Windows Server Administrator

Savannah River National Laboratory•Aiken, SC

About The Position

Savannah River National Laboratory (SRNL) is seeking an experienced Windows Systems Administrator. The successful candidate will be responsible for the administration, secure operation, and lifecycle management of Windows Server platforms and foundational enterprise services that support Savannah River National Laboratory (SRNL) mission and research computing needs. This role delivers reliable, auditable operations including build, patch, hardening, monitoring, and recovery activities. Candidate will partner with cybersecurity stakeholders, infrastructure peers, and application teams to keep mission services secure and available. This role is for an experienced admin: you are expected to independently own well-scoped Windows infrastructure and platform responsibilities, resolve complex tickets and incidents with minimal supervision, and contribute measurable improvements through automation, standardization, and modernization initiatives.

Requirements

Bachelor's Degree and 5+ years of relevant experience administering Windows Server in production environments (or equivalent combination of education and experience).
Working proficiency with Windows Server enterprise services: Active Directory, Group Policy, DNS, DHCP, and certificate-based security concepts (PKI/CA exposure).
Demonstrated experience performing patching and vulnerability remediation at scale using WSUS and/or MECM (or closely related enterprise patch tooling), including staged deployments and troubleshooting failed updates.
Practical experience supporting Windows-hosted application platforms (e.g., IIS and/or SQL Server) and partnering with application owners for stability and upgrades.
Scripting/automation skills with PowerShell for administration, troubleshooting, and operational efficiency.
Experience supporting Windows virtual machines in VMware vSphere environments (or equivalent virtualization experience).
Experience with monitoring/logging and incident/problem management (root-cause analysis, corrective actions, documentation).

Nice To Haves

Demonstrated experience building/maintaining DISA STIG-aligned Windows baselines, including use of SCAP content and/or applying STIG settings via GPO packages.
MECM depth beyond basics (software updates, application deployments, compliance settings baselines, reporting) and strong WSUS operational knowledge (including maintenance).
Azure/hybrid experience: Microsoft Entra ID application concepts (app registrations, service principals), hybrid identity/on prem integration patterns, Azure Virtual Desktop, and Intune device/app/policy management for Windows.
Experience with Azure Arc and/or Azure Arc resource bridge concepts for hybrid governance/management of on prem resources.
Experience with Azure Kubernetes and enabling container-based packaging/deployment for Windows applications.
Strong backup/DR experience with validated restores and recovery planning for Windows services and application stacks.
Familiarity with enterprise storage concepts (SAN/NAS) and performance troubleshooting involving storage and network dependencies.

Responsibilities

Administer and support Windows Server infrastructure and core services: Active Directory, Group Policy (GPOs), DHCP, DNS, and Certificate Authorities/PKI, including troubleshooting of authentication, policy, and name/addressing issues.
Execute disciplined OS and platform lifecycle management: server builds, upgrades, patching, and vulnerability remediation using WSUS and/or MECM processes (including testing, staged rollout, maintenance windows, and rollback planning).
Implement and maintain secure configuration baselines aligned to DISA STIG/SCAP-equivalent guidance for Windows; document exceptions, remediation plans, and evidence as required by governance/audit processes.
Operate and tune monitoring/logging for Windows systems and key services; perform root-cause analysis for outages/performance degradations and coordinate resolution across infrastructure, security, and application teams.
Support Windows application platforms used by mission systems, including Microsoft IIS and Microsoft SQL Server; support Exchange where applicable. Provide upgrade planning and operational troubleshooting that protects uptime and data integrity.
Support VMware vSphere–hosted Windows environments: provisioning, guest lifecycle operations, performance triage, and coordination with storage and network teams (including SAN/NAS-backed storage use cases where applicable).
Own backup/restore readiness for assigned platforms and services: backup configuration validation, periodic restore tests, and participation in disaster recovery exercises.
Build automation and operational tooling using PowerShell (and other approved tooling) to reduce manual effort, increase repeatability, and improve auditability.
Work with and support developers: maintain dependable Dev/Test/Prod environments; support release windows; troubleshoot environment issues impacting deployments, and improve runbooks and standard deployment patterns so teams can deploy changes safely.
Support modernization of both COTS and homegrown applications by helping standardize configurations and dependencies, improving deployment repeatability, and enabling Windows containers where they fit the workload.
Support hybrid Azure integrations by performing enterprise application registrations and service principals, Azure Virtual Desktop deployments, Intune policy/app delivery, resource bridges, and on prem integration patterns as assigned.