Active Directory Server Administrator

Note: Hybrid; on-site daily to start, progressing to hybrid with two days/week on-site. Note: Requires an in-depth background check, including fingerprinting. Note: Candidates must currently reside within a reasonable commuting distance to Harrisburg, PA to be considered., This position is in the Bureau of Enterprise Technology Services Office currently assigned to the Pennsylvania State Police (PSP) and is located at PSP Department Headquarters. This position functions as the technical expert and agency point of contact for infrastructure Server administration, Active Directory and Printer administration. This position supports IT Staff and the PSP business. This position is responsible for systems deployed in all facilities, field sites, commonwealth managed data centers, and disaster recovery locations. Description of Duties:

• Design and supervise the implementation of solutions for agency use of Microsoft Active Directory, to include CUPSS. Establish Active Directory security group provisioning standards, Naming conventions, Group Policy Object deployment, Domain controller deployment, operation, and maintenance.
• Act as the agency point of contact for communications regarding the Commonwealth’s implementation of Microsoft Active Directory, User account provisioning services, and AntivirIntrusion protection products.
• PSP CUPSS/AD admin - Using CUPSS to create AD accounts resource accounts, distribution lists, service accounts, test accounts, training accounts, and security groups; Approving/denying privileged accounts in CUPSS; Troubleshooting account issues; Configuring user accounts; Assist End user support with User Transfers, Group Memberships and Password resets; Suspending and reactivating user accounts in CUPSS; Cadet and LEO account management.
• Design and supervise the implementation of standards for deployment of infrastructure server operational roles. To include File Share servers and Print Share servers. Establish and implement standards for server and file share access control and auditing.

• PSP File/Print server management - Adding/removing user permissions to directories and resources on all PSP F&P servers; Create/manage print queues on all PSP F&P servers; Troubleshooting mapped drives issues; F&P Server drive space management; Unlocking files; Data restoration intermediary for backup team; Creating/updating/migrating drive shares on F&P servers; Data recovery on F&P servers using Shadow Copy; Ensure and correct any discrepancies to F&P server configuration; Data moves between F&P servers7; Manage 2 Printer management servers; Establish and implement standards for Printer administration and auditing; Troubleshooting printer issues with customers and vendor representatives; Set up and configuration of network printers; Provide installation assistance for all network printers installed at PSP sites; Deploying printer firmware updates and patching; Install and maintain printer management software on dedicated application servers used to manage the printers on the network; Keep printer drivers updated on all PSP F&P servers; Create printer installation procedures; Assist with inventory tracking of PSP printers.

• Participate in agency Disaster Recover and Continuity of Government planning.
• Function as liaison between the agency and outside agencies or vendors as necessary to resolve operational problems.
• Perform work on special projects.
• Be knowledgeable of, adhere to, and contribute to established service management processes and procedures.
• Be knowledgeable of, adhere to, and contribute to established knowledge management processes and procedures.
• Be knowledgeable of, adhere to, and contribute to established digital accessibility regulations and standards.
• Perform related work as necessary.
• Responds to after-hours requests for technical assistance on an as-needed basis
• Must be able to pass PSP background checks related to employment and CJIS policies
• Performs other related duties as assigned, to include those outlined in the Department’s CoG Plan when the Plan is activated. Responds to the designated alternate or secondary location when directed in response to a catastrophic incident.

5+ Years: Enterprise IT experience

• 3+ Years: Active Directory Administration
• 3+ Years: File Share / Print Server Management
• 3+ Years: Networking Fundamentals
• 3+ Years: Endpoint / Remote Support
• 2+ Years: CUPSS or other Identity Provisioning
• 2+ Years: Scripting (PowerShell, VBScript, etc.)
• 2+ Years: Microsoft 365 / Exchange Resource Management
• Strong documentation skills
• Process / Policy adherence
• Security mindset
• Professional communication
• Chain-of-command respect
• Calm under pressure
• Independent troubleshooting
• Identity / IAM certifications are highly desired
• User/Admin enterprise experience is highly desired
• Government / State IT experience is highly desired