Windows Admin

InnoSoul•Columbia, SC

9d•Remote

About The Position

The Active Directory/Windows Admin executes Active Directory, Group Policy, permissions, Windows Server lifecycle, and CIS hardening work in a large environment. The role implements CIS baselines through Group Policy and scripts under the analysis and direction of the Senior Server Administrator, who reviews and orchestrates the work. The position also develops and maintains PowerShell automation for administration, auditing, remediation, and reporting, and replaces repetitive manual procedures with tested, documented scripts. Work is assigned and prioritized by the Server Operations Team Manager, sometimes routed through a Senior Server Administrator or Server Administrator under the Manager’s oversight. The administrator tracks work in Azure DevOps, processes service requests and change controls through the Service Management tool, and stores all scripts, code, documentation, runbooks, SOPs, and other work products in Azure DevOps as branch property. The role cross-skills with the Senior Server Administrator and may take on additional on-premises duties as directed by the Manager. The position is listed as remote/local (EST), with a location of Columbia, South Carolina (SCCOURTS). Candidates must currently reside in the Eastern Time Zone. The role is a 12-month position, with a two-round virtual interview process.

Requirements

At least 5 years of experience with Active Directory domain services, replication, delegation, permissions, and domain controller troubleshooting.
At least 5 years of experience with Group Policy design, scoping, filtering, troubleshooting, and change control in a large environment.
At least 5 years of experience with PowerShell modules, error handling, remote execution, scheduled and unattended scripts, and Active Directory/Group Policy automation.
At least 3 years of experience implementing CIS benchmarks or equivalent hardening baselines on Windows endpoints using Group Policy and scripting.
At least 5 years of experience with Windows Server administration and lifecycle management across a large server estate, including building, patching, upgrading, and decommissioning.
Experience documenting work as it is performed, keeping SOPs, runbooks, and change records current without after-the-fact write-ups.
Experience working from a tracked work queue, such as Azure DevOps boards, and following formal service request and change control processes.
Must currently reside in the Eastern Time Zone.

Nice To Haves

Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms.
Endpoint patch management experience, including third-party application and Windows OS patching.
Third-party application packaging and deployment automation, including application bundles such as PDQ.
PKI and Active Directory Certificate Services operations.

Responsibilities

Execute the Active Directory, Group Policy, and permissions backlog, including creating, modifying, testing, and retiring GPOs and making delegation and access changes.
Implement CIS baselines through Group Policy and scripted remediation under the Senior Server Administrator’s analysis and direction.
Design, write, and maintain PowerShell for administration, automation, auditing, remediation, and reporting across endpoints and Active Directory.
Identify repetitive operational tasks and replace manual procedures with tested, documented scripts.
Manage Windows Server lifecycle activities at enterprise scale, including building, configuring, patching, upgrading, troubleshooting, and decommissioning servers.
Receive work assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or Server Administrator.
Log, update, and track all work items in Azure DevOps.
Process service requests and change controls through the Service Management tool in accordance with the team’s change process.
Store scripts, code, GPO documentation, runbooks, SOPs, and other work products in Azure DevOps as work is performed.
Cross-skill with the Senior Server Administrator to share Active Directory, Group Policy, and CIS knowledge.
Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.
Maintain current SOPs, runbooks, and change records while performing work.
Support deliverables including reducing the AD/GPO backlog, implementing CIS items with before-and-after states recorded, building a tested PowerShell script library, and documenting recurring tasks.