Windows Administrator IV

Chenega Corporation•UNAVAILABLE, Colorado

3h•Remote

About The Position

Chenega Professional Technical Services, LLC is seeking an expert-level Windows Administrator IV to support a Federal Government customer with enterprise identity and Active Directory (AD) migration to Entra ID and domain consolidation. The role requires expert knowledge and experience planning and executing AD-to-Entra ID migrations and consolidation activities, as well as providing technical operations and maintenance (O&M) for the supported environment. The position coordinates with the Project Manager and stakeholders on directory services, migration planning and communications, application-owner engagement and compatibility testing, cutover execution, and foundational O&M of Windows-based services. It also provides Tier 3 escalation and next-day support for migration-related authentication, profile, application-access, and PIV certificate login issues. The position is 100% remote, with onsite travel as required. The estimated wage is up to $50.00 per hour.

Requirements

Bachelor’s degree in a technology field.
15 years of experience designing, configuring, and supporting Microsoft Windows system environments.
Expertise with Active Directory, Active Directory Federated Services, Azure AD, and Entra ID.
Experience with Kerberos/SSO.
Experience with PowerShell automation.
Large enterprise experience.
Experience with strict change control.
Authorized to work in the U.S. without sponsorship.
Must be able to pass the Public Trust Government background investigation.
Strong written and oral communication skills.
Strong troubleshooting skills.
Ability to work closely with a small team.
Ability to work in a high-stress environment.

Nice To Haves

Microsoft Certified: Windows Server Administrator Associate.
Microsoft Certified: Identity and Access Administrator Associate (SC-300).
Azure Administrator Associate (AZ-104).
Experience with DNS and DHCP.
Experience with ACL.
Experience with Group Policy and AGPM.
Experience with SCCM.
Experience with SCOM.
Experience with WSUS.

Responsibilities

Coordinate with the Project Manager and stakeholders on enterprise directory services, migration-wave planning and communications, application-owner engagement and compatibility testing, cutover execution with next-day support, and O&M of supported Windows-based services.
Perform AD-to-Entra ID technical migration and identity management.
Configure Entra ID (Azure AD) identity synchronization and validate directory health as needed for migration.
Deploy automation pipelines and execute pilot migrations of approximately 200 test users before full-scale cutover.
Conduct controlled nightly migration batches Monday through Thursday, limited to 150 users per night, with pre- and post-validation.
Implement Kerberos/SSO.
Perform workstation and domain re-joins.
Design and execute PowerShell automation, including bulk updates and monitoring.
Provide Tier 3 escalation for permissions, ACL remediation, Kerberos/SSO issues, and workstation/domain re-joins.
Execute identity cutovers and provide next-day support for authentication, profile, and application-access issues, including PIV certificate login troubleshooting.
Monitor event and system logs and performance; maintain OS and software patching baselines using WSUS or an equivalent.
Assist with infrastructure planning, design, and implementation; develop project plans for transition, administration, and ongoing operations.
Prepare authoritative runbooks for Tier 1 and Tier 2 helpdesk support.
Perform foundational O&M, including performance monitoring, OS patching, backup and restore, configuration management and change control, disaster recovery testing, documentation, and training.
Provide daily status updates before 12:00 PM MT and escalate urgent items to PDA within one hour of identification.
Perform other duties as assigned.