Classified Senior Windows Systems Administrator

Johns Hopkins Applied Physics Laboratory • Laurel, MD

4d

About The Position

The Senior Windows Systems Administrator joins APL’s Information Technology Services Department to support classified enterprise infrastructure and mission-critical operations. The role administers and modernizes enterprise Windows environments, maintains infrastructure services, and ensures systems meet operational and cybersecurity requirements. The administrator takes ownership of complex technical challenges and works independently while collaborating with technical teams, cybersecurity staff, stakeholders, and leadership.

The position is a primary technical resource for on-premises Microsoft Exchange Server and supports its administration, maintenance, troubleshooting, upgrades, and operational reliability. It also leads infrastructure engineering and modernization initiatives, supports cybersecurity compliance and operational readiness, and provides technical leadership and mentorship. Work outside normal business hours—including evenings, weekends, and holidays—may be needed for scheduled maintenance, upgrades, patching, outages, or other critical operational needs.

Requirements

• At least 10 years of direct, hands-on experience administering Windows Server infrastructure in an enterprise production environment.
• At least 5 years of hands-on experience administering on-premises Microsoft Exchange Server in a production environment, including independent responsibility for administration, maintenance, troubleshooting, upgrades, and operational reliability.
• Advanced technical experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, enterprise authentication services, and VMware vSphere or Hyper-V.
• Experience administering enterprise MFA solutions, including authentication integration, access policies, and troubleshooting.
• Proficiency in PowerShell scripting and automation, with experience in operating system upgrades, enterprise patch management using technologies such as WSUS or Microsoft Configuration Manager (SCCM/MECM), system monitoring, backup, and disaster recovery.
• Experience implementing DISA STIG requirements, remediating vulnerabilities, and supporting cybersecurity compliance activities.
• Active CompTIA Security+ certification or another certification satisfying applicable DoD 8140 qualification requirements.
• Demonstrated initiative, technical ownership, and ability to identify problems, develop solutions, prioritize competing requirements, and execute complex technical initiatives with minimal supervision.
• Excellent oral and written communication skills, including explaining complex technical information, developing comprehensive documentation, and collaborating with technical teams, customers, and leadership.
• Active TS/SCI+poly security clearance; eligibility requirements include U.S. citizenship, and selected candidates are subject to a government security clearance investigation.

Nice To Haves

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical field.
• Experience administering enterprise infrastructure in classified, isolated, or disconnected environments.
• Advanced Microsoft Exchange Server experience, including database availability groups (DAGs), mail flow, transport services, high availability, and complex migrations.
• Hands-on experience administering RSA SecurID and RSA Authentication Manager, including enterprise MFA integrations, token administration, and advanced authentication troubleshooting.
• Experience with enterprise PKI, storage technologies, infrastructure resiliency, and high-availability architectures.
• Additional technical or cybersecurity certifications, such as Microsoft certifications, CISSP, or CompTIA SecurityX.

Responsibilities

• Administer and maintain enterprise Windows infrastructure, including Windows Server, Active Directory, Group Policy, DNS, DHCP, PKI, VMware vSphere, Hyper-V, and supporting services.
• Administer, maintain, troubleshoot, and upgrade on-premises Microsoft Exchange Server and ensure reliable, available enterprise messaging services.
• Manage enterprise authentication and security services, including RSA SecurID MFA, authentication policies, token administration, security patching, vulnerability remediation, and DISA STIG compliance.
• Lead infrastructure engineering and modernization initiatives, including system architecture and design, operating system and Exchange Server migrations, infrastructure upgrades, and solutions that improve reliability, performance, and security.
• Troubleshoot complex technical issues and improve operational efficiency using root cause analysis, system monitoring, PowerShell automation, enterprise patch management, and technical solutions.
• Support cybersecurity compliance and operational readiness, including RMF requirements, continuous monitoring, system documentation, SOPs, and backup and recovery processes.
• Independently manage technical initiatives, mentor other administrators, and communicate with cybersecurity teams, technical stakeholders, and leadership.
• Support mission-critical operations outside normal business hours, including evenings, weekends, and holidays, as needed for maintenance, patching, upgrades, outages, and other critical operational requirements.

Benefits

• Robust education assistance program
• Retirement contributions and retirement plans
• Paid time off
• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Short-term disability insurance
• Long-term disability insurance
• Flexible spending accounts
• Training and development
• Potential sign-on bonus, relocation benefits, locality allowance, or discretionary payments for exceptional performance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed