Systems Administrator

American Academy of Physician Associates Inc•Alexandria, VA

8d•$87,000 - $102,000

About The Position

AAPA is seeking an adaptable and highly proactive Systems Administrator to oversee, maintain, and safeguard our IT infrastructure. Working closely with the Senior Director of IT, this position supports critical on-premises, network, cloud, and security environments. The ideal candidate will bring strong systems administration experience within the Microsoft ecosystem, along with hands-on expertise in Microsoft Azure, enterprise networking, cybersecurity, and SIEM operations. This individual will play a key role in ensuring the performance, security, reliability, and scalability of AAPA’s technology environment.

Requirements

Possesses thorough knowledge of the OSI model, TCP/IP protocols, subnetting, and packet analysis.
Demonstrated expertise in administering SIEM solutions, conducting proactive threat hunting, performing comprehensive log analysis, and overseeing incident triage.
Excellent critical thinking skills and the ability to clearly document infrastructure configurations, network topologies, and security procedures.
Demonstrates initiative and consistently collaborates effectively within a team environment.
Familiarity with web server administration (such as IIS, Apache, or Nginx), load balancing, and a general understanding of web application architecture.
Proficient in understanding, implementing, and managing AI solutions.
Associate’s or bachelor’s degree in Information Technology, Cybersecurity, or a related field.
Minimum of 5 years of work experience in Systems Administration, Network Engineering, Cyber Security
Demonstrated experience as a Systems Administrator, Cloud Administrator, or Network Engineer overseeing complex enterprise environments.
Experienced with Windows Server, Active Directory, DNS, ADCS, DHCP, IIS, Azure, EntraID, SCCM, SIEM, and AV/EDR/XDR tools.
Demonstrates proven experience in overseeing the complete management lifecycle of enterprise firewall rules.
Experience managing client to site and site to site VPN’s.
Experience in managing Microsoft Azure services, including monitoring, cloud security posture, governance, and cost optimization

Nice To Haves

Experience with PowerShell or Python for automation, API integrations, or streamlining administrative tasks preferred.
Experience administering Linux server environments preferred.
Experience with Microsoft or open-source SQL Server environments preferred.

Responsibilities

Deploy, configure, and maintain Windows Server environments, ensuring optimal performance, uptime, and disaster recovery readiness.
Optimize existing servers and processes to enhance their overall operation and performance which follow best practices.
Administer Active Directory, ADCS, Group Policy (GPO), DNS, DHCP and Microsoft Entra ID features, including Conditional Access policies, MFA, and SSO integrations.
Architect, deploy, and manage Microsoft Azure infrastructure. Oversee Azure Virtual Networks (VNets), Network Security Groups (NSGs), and hybrid connectivity (Peering, Site-to-Site VPNs).
Maintain business continuity using Data Backup solutions and DR strategies.
Manage and maintain Email Security platforms to guarantee reliable email delivery.
Manage and maintain enterprise network infrastructure, including switches, firewalls, wireless access points. Implement, tune, and troubleshoot networking issues. Capable of configuring and adjusting active firewall rules to ensure alignment with company policies.
Manage and optimize core Microsoft 365 services, including Exchange Online, Teams, SharePoint, Intune and other MDM/RMM solutions.
Review, test and deploy patches utilizing the organizations chosen RMM solution.
Manage, configure, and tune the organization's Security Information and Event Management (SIEM) platform.
Ensure comprehensive log aggregation, create custom detection rules, and optimize alerting to minimize false positives.
Leverage threat intelligence, vulnerability scanning, and third-party AV/EDR/XDR tools to proactively hunt for indicators of compromise (IoCs) across endpoints, servers, and network traffic.
Monitor system performance, troubleshoot technical issues, and maintain accurate documentation of infrastructure configurations, network topologies, security procedures, policies, and processes.