Windows Systems Administrator

Seeking a mid-level Windows Systems Administrator to maintain and support the company's Windows Server and Active Directory environment. Performs daily administration, escalated troubleshooting, patching, backup and recovery, security, documentation, and infrastructure project work. Resolve routine issues and coordinate complex work with internal teams, vendors, and service providers.

Administer Active Directory users, computers, groups, organizational units, service accounts, domain controllers, and Group Policy Objects.

Troubleshoot authentication, account lockouts, permissions, replication, DNS, time synchronization, domain trust, and Group Policy processing issues.

Apply least-privilege and role-based access practices; review inactive, privileged, expired, and service accounts and maintain appropriate group-based access.

Test and deploy approved Group Policy and centralized configuration changes, documenting scope, results, and rollback requirements.

Implement and maintain assigned CMMC and NIST SP 800-171 controls for access, authentication, audit logging, configuration management, system hardening, patching, and account management.

Maintain approved security baselines; reduce unnecessary services, legacy protocols, excessive permissions, and administrative access, particularly on systems that process, store, or transmit Controlled Unclassified Information.

Support account and access reviews, corrective actions, Plans of Action and Milestones, security-event escalation, and implementation of approved compensating controls.

Collect and maintain assessment evidence, including procedures, inventories, diagrams, configuration records, logs, reports, screenshots, review records, and change documentation.

Review existing vulnerability reports supplied by authorized internal or external sources; identify affected servers, operating systems, applications, services, and infrastructure components.

Determine whether findings apply to the environment and identify duplicates, false positives, previously remediated items, or findings mitigated by existing controls.

Research vendor advisories, patch guidance, release notes, upgrades, configuration changes, and other corrective options; evaluate compatibility, downtime, dependencies, testing, and rollback requirements.

Prioritize findings with the IT Manager and relevant system owners based on severity, exploitability, exposure, system criticality, business impact, compliance requirements, and available mitigations.

Develop remediation project plans that identify scope, corrective actions, responsible parties, dependencies, testing, maintenance windows, target dates, rollback steps, and required documentation.