Systems Administrator (Windows)

Na Ali'i Consulting & Sales, LLC.•Fort Belvoir, VA

19h•$75,000 - $132,000

About The Position

Nakupuna Companies is seeking a System Administrator I (Windows) to install, configure, maintain, and troubleshoot Microsoft Windows Server and workstation environments, ensuring availability, performance, and security. The role supports Active Directory, Group Policy, DNS, DHCP, virtualization, and related enterprise infrastructure across standalone, on-premises, and cloud environments. Systems may operate on NIPRNet, SIPRNet, DREN, JWICS, and other applicable DoD networks. The administrator provides intermediate-level system administration and technical support while ensuring compliance with applicable DoD cybersecurity requirements. The position administers Windows systems, services, accounts, security configurations, updates, backups, and documentation. It also supports virtualized and cloud-hosted infrastructure and Windows-based application environments, performs automation with PowerShell and related tools, and coordinates technical issues with network operations teams. The role is located in Fort Belvoir, Virginia, and requires a Secret clearance. A bachelor’s degree in computer science, IT, or a related field is preferred. The posting lists a projected annual compensation range of $75,000 to $132,000.

Requirements

Required Security+ CE certification.
At least 5 years of system administration experience, including at least 3 years of Windows system administration experience; described as preferred in the posting.
Secret clearance.
Ability to perform repetitive motions with the hands, wrists, and fingers.
Ability to engage in and follow audible communications in emergencies.
Ability to sit for prolonged periods at a desk and work on a computer.

Nice To Haves

Bachelor’s degree in computer science, IT, or a related field.
Experience administering Windows Server 2019, 2022, or 2025.
Experience with Active Directory, Group Policy, PowerShell scripting, DNS, DHCP, WSUS, VMware virtualization, and DISA STIG implementation.
SecurityX/CASP+, CCNP Security, CISA, FITSP-O, GICSP, or SSCP certification.
Microsoft Certified: Windows Server Hybrid Administrator Associate.
Microsoft Certified: Azure Administrator Associate.
CompTIA Server+ certification.
VMware Certified Professional (VCP).
Relevant AWS certifications.

Responsibilities

Administer and maintain Active Directory Domain Services across business networks, including OUs, user and computer accounts, security groups, GPOs, domain controllers, authentication, DNS, and access permissions.
Support Windows Server services such as DHCP, file sharing, IIS, and VPN connectivity, as applicable.
Monitor Windows Server and workstation performance, availability, resource utilization, services, and event logs; identify and resolve performance and reliability issues.
Implement and maintain Windows security configurations, including DISA STIG compliance, Windows Defender, Windows Firewall, access controls, security auditing, and system hardening.
Administer and support Windows Server systems and registered applications hosted in Azure, AWS GovCloud, and on-premises environments, including provisioning, configuration, maintenance, and troubleshooting.
Manage Windows and Active Directory accounts, security groups, permissions, and privileged access according to access-control policies and least-privilege principles.
Maintain system configuration documentation, Active Directory structures, Group Policy configurations, standard operating procedures, and change-management records.
Perform operating-system upgrades, cumulative updates, and security patching using WSUS or other approved enterprise patch-management tools.
Develop, maintain, and execute PowerShell scripts to automate administration, configuration, user management, reporting, and troubleshooting.
Build, maintain, and support DREN developer and operations center/force protection workstations.
Configure, maintain, and troubleshoot Windows storage systems, including NTFS file systems, SMB shares, storage volumes, permissions, and access controls.
Administer Windows Server virtual machines in VMware vSphere/ESXi, including provisioning, configuration, resource allocation, performance monitoring, and troubleshooting.
Support Windows-based application development and production environments, including server provisioning, IIS configuration, Windows services, application dependencies, server decommissioning, and system-level troubleshooting.
Configure and maintain Windows Server and workstation operating systems in accordance with DISA STIGs, SRGs, and DoD cybersecurity requirements.
Automate routine Windows administration using PowerShell, Windows Task Scheduler, and other approved system-management tools.
Coordinate with the local RNEC on ticket requests to RNEC/2RCC concerning virtual-machine creation, performance, hardware resource allocation changes, POAs, waivers, and exceptions.
Align managed systems, applications, and supporting technologies with applicable DISA STIG/SRG and cybersecurity guidance for their networks.
Provide administration, refactoring support, architecture planning, and execution for cloud-computing tasks, including building and maintaining registered applications in AWS or Azure.
Support VMware ESXi server administration, including creating and updating VM templates, building servers, and managing ESXi host resource allocation.
Coordinate with the DREN NOC to troubleshoot connectivity issues and DREN network configuration changes or updates.
Support ACAS vulnerability scanning, IAVA compliance, endpoint security management, and WSUS; deploy updates, remediate vulnerability findings, validate endpoint security agent compliance, and respond to cybersecurity directives.
Apply, test, and validate Windows operating-system updates, security patches, and configuration changes to maintain security, stability, and compliance.
Troubleshoot Active Directory authentication, Group Policy processing, DNS resolution, domain-controller connectivity, and Windows Server service issues.
Support Windows Server backup and recovery, including verifying scheduled backups, testing restoration, and recovering system configurations and data.