Cloud Systems Administrator

Thornton Tomasetti • New York, NY

1d

About The Position

Thornton Tomasetti is seeking a Cloud Systems Administrator responsible for Windows infrastructure in Azure and the Virtual Desktop Infrastructure (VDI) platform. The role administers Windows Server, Active Directory and Group Policy, Microsoft Entra ID, Azure infrastructure services, Citrix DaaS, and supporting services across commercial and U.S. Government environments. The administrator collaborates with IT leadership and network, security, endpoint, and delivery teams to improve and modernize cloud environments, automate operations, support deployments, and maintain secure, reliable services. The position also provides third-level technical support, maintains documentation, and performs work in the government environment in accordance with applicable security and compliance requirements.

Candidates must be U.S. citizens and able to successfully complete a U.S. Government background investigation after employment begins. The role is based in the Austin, Chicago, or New York office, though other U.S. office locations may be considered.

Requirements

• U.S. citizenship and ability to successfully complete a U.S. Government background investigation after employment begins; maintaining the resulting authorization is a condition of employment.
• Associate degree in computer science or higher, or equivalent experience.
• At least 3 years of IT systems administration experience, including Windows Server and Active Directory.
• Hands-on Windows Server administration experience, including patching, hardening, roles and features, and certificates.
• Hands-on experience administering Citrix DaaS or Citrix Virtual Apps and Desktops.
• Hands-on Active Directory and Group Policy administration experience, including domain controllers, DNS, organizational units, groups and accounts, and GPO design and troubleshooting.
• Hands-on experience provisioning and configuring Azure virtual machines, storage accounts, and Azure Files.
• Experience with identity and access management across Active Directory and Microsoft Entra ID, including group-based access, multi-factor authentication, and Conditional Access.
• Experience managing Windows desktop policy and user profiles with Group Policy and Microsoft Intune.
• Proficiency in PowerShell scripting to automate administrative tasks.
• Familiarity with networking concepts such as VNets, VPNs, firewalls, and load balancers and their integration with cloud platforms.
• Experience with backup, recovery, and security practices in virtualized and cloud environments.
• Strong troubleshooting, problem-solving, documentation, and communication skills.
• Based in the Austin, Chicago, or New York office; other U.S. office locations may be considered.

Nice To Haves

• Familiarity with U.S. Government compliance frameworks, including NIST SP 800-171, CMMC, or FedRAMP, and CUI handling; experience with Azure Government, Microsoft 365 GCC High, or another regulated cloud, including CIS or DISA STIG hardening.
• Experience administering Microsoft Entra ID Enterprise Applications and App Registrations for SSO and SCIM provisioning.
• Experience with infrastructure as code, particularly Bicep, and Azure DevOps or GitHub-based deployment pipelines.
• Experience with Citrix NetScaler (ADC) operations, including certificate renewals, updates, and troubleshooting, and with Citrix StoreFront.
• An active or previously held U.S. security clearance.
• Microsoft Azure Administrator (AZ-104), Microsoft Identity and Access Administrator (SC-300), Windows Server Hybrid Administrator (AZ-800/AZ-801), or Citrix Certified Associate – Virtualization (CCA-V) certification.
• Ability to prioritize tasks and stay organized in a dynamic environment.
• Proactive approach to identifying and implementing continual improvements.
• Discipline in following processes in a compliance-bound environment.
• Interest in learning new technologies and solving complex problems.
• Ability to thrive in a collaborative, global team setting.
• Alignment with Thornton Tomasetti's values of innovation, excellence, and client focus.

Responsibilities

• Collaborate with IT leadership, end-users, and network, security, and endpoint teams to improve government and commercial cloud environments.
• Identify and implement automation opportunities across server, identity, cloud, and VDI operations to reduce manual effort and improve performance and reliability.
• Contribute to platform modernization projects.
• Assist with deployment of Azure and Citrix DaaS Government services, Windows Server workloads, and supporting cloud services using best practices.
• Use PowerShell, Bicep, and Azure Automation to standardize and accelerate deployment and configuration.
• Coordinate with endpoint delivery teams to ensure applications are deployed consistently across VDI environments.
• Administer Windows Server systems, including patching, hardening, roles and features, certificates, and monitoring.
• Administer Active Directory and maintain Group Policy for servers and VDA policy, aligning virtual desktop policies with corresponding Microsoft Intune policies for laptop endpoints.
• Administer and optimize Citrix DaaS platforms, with a focus on user experience.
• Manage Azure virtual machines, Azure Storage accounts, and Azure File Sync.
• Assist with application and staff identity and access management across Active Directory and Microsoft Entra ID.
• Maintain automated backup, restore, and high availability across VDI, server, storage, and cloud systems.
• Perform work in the government environment in accordance with applicable security and compliance requirements; support required controls and evidence and protect enterprise data.
• Provide third-level support for Azure, Windows Server, Citrix DaaS, and identity issues; track work in ServiceNow and use automation and documentation to mitigate recurring problems.
• Maintain detailed documentation of configurations, automation scripts, and processes.
• Maintain the Citrix NetScaler high-availability pair and Citrix StoreFront, including TLS certificate renewals, firmware updates, and troubleshooting connectivity and authentication issues.

Benefits

• Medical, dental, vision, life, AD&D, disability, and other voluntary benefits.
• Flexible Spending Accounts for medical and childcare.
• Paid time off, family leave for new parents, and volunteer time.
• Tuition reimbursement.
• Commuter transit benefits where available.
• 401(k) retirement savings with company matching on employee contributions and/or qualified student loan repayments.
• Fitness reimbursement.
• Wellness, diversity and inclusion, and employee resource programs and initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree