Systems Administrator (Windows)

Nakupuna Companies•Fort Belvoir, VA

5d•Onsite

About The Position

Nakupuna Companies is seeking a System Administrator I (Windows) to install, configure, maintain, and troubleshoot Microsoft Windows Server and workstation environments, ensuring availability, performance, and security. The role supports Active Directory, Group Policy, DNS, DHCP, virtualization, and related enterprise infrastructure across standalone, on-premises, and cloud environments. Systems may operate on NIPRNet, SIPRNet, DREN, JWICS, and other applicable DoD networks. The administrator provides intermediate-level system administration and technical support and ensures compliance with applicable DoD cybersecurity requirements. The position administers Windows infrastructure and user access, monitors system health, applies security configurations and patches, maintains documentation, and automates administrative tasks. It supports Windows virtual machines and application environments in VMware vSphere/ESXi, Microsoft Azure, AWS GovCloud, and on-premises environments, and coordinates technical matters with network operations centers and regional support organizations. The role also supports vulnerability scanning, endpoint security, backup and recovery, and compliance with DISA STIGs, SRGs, and other applicable cybersecurity guidance. The position is located in Fort Belvoir, Virginia. A Secret clearance is required. Physical requirements include repetitive hand, wrist, and finger motions; ability to engage in and follow audible communications during emergencies; and prolonged sitting at a desk while working on a computer. The projected annualized compensation range is $75,000 to $132,000.

Requirements

Required Security+ CE certification.
A Secret clearance is required.
At least 5 years of system administration experience, including at least 3 years of Windows system administration experience, is preferred.
Preferred experience with Windows Server 2019/2022/2025 administration, Active Directory, Group Policy, PowerShell scripting, DNS, DHCP, WSUS, VMware virtualization, and DISA STIG implementation.
Ability to perform repetitive motions with the hands, wrists, and fingers.
Ability to engage in and follow audible communications in emergencies.
Ability to sit for prolonged periods at a desk and work on a computer.
Ability to meet the stated physical requirements with or without reasonable accommodation.

Nice To Haves

Bachelor’s degree in computer science, IT, or a related field.
Additional certifications desired but not required: SecurityX/CASP+, CCNP Security, CISA, FITSP-O, GICSP, or SSCP.
Microsoft Certified: Windows Server Hybrid Administrator Associate.
Microsoft Certified: Azure Administrator Associate.
CompTIA Server+.
VMware Certified Professional (VCP).
Relevant AWS certifications.

Responsibilities

Administer and maintain Active Directory Domain Services across business and laboratory networks, including organizational units, accounts, groups, Group Policy Objects, domain controllers, authentication, DNS, and access permissions.
Support Windows Server services including DHCP, file sharing, IIS, and VPN connectivity as applicable.
Monitor Windows Server and workstation performance, availability, resource utilization, services, and event logs, and resolve performance and reliability issues.
Implement and maintain Windows security configurations, including DISA STIG compliance, Windows Defender, Windows Firewall, access controls, security auditing, and system hardening.
Administer Windows Server systems and registered applications hosted in Azure, AWS GovCloud, and on-premises environments, including provisioning, configuration, maintenance, and troubleshooting.
Manage Windows and Active Directory accounts, security groups, permissions, and privileged access according to access-control policies and least-privilege principles.
Maintain system configuration documentation, Active Directory structures, Group Policy configurations, standard operating procedures, and change-management records.
Perform operating-system upgrades, cumulative updates, and security patching using WSUS or other approved enterprise patch-management tools.
Develop, maintain, and execute PowerShell scripts to automate administration, configuration, user management, reporting, and troubleshooting.
Build, maintain, and support DREN developer and operations center/force protection workstations.
Configure, maintain, and troubleshoot Windows storage systems, including NTFS file systems, SMB shares, storage volumes, permissions, and access controls.
Administer Windows Server virtual machines in VMware vSphere/ESXi, including provisioning, configuration, resource allocation, performance monitoring, and troubleshooting.
Support Windows-based application development and production environments, including server provisioning, IIS configuration, Windows services, application dependencies, decommissioning, and system-level troubleshooting.
Configure and maintain Windows Server and workstation operating systems in accordance with DISA STIGs, SRGs, and DoD cybersecurity requirements.
Automate routine Windows administration tasks using PowerShell, Windows Task Scheduler, and other approved system-management tools.
Coordinate support responses with the Regional Network Enterprise Center for ticket requests involving virtual machine creation, performance, hardware-resource allocation changes, POAs, waivers, and exceptions.
Align managed operating systems, images, containers, pods, nodes, registered applications, and supporting technologies with current DISA STIG/SRG and applicable cybersecurity guidance.
Provide administration, refactoring support, architecture planning, and execution for cloud-computing tasks, including building and maintaining registered applications in AWS or Azure.
Support VMware ESXi server administration, including creating and updating VM templates, building servers, and managing ESXi host resource allocation.
Coordinate with the DREN Network Operations Center to troubleshoot connectivity issues and network configuration changes or updates.
Support ACAS vulnerability scanning, IAVA compliance, endpoint security management, and WSUS, including approving and deploying updates, remediating findings, validating endpoint-security agent compliance, and responding to cybersecurity directives.
Apply, test, and validate operating-system updates, security patches, and configuration changes to maintain security, stability, and compliance.
Troubleshoot Active Directory authentication, Group Policy processing, DNS resolution, domain-controller connectivity, and Windows Server service issues.
Support Windows Server backup and recovery, including scheduled-backup verification, restoration testing, and recovery of system configurations and data.