Cloud Systems Administrator

Thornton Tomasetti • Chicago, NY

1d

About The Position

Thornton Tomasetti is seeking a Cloud Systems Administrator to administer Windows infrastructure in Azure and the Virtual Desktop Infrastructure platform across commercial and U.S. Government environments. The role covers Windows Server, Active Directory and Group Policy, Microsoft Entra ID, Azure infrastructure services, Citrix DaaS, and supporting services. The administrator will work with IT leadership and network, security, endpoint, and helpdesk teams to improve, modernize, secure, and support the company’s cloud and VDI environments. The role also includes government-environment work involving Controlled Unclassified Information (CUI) and export-controlled information, subject to applicable security and compliance requirements.

The position is based in the Austin, Chicago, or New York office, though other U.S. office locations may be considered. Candidates must be U.S. citizens and able to successfully complete a U.S. Government background investigation after employment begins; maintaining this authorization is a condition of employment.

Thornton Tomasetti is an independent, 100% employee-held organization with about 1,700 engineers, architects, sustainability and support professionals working across approximately 43 offices worldwide. The company provides engineering design, investigation, and analysis services and describes its mission as bringing clients’ ideas to life while supporting a more resilient future.

Requirements

• U.S. citizenship and ability to successfully complete a U.S. Government background investigation after employment begins; maintaining the authorization is a condition of employment.
• Associate degree in computer science or higher, or equivalent experience.
• At least 3 years of IT systems administration experience, including Windows Server and Active Directory.
• Hands-on Windows Server administration experience, including patching, hardening, roles and features, and certificates.
• Hands-on experience administering Citrix DaaS or Citrix Virtual Apps and Desktops.
• Hands-on Active Directory and Group Policy experience, including domain controllers, DNS, organizational units, groups and accounts, and GPO design and troubleshooting.
• Hands-on experience provisioning and configuring Azure VMs, storage accounts, and Azure Files.
• Experience with identity and access management across Active Directory and Microsoft Entra ID, including group-based access, multi-factor authentication, and Conditional Access.
• Experience managing Windows desktop policy and user profiles with GPOs and Microsoft Intune.
• Proficiency in PowerShell scripting to automate administrative tasks.
• Familiarity with networking concepts such as VNets, VPNs, firewalls, and load balancers, and their integration with cloud platforms.
• Experience with backup, recovery, and security practices in virtualized and cloud environments.
• Strong troubleshooting, problem-solving, documentation, and communication skills.
• Based in the Austin, Chicago, or New York office; other U.S. office locations may be considered.

Nice To Haves

• Familiarity with U.S. Government compliance frameworks such as NIST SP 800-171, CMMC, or FedRAMP, and CUI handling.
• Experience in Azure Government, Microsoft 365 GCC High, or another regulated cloud, including CIS or DISA STIG hardening.
• Experience administering Microsoft Entra ID Enterprise Applications and App Registrations for SSO and SCIM provisioning.
• Experience with infrastructure as code, particularly Bicep, and Azure DevOps or GitHub-based deployment pipelines.
• Experience with Citrix NetScaler (ADC) operations, including certificate renewals, updates, and troubleshooting, and with Citrix StoreFront.
• An active or previously held U.S. security clearance.
• Microsoft Azure Administrator (AZ-104), Microsoft Identity and Access Administrator (SC-300), Windows Server Hybrid Administrator (AZ-800/AZ-801), or Citrix Certified Associate – Virtualization (CCA-V) certification.
• Ability to prioritize and stay organized in a dynamic environment, proactively identify improvements, follow processes in a compliance-bound environment, learn new technologies, solve complex problems, and collaborate in a global team setting.
• Alignment with Thornton Tomasetti’s values of innovation, excellence, and client focus.

Responsibilities

• Collaborate with IT leadership, end-users, and network, security, and endpoint teams to improve government and commercial cloud environments.
• Identify and implement automation opportunities for server, identity, cloud, and VDI operations to reduce manual effort and improve performance and reliability.
• Contribute to platform modernization projects to maintain secure, reliable, and efficient infrastructure.
• Assist with deploying Azure and Citrix DaaS Government services, Windows Server workloads, and supporting cloud services using best practices.
• Use PowerShell, Bicep, Azure Automation, and other automation to standardize and accelerate deployment and configuration.
• Coordinate with endpoint delivery teams to ensure consistent application deployment across VDI environments.
• Administer Windows Server systems, including patching, hardening, roles and features, certificates, and monitoring.
• Administer Active Directory and Group Policy for servers and VDA policy, keeping virtual desktop policy aligned with corresponding Microsoft Intune policies for laptop endpoints.
• Administer and optimize Citrix DaaS platforms, with a focus on user experience.
• Manage Azure VMs, Azure Storage accounts, and Azure File Sync.
• Assist with identity and access management for applications and staff across Active Directory and Microsoft Entra ID.
• Maintain automated backup, restore, and high availability across VDI, server, storage, and cloud systems.
• Perform government-environment work in accordance with security and compliance requirements, support required controls and evidence, and protect enterprise data integrity and security.
• Provide third-level support to the helpdesk and staff for Azure, Windows Server, Citrix DaaS, and identity issues; track work in ServiceNow and use automation and documentation to mitigate recurring problems.
• Maintain detailed documentation of configurations, automation scripts, and processes.
• Maintain the Citrix NetScaler high-availability pair and Citrix StoreFront, including TLS certificate renewals, firmware updates, and troubleshooting connectivity and authentication issues.

Benefits

• Medical, dental, vision, life, AD&D, disability, and other voluntary benefits.
• Flexible Spending Accounts for medical and childcare.
• Paid time off, family leave for new parents, and volunteer time.
• Tuition reimbursement.
• Commuter transit benefits where available.
• 401(k) retirement savings with company matching on employee contributions and/or qualified student loan repayments.
• Fitness reimbursement.
• Wellness, diversity/inclusion, and employee resource programs and initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree