Windows Server Administrator

Leidos

1d•Remote

About The Position

Leidos has an opening for a Senior Windows Server Systems Administrator to support the ESA V program. ESA V is an IT Services program supporting several customers within the Department of Justice. The program provides a range of IT services, including help desk, deskside support, Windows engineering and maintenance, managed print services, ITSM, Account Management Services, Cybersecurity, Cloud technologies and other IT services. We need you to participate in fostering a DevOps culture and building strong cross functional collaboration with all areas of development, product, and QA in a dynamic and fast paced environment supporting the development of a data pipeline and machine learning services. The individual selected for this position will be a member of the ESA V engineering team and the primary work location in Washington, DC and the work will be performed remotely. Some travel may be required based on the program needs and requirements. Excellent hands-on knowledge of Windows enterprise management technologies is required for this position. You will work closely with the Infrastructure Engineering Manager on the following key tasks: Configure and troubleshoot Windows Server operating system in support of Active Directory, DNS and Certificate Authorities. Demonstrate extensive understanding of Active Directory systems and be able to manage and maintain them Demonstrate extensive understanding of DNS, Certificate Authority, Certificate Management and Authentication Services – ADFS, SAML, SSO, OKTA Applying STIG and VPR adjustments as required Manage the certificate environment to ensure certificates are issued on time and installed with no outage Develop scripts to monitor and check health of Active Directory, DNS and Certificate Authorities. Design, develop, and support scalable, redundant infrastructure to include physical, virtualized and cloud environments Install, configure and manage a windows-based certificate authority sever Install, configure and maintain group management policies including role-based management Set up administrator and service accounts, maintain system documentation, tune system performance, install system wide software Apply NIST, DISA security controls, security hardening changes based on best practice Validate and implement critical system patches, and allocate directory storage space Improve existing infrastructure to incorporate latest technology best practices and cross application integrations Day-to-day collaboration with engineering teams and system owners, to influence design, and architect solutions in multi-tiered environments Manage individual project priorities, deliverables, and deadlines Produce clear documentation for delivered solutions

Requirements

Excellent hands-on knowledge of Windows enterprise management technologies.
BS in Computer Science, Systems Engineering, or related technical field or equivalent experience with at least 8+ years in systems engineering or administration (6+ years with a MS/MIS Degree).
Experience orchestrating workflows to execute at predefined times, including workflows that have data dependencies.
Proficiency in DevOps tools.
Proficiency in scripting languages including PowerShell.
5 years of experience with Directory services (Microsoft Active Directory, Entra ID/Azure AD), Certificate Administration and DNS.
4 years’ experience providing Tier II & III Windows support for Windows OS.
3 years of Experience with ADFS, OKTA or other Authentication services.
Experience managing certificates and certificate authorities like Microsoft, Digicert, Entrust/Sectigo and SSL.com.
Ability to work well with people from many different disciplines with varying degrees of technical experience.
Ability to work well without constant supervision.
Ability to express complex technical concepts effectively, both verbally and in writing.

Nice To Haves

Experience establishing large computer clusters.
Experience in continuous configuration automation (CCA) methods for providing a flexible, programmatic platform for deploying and managing the configuration of infrastructure and application resources.
Experience in cloud-based technologies Entra, AWS.
Integrating windows services (AD, ADFS) in a cloud architecture.
Networking (TCP/UDP, ICMP, and DNS, etc.), infrastructure services, and security experience.
ComTIA Security+.
Microsoft Certified Professional.
3 years of patching servers, backups, permission management.
4 years of experience in an operations role.
Government contracting experience, particularly with the DOJ.
DOJ or DOD Clearance.

Responsibilities

Configure and troubleshoot Windows Server operating system in support of Active Directory, DNS and Certificate Authorities.
Manage and maintain Active Directory systems.
Manage and maintain DNS, Certificate Authority, Certificate Management and Authentication Services – ADFS, SAML, SSO, OKTA.
Apply STIG and VPR adjustments as required.
Manage the certificate environment to ensure certificates are issued on time and installed with no outage.
Develop scripts to monitor and check health of Active Directory, DNS and Certificate Authorities.
Design, develop, and support scalable, redundant infrastructure to include physical, virtualized and cloud environments.
Install, configure and manage a windows-based certificate authority server.
Install, configure and maintain group management policies including role-based management.
Set up administrator and service accounts.
Maintain system documentation.
Tune system performance.
Install system wide software.
Apply NIST, DISA security controls, security hardening changes based on best practice.
Validate and implement critical system patches.
Allocate directory storage space.
Improve existing infrastructure to incorporate latest technology best practices and cross application integrations.
Collaborate with engineering teams and system owners to influence design and architect solutions in multi-tiered environments.
Manage individual project priorities, deliverables, and deadlines.
Produce clear documentation for delivered solutions.