IT - SCCOURTS - Information Systems Architect - Advanced - On-Prem Systems Engineer

Administer and maintain enterprise Active Directory environments, including domain services, permissions, delegation, and access management.

• Create, modify, test, troubleshoot, and retire Group Policy Objects (GPOs) according to operational and security requirements.
• Implement CIS security baselines through GPO configurations and PowerShell-based remediation under the guidance of the Senior Server Administrator.
• Develop, test, maintain, and optimize PowerShell scripts for system administration, automation, auditing, remediation, and reporting.
• Identify repetitive administrative tasks and replace manual processes with reliable, documented automation solutions.
• Manage the complete Windows Server lifecycle, including installation, configuration, patching, upgrades, troubleshooting, and decommissioning.
• Execute assigned tasks based on priorities established by the Server Operations Team Manager.
• Track, update, and manage assigned work items, technical deliverables, and operational backlogs using Azure DevOps.
• Process service requests and change controls through the designated IT Service Management platform.
• Maintain scripts, GPO configurations, runbooks, SOPs, and technical documentation in Azure DevOps throughout task execution.
• Collaborate with the Senior Server Administrator to ensure knowledge sharing and operational continuity across AD, GPO, and CIS security processes.
• Reduce Active Directory and Group Policy backlogs while maintaining accurate progress and completion records.
• Implement and document CIS remediation activities, including before-and-after configuration states.
• Build and maintain a centralized library of tested PowerShell scripts and reusable administrative automation.
• Ensure all technical deliverables, scripts, code, and documentation are stored in the organization’s Azure DevOps repository.
• Develop and maintain SOPs for recurring Active Directory, Group Policy, and security hardening activities.
• Support cross-training to ensure multiple team members can execute and troubleshoot critical administrative processes.
• Monitor deliverables and performance metrics, including backlog reduction, CIS implementation, automation coverage, and documentation completeness.
• Perform additional on-premises infrastructure responsibilities as assigned by the Server Operations Team Manager.

5+ years of experience in Active Directory administration, including domain services, replication, delegation, permissions, and domain controller troubleshooting.

• 5+ years of experience with Group Policy (GPO) design, configuration, scoping, filtering, troubleshooting, and change management in enterprise environments.
• 5+ years of hands-on PowerShell scripting experience, including automation, modules, error handling, remote execution, and scheduled scripts.
• 3+ years of experience implementing CIS benchmarks or equivalent security hardening baselines on Windows endpoints using GPO and scripting.
• 5+ years of Windows Server administration, including server provisioning, configuration, patching, upgrades, troubleshooting, and decommissioning.
• Strong experience with Active Directory and Group Policy automation using PowerShell.
• Experience with Azure DevOps for work tracking, script repositories, and technical documentation.
• Experience with formal IT service management processes, service requests, and change controls.
• Experience creating and maintaining SOPs, runbooks, change records, and technical documentation.

Desired Skills:

• Experience with enterprise task automation, workflow orchestration, and automation platforms beyond PowerShell.
• Experience with endpoint patch management, including Windows OS and third-party application patching.
• Knowledge of third-party application packaging, deployment automation, and tools such as PDQ.
• Experience with Public Key Infrastructure (PKI) and Active Directory Certificate Services (AD CS).
• Familiarity with enterprise security compliance, configuration management, and remediation processes.
• Experience collaborating with senior administrators and cross-training technical teams.