[Hiring] On-Prem Systems Engineer @Information Resource group

Role Description

The On-Prem Systems Engineer will be responsible for executing the Active Directory, Group Policy, and permissions work backlog, including:

• GPO creation, modification, testing, and retirement, plus delegation and access changes.
• Implementing CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction.
• Designing, writing, and maintaining PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.
• Identifying repetitive operational tasks and automating them, replacing manual procedures with tested, documented scripts.
• Managing the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.
• Receiving work as assigned and prioritized by the Server Operations Team Manager.
• Logging, updating, and tracking all work items in Azure DevOps.
• Working service requests and change controls through the Service Management tool, following the team's change process.
• Storing all work product and documentation in Azure DevOps as work is performed.
• Cross-skilling with the Senior Server Administrator to share AD/GPO and CIS knowledge.
• Taking on additional on-premises duties as team responsibilities are realigned.

Qualifications

• 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.
• 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment.
• 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.
• 3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.
• 5+ years of experience with Windows Server administration and lifecycle management across a large server estate.
• Experience with documenting while working: SOPs, runbooks, and change records kept current.
• Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.

Requirements

• Candidate must currently reside in Eastern Time Zone.
• 7 Year Standard Background Check & Credit History Check.
• E-Verify.

Preferred Skills

• Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms.
• Endpoint patch management experience, including third-party application and Windows OS patching.
• Third-party application packaging and deployment automation, including application bundles (such as PDQ).
• PKI and AD Certificate Services operations.