Windows Desktop/Server Administrator

Peraton•Oak Ridge, TN

3d•$80,000 - $128,000

About The Position

The Windows Desktop/Server Administrator will provide Tier III IT operations support across the Office of Information Management (OIM) and SC mission systems. This role is responsible for operating and maintaining Windows-based servers, desktops, and hybrid infrastructure, ensuring service availability, performance, security, and compliance with DOE directives. The ideal candidate will have deep expertise in Active Directory, Windows Server, endpoint management, and virtualization technologies, while also supporting cloud integrations and evolving enterprise service delivery models.

Requirements

5 years with BS/BA; 3 years with MS/MA; 0 years with PhD
Demonstrated technical proficiency equivalent to industry-recognized certifications, such as: Microsoft Certified: Windows Server Hybrid Administrator Associate Microsoft Certified: Endpoint Administrator Associate CompTIA Network+ or Cisco CCNA (networking fundamentals) Vendor-specific certifications in firewalls, endpoint platforms, or virtualization
Proficiency in PowerShell scripting, automation tools, and CLI-based administration.
Strong knowledge of Active Directory, Windows Server, SCCM/Intune, and virtualization platforms.
Ability to support Windows, macOS, and Linux endpoints as required.
US Citizen with the ability to obtain an agency clearance

Nice To Haves

Experience with hybrid identity management (Azure AD Connect, federation, conditional access).
Familiarity with Windows security baselines, compliance frameworks, and patch management policies.
Strong troubleshooting skills for Windows OS, server roles, and virtualization issues.
Excellent documentation and communication skills for technical and operational reporting.

Responsibilities

Windows Server & Desktop Administration: Administer and maintain Windows Server environments (2016/2019/2022), including domain controllers, file servers, print servers, and application servers.
Manage Active Directory (AD), including user/group management, OU structure, GPOs, DNS, DHCP, and replication.
Provide Tier III support for Windows desktop environments, including OS deployment, patching, and troubleshooting.
Support endpoint devices (Windows, macOS, and Linux where required), ensuring compliance with security baselines.
Implement and maintain Microsoft Endpoint Configuration Manager (SCCM/Intune) for software distribution, patch management, and endpoint compliance.
Infrastructure & Data Center Operations: Operate and monitor physical and virtual infrastructure, including Hyper-V and VMware platforms.
Support backup and restore processes in line with Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).
Maintain documentation of server configurations, rack layouts, cabling, power requirements, and capacity planning.
Provide hands-on support for network and server hardware in communication closets and data centers.
Monitoring & Availability Management: Continuously monitor Windows servers, desktops, and virtualization platforms for availability, health, and performance.
Detect and resolve bottlenecks, outages, and performance issues in line with SLAs.
Use approved monitoring tools (e.g., SCOM, SolarWinds, Azure Monitor) and recommend enhancements to improve operational effectiveness.
Track and report on capacity utilization, resource consumption, and licensing compliance.
Maintain operational records such as maintenance logs, backup validation history, and asset inventories.
Configuration Management & Change Control: Support and improve Configuration Management (CM) practices in alignment with DOE and industry standards.
Maintain and update the Configuration Management Database (CMDB) to track Windows servers, desktops, and dependencies.
Submit all changes via the OIM-approved change management system in accordance with the Change Control Review (CCR) process.
Evaluate proposed changes for technical and cybersecurity risk, ensuring compliance with secure configuration baselines.
Perform and document system patching, OS updates, and application upgrades in accordance with OIM policy.