Remote Windows Administrator

Own and support Windows Server 2019/2022+ and Active Directory environments hosted in AWS. Manage AD DS, GPOs, DNS, domain controllers, trusts, replication, certificates, service accounts, Kerberos/LDAP authentication, and access controls. Administer Windows workloads in AWS EC2, including EBS, Systems Manager, CloudWatch, AWS Backup, patching, monitoring, recovery, and troubleshooting. Heavy initial focus on compliance and security hardening, supporting GovRAMP/StateRAMP and NIST 800-53 requirements, vulnerability remediation, POA&Ms, audit evidence, CIS/STIG baselines, and continuous monitoring. Support the existing production environments while helping deploy a new government-compliant product environment. Automate Windows administration and remediation through PowerShell and participate in incident response/on-call support.

Windows Server: 7+ years in enterprise/production environments. Active Directory: 5+ years hands-on with GPOs, DNS, replication, trusts/delegation and security hardening. AWS: 3+ years supporting Windows workloads in EC2, EBS, VPC, IAM, Systems Manager, CloudWatch and AWS Backup. Compliance: Experience with GovRAMP/StateRAMP, FedRAMP, CJIS, NIST 800-53, or NIST 800-171/CMMC. PowerShell: Strong scripting/automation experience. Security hardening: CIS/STIG + vulnerability scanning, such as Tenable/Nessus or Qualys. Microsoft Intune, especially hybrid Intune environments Entra ID / hybrid identity AWS GovCloud Terraform or CloudFormation AWS security tools: Config, Security Hub, GuardDuty, CloudTrail PAM Splunk, Sentinel or Elastic Previous GovRAMP/StateRAMP or FedRAMP ATO involvement AWS, Microsoft, Security+ or CISSP certifications