Windows System Administrator

The Windows System Administrator is responsible for maintaining the security, health, stability, and patching integrity of a Microsoft-based server infrastructure, with specialization in Windows Server Update Service (WSUS) and Public Key Infrastructure (PKI). Key responsibilities include Active Directory management, patching, backups, and troubleshooting. The Windows System Administrator also implements, configures, and manages PKI for certificate-based authentication and Windows Server Update Services (WSUS) to automate, test, and deploy patches across the enterprise., * Manage Microsoft Certificate Authority (CA) and Public Key Infrastructure (PKI) infrastructure lifecycle, including issuing, renewing, and revoking digital certificates.

• Manage and maintain WSUS to ensure timely patching of Windows Server and client environments.
• Apply security patches, system updates, and hardening measures to protect against vulnerabilities and cyber threats.
• Apply application-related STIGs, perform SCAP validation, and vulnerability testing - documents result in compliance with Department of Defense (DoD) cybersecurity requirements.
• Manage Active Directory, Group Policy Object (GPO) for configuration, and domain user/computer accounts.
• Implement policies for user/computer configurations, security settings (password policies, account lockout), and software restrictions.
• Develop PowerShell scripts to automate repetitive tasks like software deployment and system monitoring.
• Implement and troubleshoot smart-card, CAC, or PIV reader technologies for secure identity access.
• Provide Windows Server Operating System technical guidance to ensure standardization, compliance, and reliability.

• Bachelor’s degree in computer science or related field.
• Minimum of 5 years of experience in Windows Server administration.
• Deep understanding of WSUS configuration and patch management best practices.
• Experience with Microsoft Active Directory Certificate Services (AD CS) and certificate management.
• Proficiency in Windows Admin Center, PowerShell, DNS, DHCP, and storage systems (SAN/NAS).
• Understanding of DNS, DHCP, firewalls, and security tools and load balancing (NLB).
• Experience with rugged device deployments, Windows 10/11 migrations, and enterprise mobility solutions.
• Eligibility for IT-II (Noncritical Sensitive) clearance.

Pulled from the full job description

• Health insurance
• Paid time off
• Vision insurance
• Dental insurance
• Life insurance, * Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Vision insurance