Job Description: Senior On-Prem Systems Engineer(14260)
Location: Remote
Client: Sosc
Position Overview
We are seeking an experienced Senior On-Prem Systems Engineer to manage and support enterprise Windows Server environments, Active Directory (AD), Group Policy Objects (GPO), PowerShell automation, and CIS security hardening. The ideal candidate will have strong hands-on experience in Windows infrastructure administration, security baseline implementation, scripting, and enterprise IT operations.
The engineer will work closely with the Senior Server Administrator and Server Operations Team Manager to execute infrastructure changes, automate repetitive tasks, reduce operational backlogs, and maintain accurate technical documentation.
Key Responsibilities
- Administer and maintain Active Directory, including domain services, replication, delegation, permissions, and domain controller troubleshooting.
- Create, modify, test, troubleshoot, and retire Group Policy Objects (GPOs) in large enterprise environments.
- Implement CIS benchmarks and Windows security hardening baselines using Group Policy and PowerShell scripts.
- Develop, maintain, and optimize PowerShell scripts for system administration, auditing, reporting, remediation, and automation.
- Identify repetitive manual processes and automate them using tested, reusable, and well-documented scripts.
- Manage the Windows Server lifecycle, including server builds, configuration, patching, upgrades, troubleshooting, and decommissioning.
- Execute Active Directory and Group Policy changes in accordance with established change management procedures.
- Implement security remediation activities based on technical analysis and direction from the Senior Server Administrator.
- Track and update work items, technical deliverables, and project progress in Azure DevOps.
- Process service requests and change controls through the designated IT Service Management (ITSM) tool.
- Maintain technical documentation, including Standard Operating Procedures (SOPs), runbooks, change records, and GPO documentation.
- Store all scripts, code, documentation, and other work products in Azure DevOps repositories.
- Collaborate with the Senior Server Administrator to share knowledge of Active Directory, Group Policy, and CIS security hardening.
- Support additional on-premises infrastructure operations as assigned by the Server Operations Team Manager.
Required Skills and Qualifications
- 5+ years of experience administering Active Directory, including domain services, replication, delegation, permissions, and domain controller troubleshooting.
- 5+ years of experience with Group Policy Objects (GPO), including design, scoping, security filtering, troubleshooting, and change management.
- 5+ years of experience with PowerShell scripting, including modules, error handling, remote execution, scheduled tasks, unattended scripts, and AD/GPO automation.
- 3+ years of experience implementing CIS benchmarks or equivalent security hardening baselines for Windows endpoints using GPO and scripting.
- 5+ years of experience with Windows Server administration and lifecycle management in large enterprise environments.
- Strong experience with Windows Server builds, configuration, patch management, upgrades, troubleshooting, and decommissioning.
- Experience automating administrative and operational tasks through PowerShell.
- Experience working with Azure DevOps boards or similar work-tracking systems.
- Familiarity with IT service request management, formal change control, and operational workflows.
- Experience maintaining SOPs, runbooks, technical documentation, and change records as work is performed.
- Strong troubleshooting, analytical, documentation, and collaboration skills.
Preferred Qualifications
- Experience with task automation and orchestration platforms beyond PowerShell.
- Experience with Windows OS and third-party application patch management.
- Experience with third-party application packaging and deployment automation tools, such as PDQ Deploy.
- Knowledge of Public Key Infrastructure (PKI) and Active Directory Certificate Services (AD CS).
- Experience developing reusable PowerShell script libraries and automated compliance reporting.
- Familiarity with enterprise security standards and infrastructure hardening practices.
Key Deliverables and Success Metrics
- Reduce Active Directory and Group Policy backlogs and track progress in Azure DevOps.
- Implement assigned CIS benchmark remediation items and document before-and-after configurations.
- Develop and maintain a tested PowerShell script library for administration, remediation, auditing, and reporting.
- Ensure all scripts, code, SOPs, runbooks, and technical documentation are stored in Azure DevOps.
- Maintain accurate work items, service requests, and change records throughout the implementation process.
- Establish repeatable and documented AD/GPO processes that can be supported by multiple team members.
- Develop and maintain SOPs for recurring Active Directory, Group Policy, and security hardening activities.
- Improve operational efficiency by reducing manual effort through automation and standardization.
