> Markdown version of [/jobs/ext/3997259-active-directory-windows-admin](https://www.wearedevelopers.com/jobs/ext/3997259-active-directory-windows-admin). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Active Directory/Windows Admin

- **Company:** innoSoul, Inc.
- **Location:** Columbia, SC, United States
- **Experience:** Experienced
- **Contract:** Contract
- **Skills:** Microsoft Windows, Active Directory, Domain Controllers, Application Packaging, Microsoft Azure, Automation of Marketing, Windows Servers, Public Key Infrastructure, Windows PowerShell, Runbook, Scripting, Deployment Automation, Patch Management, CIS Benchmarks
- **Published:** October 28, 2026
- **Apply:** https://www.dice.com/job-detail/09aafe7f-4e9f-4bfe-bb61-ed16e843e8e7

## About the Role

* 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.
 * 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment.
 * 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.
 * 3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.
 * 5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning.
 * Experience with documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups.
 * Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.

## Description

* Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms.
 * Endpoint patch management experience, including third-party application and Windows OS patching.
 * Third-party application packaging and deployment automation, including application bundles (such as PDQ).
 * PKI and AD Certificate Services operations.
Success Metrics / Deliverables

 * Success is assessed against metrics established with the Manager and tracked in Azure DevOps, including AD/GPO backlog reduction, CIS items implemented, and script and documentation coverage.
 * AD/GPO backlog reduced and tracked in Azure DevOps.
 * CIS items implemented per the Senior's direction, with before and after state recorded.
 * Core administrative and remediation tasks covered by tested, documented PowerShell, with a baseline script library in Azure DevOps.
 * All work product, including scripts, code, and documentation, stored in Azure DevOps as property of the branch, with no work held locally or in personal storage.
 * Tested coverage on AD/GPO and PowerShell-based processes, so that more than one person can run and support them.
 * SOPs for recurring AD/GPO and hardening tasks written and reviewed by the Senior., * Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.
 * Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction. The Senior reviews and orchestrates; this role implements.
 * Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.
 * Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.
 * Manage the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.
 * Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager's oversight.
 * Log, update, and track all work items in Azure DevOps.
 * Work service requests and change controls through the Service Management tool, following the team's change process.
 * Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.
 * Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.

 * Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.