• Preference given for Okta certification

Security Clearance

• Public Trust High (Tier 4/BI) Risk Level
• Must be a US citizen or Lawful Permanent Resident

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)

• The position is remote but preference is given to candidates in the DC metro area.

$145,000 - $155,000 a year

The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity. The posted range is appropriate for a typical candidate meeting, at a minimum, all the core requirements of the position.