Window Systems Administrator

NDI Engineering•West Deptford Township, NJ

9d•$62,000 - $84,000

About The Position

NDI Engineering Company is seeking a full-time Windows Administrator to support its growing operations in South Jersey. The role administers Windows server environments and network infrastructure, including on-premises and Azure servers, VMware/ESXi servers, Windows 11 computers, and iOS mobile devices. The administrator also maintains security, performance, monitoring, configuration management, asset records, backups, disaster recovery, and system documentation. The position includes providing escalated help desk support and after-hours support for weekend maintenance and emergencies, and collaborating with the cybersecurity team to maintain compliance with government security control standards.

Requirements

Associate degree, technical school certificate, military “C” school in network/Windows server system administration, or equivalent knowledge acquired through work or military experience.
3–5 years’ experience as a Windows server system administrator.
Expertise hardening Windows operating systems and providing audit evidence in accordance with DISA STIG standards.
Expertise with Microsoft Server operating systems, Microsoft Active Directory Domain Services, DNS, DHCP, Group Policy, Certificate Management, and other AD roles and features.
Experience installing Windows operating systems, managing roles, features, and services, installing applications, and deploying systems into production for business units.
Experience designing, configuring, installing, and maintaining Fortinet or Cisco firewalls, including secure network topologies, rules/policies, interfaces, SD-WAN fabrics, SSL/TLS inspection, antivirus, IPS, Application Control, and Web Filtering.
Experience designing, configuring, installing, and maintaining Fortinet or Cisco layer 2/3 switches in a high-availability configuration.
Experience creating and monitoring bridge- and tunnel-based Wi-Fi access points.
Experience with Windows SCCM, including advanced knowledge of patch management and OS deployment.
Experience installing and supporting VMware/ESXi infrastructure configuration.
In-depth backup, disaster recovery, and high-availability experience with cloud backup software such as NetApp and CommVault.
Experience integrating continuous monitoring tools such as EDR, EMS, and SIEM into a network infrastructure.

Responsibilities

Administer Windows server environments and network infrastructure.
Design, install, and configure hardened Windows servers and desktops in accordance with DISA STIG standards, both on-premises and in Azure.
Administer Windows Server 2022, ESXi servers, Windows 11 desktop and laptop computers, and iOS mobile devices.
Implement vulnerability patches to remediate issues identified by Information System Security Engineers (ISSE).
Improve and maintain monitoring, configuration management, and reporting functions.
Provide after-hours support for infrastructure weekend maintenance and related emergencies.
Maintain inventory and asset configurations in the JIRA Asset Database.
Monitor system performance, network and storage utilization, and generate JIRA change tickets to remediate issues.
Provide support for escalated help desk requests through JIRA Service Management.
Create and maintain PowerShell scripts for administrative automation.
Troubleshoot systems and assist with problem-solving, involving other teams, partners, and outside vendors as needed.
Automate the design, build, testing, and deployment of solutions and standards using tools such as PowerShell.
Perform quarterly audits of Active Directory accounts and associated security group assignments.
Install, administer, operate, maintain, support, test, and upgrade systems; monitor performance; support business continuity; and maintain documentation.
Perform system backups and disaster recovery.
Install and configure system hardware, and document hardware and software configurations.
Apply operating system updates, patches, and configuration changes.
Administer, maintain, and update network infrastructure, including high-availability firewall configurations, network access points, IPsec VPNs, and data center and departmental layer 2/3 switches.