Systems Administrator – Endpoint & Server Infrastructure

Company Overview

At 4A Consulting, we turn complexity into opportunity. Founded in 2014 and headquartered in Baltimore, MD, we are a women-owned, boutique consulting firm specializing in delivering innovative, data-driven solutions to both the Federal Government and Fortune 500 clients. Our team blends deep industry knowledge with advanced technologies to design tailored strategies that drive measurable and sustainable outcomes. We pride ourselves on an agile, collaborative approach that helps organizations navigate challenges and seize emerging opportunities in a rapidly evolving digital landscape. At 4A, we don’t just deliver projects, we build trusted partnerships that empower our clients to lead with confidence in the digital age.

Position Overview

We are seeking an experiencedSystems Administrator – Endpoint & Server Infrastructureto support enterprise endpoint and server environments. This position is ideal for a hands-on systems administrator with strong experience managing Windows environments, enterprise patching, system upgrades, vulnerability remediation, and endpoint management technologies.

The Systems Administrator will be responsible for the ongoing administration, maintenance, patching, upgrading, and lifecycle management of enterprise laptops, workstations, and server infrastructure.
The successful candidate will help ensure systems remain secure, stable, compliant, and current by managing operating system and security updates, testing and deploying patches, troubleshooting deployment failures, coordinating maintenance activities, and maintaining accurate infrastructure documentation.
This role requires experience supporting large enterprise environments and the ability to perform production maintenance while minimizing disruption to business operations.

Key Responsibilities

Endpoint & Patch Management

• Manage enterprise patching and update activities across Windows and macOS endpoints and Windows/Linux server environments.
• Schedule, test, deploy, and monitor operating system patches, security updates, hotfixes, and feature updates.
• Configure and maintain centralized endpoint and patch management solutions such as Microsoft Intune, Microsoft SCCM/Configuration Manager, and Microsoft Azure Update Manager.
• Develop and maintain automated patching policies and deployment schedules.
• Monitor patch compliance and identify systems that have failed or missed required updates.
• Troubleshoot deployment failures and remediate problematic endpoints and servers.
• Support firmware, driver, and BIOS updates across enterprise endpoint devices.

Security & Vulnerability Remediation

• Monitor security and vulnerability management platforms, including Microsoft Defender, for vulnerabilities, critical CVEs, missing patches, and required remediation activities.
• Prioritize and coordinate remediation of critical and high-risk vulnerabilities.
• Work with security and infrastructure teams to ensure systems meet organizational security and patch compliance requirements.
• Validate successful remediation and maintain appropriate evidence and documentation.

Server Administration & Maintenance

• Administer and maintain enterprise Windows Server environments, including Windows Server 2016–2022/2025.
• Support patching, upgrades, configuration changes, and routine maintenance of server infrastructure.
• Coordinate maintenance windows and perform production upgrades during approved off-hours when required.
• Monitor server health and investigate system issues related to patches, upgrades, configuration changes, and operating system performance.
• Develop and execute rollback and recovery procedures when upgrades or patches cause system instability.

Testing & Change Management

• Establish and maintain controlled testing and staging processes for patches and system upgrades.
• Validate operating system, application, and infrastructure compatibility before production deployment.
• Conduct post-deployment validation to confirm system stability and successful installation.
• Document deployment plans, test results, identified issues, rollback procedures, and production outcomes.
• Coordinate planned changes with technical teams and business stakeholders to minimize operational disruption.

Infrastructure Lifecycle Management

• Support the complete lifecycle of enterprise laptops, workstations, and servers.
• Maintain accurate hardware and software inventory information.
• Track operating system versions, firmware levels, patch status, and infrastructure configurations.
• Identify systems approaching end-of-support or end-of-life and assist with upgrade or replacement planning.
• Maintain configuration, inventory, maintenance, and patch schedule documentation.

Required Qualifications

• Demonstrated experience administering enterprise endpoint and server environments.
• Proven experience executing enterprise patch deployments and operating system upgrade initiatives across 1,000+ endpoints and multi-server environments.
• Strong hands-on experience with Microsoft Intune.
• Strong experience with Microsoft SCCM / Microsoft Configuration Manager or comparable enterprise endpoint management platforms.
• Strong knowledge of Windows Server 2016, 2019, 2022, and/or 2025 environments.
• Experience troubleshooting failed patches, software deployments, operating system upgrades, and endpoint configuration issues.
• Understanding of enterprise vulnerability remediation and security patching processes.
• Experience developing and executing testing, deployment, rollback, and recovery procedures.
• Ability to analyze deployment logs and determine root causes of failed updates or system instability.
• Strong documentation, organizational, and problem-solving skills.
• Strong written and verbal communication skills with the ability to coordinate technical changes across multiple teams.
• Ability to support scheduled maintenance activities outside normal business hours when required.

Preferred Qualifications

• Experience with one or more of the following is highly desirable:
• Microsoft Azure Update Manager
• Microsoft Defender
• Windows Autopilot
• Microsoft Entra ID / Azure Active Directory
• PowerShell scripting and automation
• Windows Server administration
• Linux server patching and administration
• Enterprise vulnerability management
• Endpoint security and compliance management

Preferred Certifications

• One or more of the following certifications is preferred but not required:
• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Relevant Microsoft Windows Server / Azure certification
• CompTIA Security+
• CompTIA Server+
• Other relevant Microsoft, cloud, infrastructure, or cybersecurity certifications

Key Competencies

• The ideal candidate will demonstrate:
• Strong hands-on troubleshooting and root-cause analysis skills
• Ability to manage large-scale patching and upgrade activities
• Attention to detail in security-sensitive production environments
• Strong ownership and follow-through
• Ability to prioritize critical vulnerabilities and operational issues
• Effective communication with infrastructure, security, application, and business teams
• Ability to document technical work clearly and maintain accurate operational records
• Ability to work independently while collaborating effectively within a technical team

Why Join 4A 

• Be part of a mission-driven, women-owned consulting firm with a reputation for excellence.
• Work on high-impact projects across federal and commercial clients.
• Collaborate in an inclusive, growth-oriented culture where innovation is valued.
• Access career development programs, mentorship, and learning opportunities.
• Enjoy a comprehensive benefits package, flexible work options, and a focus on work-life balance.

Equal Opportunity Statement

• 4A Consulting is an Equal Opportunity Employer committed to an inclusive hiring process. Applicants requiring a reasonable accommodation due to a disability may contact . This email is intended solely for accommodation requests.
• Please note that 4A Consulting participates in the federal E-Verify program. Upon hire, we will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the US. 4A Consulting will only use E-Verify once you have accepted a job offer and completed the Form I-9.