System Administrator III

PHOTRONICS INC•Allen, TX

11h•Onsite

About The Position

For more than 50 years, Photronics has been a global leader in photomask technology—powering the innovation behind smartphones, computers, automotive technology, and countless devices used every day. Our success is built on quality, collaboration, and the dedication of our people. Join us and be part of a company recognized for cutting-edge technology, exceptional service, and strong customer partnerships. Photronics is seeking a seasoned Windows Systems Administrator will take hands-on ownership of the Windows platform at the Allen, TX site while supporting Photronics’ global Windows infrastructure. This role serves as a senior technical authority and escalation point for Windows services, with responsibility for providing coverage and support across multiple global locations as needed. The position is responsible for driving a secure, stable, and scalable Windows environment through strong operational discipline, automation, documentation, and cross-team collaboration. Responsibilities include maintaining and enhancing system performance, leading standardization efforts, and supporting both local and global IT operations while ensuring consistency across the Windows ecosystem. This role is critical to ensuring Photronics maintains a resilient and efficient Windows platform that supports business continuity worldwide. As a key technical leader, the position plays an important role in strengthening and standardizing the organization’s Windows environment while enabling reliable operations across all sites. This role focuses on Microsoft Azure infrastructure and identity services (including Entra ID) and does not serve as an Office 365 application administration role. Location Texas Office - Allen, TX. This is an on-site position and we are not open to remote candidates at this time. Travel Limited travel as needed.

Requirements

Strong documentation and communication skills (technical and executive-level)
In-depth understanding of Windows Server, Active Directory, Group Policy, DNS/DHCP, and PKI
Advanced PowerShell scripting and automation for operational efficiency
Strong troubleshooting, root cause analysis, and problem-solving skills
Familiarity with high-availability, clustering, and enterprise storage concepts
Ability to lead, mentor, and collaborate effectively with cross-functional and global teams
Strong hands-on experience with Microsoft Azure infrastructure services (non-O365)
Deep understanding of Microsoft Entra ID and hybrid identity architectures
6–8 years of enterprise-level, hands-on network engineering and operations experience.
Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.

Nice To Haves

Strong preference for experience transitioning network operations from a managed service or outsourced NOC to an internal team.
Extensive experience with Fortinet FortiGate firewalls; Fortinet NSE certification strongly preferred.
Deep knowledge of Juniper and Cisco platforms, including advanced routing and switching concepts.
Proven experience designing and deploying Layer 2 / Layer 3 WAN architectures, including large-scale Ethernet WANs.
Experience with monitoring and automation tools such as SolarWinds, Datadog, Grafana, Prometheus, or similar platforms.
Familiarity with automation and scripting (Python, Ansible, Netmiko) and AIOps methodologies.
Professional certifications such as CCNP, JNCIP, or Fortinet NSE 4/7 are highly desirable.

Responsibilities

Own and administer Windows Server (2012–2022+), including lifecycle management, hardening, and upgrades
Manage Active Directory Domain Services (forests, trusts, FSMO roles, Sites & Services)
Design and troubleshoot Group Policy (security baselines, delegation, issue resolution)
Support enterprise DNS, DHCP, and AD Certificate Services (PKI), including lifecycle, automation, and recovery
Own and support Microsoft Azure services as they relate to infrastructure, identity, and security (excluding Office 365 workloads)
Administer and maintain Microsoft Entra ID (Azure AD), including hybrid identity design, synchronization, authentication flows, and conditional access integration
Manage Azure IaaS and PaaS components relevant to enterprise infrastructure (e.g., Azure virtual machines, networking, storage, backup, recovery, and monitoring)
Design and support hybrid identity and access models across on-premises Active Directory and Azure
Implement and maintain secure identity practices including MFA, privileged access, role based access control (RBAC), and identity lifecycle management
Partner with Security and Architecture teams to ensure Azure configurations align with enterprise security, compliance, and governance standards
Support Azure logging, monitoring, and operational visibility using native Microsoft tooling
Contribute to Azure platform standardization, documentation, and operational runbooks across global sites
Support storage integrations (SAN/NAS, iSCSI, multipathing) and Windows storage features
Operate and validate backup and recovery solutions (e.g., Veeam), ensuring RPO/RTO alignment
Implement high availability solutions (Failover Clustering, load balancing coordination)
Support disaster recovery planning, testing, and failover execution
Serve as senior escalation point for complex incidents and platform issues
Lead root cause analysis (RCA) and corrective action planning
Ensure alignment between enterprise standards and global site execution
Collaborate with Network, Virtualization, Linux, Security, and Application teams
Mentor junior administrators and promote operational consistency
Develop automation using advanced PowerShell and configuration management tools (e.g., DSC)
Leverage monitoring and patching tools (SCOM, Nagios, CheckMK, WSUS, SCCM) to improve stability
Create and maintain runbooks, procedures, and operational documentation
Implement Windows security hardening aligned to CIS/STIG standards
Enforce credential and authentication best practices (Kerberos, NTLM reduction, LSA protections)
Support audits (SOX, ISO, CMMC) and drive remediation efforts
Strong documentation and communication skills (technical and executive-level)
Lead incident response and support global issue resolution
Review changes for risk, readiness, and maintenance window alignment
Identify recurring issues and implement permanent fixes to reduce technical debt
Provides global Windows administration support and backfill coverage across regions as needed
May require occasional off-hours support for global operations and major incidents