Active Directory/Windows Server Administrator

We are looking for an Active Directory and Windows Server Administrator to execute and manage critical tasks related to Active Directory, Group Policy, and Windows Server administration at an enterprise scale. What You’ll Do

• Execute the Active Directory, Group Policy, and permissions work backlog, including GPO creation, modification, testing, and retirement, as well as delegation and access changes
• Implement CIS baselines through GPO and scripted remediation, based on analysis and direction from the Senior Server Administrator
• Design, write, and maintain PowerShell scripts for administration, automation, auditing, remediation, and reporting across endpoints and Active Directory
• Identify repetitive operational tasks and develop automation solutions to replace manual procedures with tested, documented scripts
• Manage the Windows Server lifecycle at enterprise scale, including build, configuration, patching, upgrading, troubleshooting, and decommissioning
• Work on tasks as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager’s oversight
• Log, update, and track all work items in Azure DevOps
• Process service requests and change controls through the Service Management tool, adhering to the team’s change management process
• Store all work products and documentation in Azure DevOps, including scripts, code, GPO documentation, runbooks, and SOPs
• Cross-skill with the Senior Server Administrator to ensure AD/GPO and CIS knowledge is distributed across the team
• Adapt to additional on-premises duties as team responsibilities are realigned, as directed by the Manager

• 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting
• 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in large environments
• 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled/unattended scripts, and AD/GPO automation
• 3+ years of experience implementing CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting
• 5+ years of experience in Windows Server administration and lifecycle management, including build, patching, upgrading, and decommissioning
• Experience documenting work in real-time, including SOPs, runbooks, and change records
• Experience working with a tracked work queue (e.g., Azure DevOps boards) and formal service request/change control processes

Preferred:

• Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms
• Endpoint patch management experience, including third-party application and Windows OS patching
• Experience with third-party application packaging and deployment automation (e.g., PDQ)
• PKI and AD Certificate Services operations knowledge