We are looking for Information Systems Architect - Advanced - On-Prem Systems Engineer (Min 5+yrs Exp) REMOTE (Webcam Interview)
POSITION DESCRIPTION
DIRECT CLIENT Position
Number of positions: 1
Length: 12Months +
Work Address: Columbia, SC 29201
Immediate Interviews Webcam Interview
looking for an Information Systems Architect - Advanced (On-Prem Systems Engineer)
We are experiencing significant growth in our platform due to modernization efforts.
Work Location: Role is 100% remote
Candidate location: Candidate must currently reside in Eastern Time Zone.
Senior On-Prem Systems Engineer
Reports to: Server Operations Team Manager Peer to the Senior Server Administrator
Key Responsibilities
-
Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.
-
Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction. The Senior reviews and orchestrates; this role implements.
-
Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.
-
Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.
-
Manage the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.
-
Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager's oversight.
-
Log, update, and track all work items in Azure DevOps.
-
Work service requests and change controls through the Service Management tool, following the team's change process.
-
Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.
-
Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.
-
Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.
Required Skills & Experience
-
5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.
-
5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment.
-
5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.
-
3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.
-
5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning.
-
Experience with documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups.
-
Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.
Preferred / Nice-to-Have
-
Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms.
-
Endpoint patch management experience, including third-party application and Windows OS patching.
-
Third-party application packaging and deployment automation, including application bundles (such as PDQ).
-
PKI and AD Certificate Services operations.
Success Metrics / Deliverables
-
Success is assessed against metrics established with the Manager and tracked in Azure DevOps, including AD/GPO backlog reduction, CIS items implemented, and script and documentation coverage.
-
AD/GPO backlog reduced and tracked in Azure DevOps.
-
CIS items implemented per the Senior's direction, with before and after state recorded.
-
Core administrative and remediation tasks covered by tested, documented PowerShell, with a baseline script library in Azure DevOps.
-
All work product, including scripts, code, and documentation, stored in Azure DevOps as property of the branch, with no work held locally or in personal storage.
-
Tested coverage on AD/GPO and PowerShell-based processes, so that more than one person can run and support them.
-
SOPs for recurring AD/GPO and hardening tasks written and reviewed by the Senior.
Required/Desired Skills
Candidates must have ALL the "Required" skills in order to be considered for the position. "Desired" or "Highly Desired" skills are a PLUS but may NOT be required.
Skill Matrix
| Experience with Business workflow processes | Required / Desired | Amount of Experience | Years of Expe Years rience |
| 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting. | Required | 5 | Years |
| 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment. | Required | | Years |
| 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation. | Required | 5 | Years |
| 3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting. | Required | 3 | Years |
| 5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning. | Required | 5 | Years |
| Experience with documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups. | Required | | |
| Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes. | Required | | |
| Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms. | Preferred | | |
| Endpoint patch management experience, including third-party application and Windows OS patching. | Preferred | | |
| Third-party application packaging and deployment automation, including application bundles (such as PDQ). | Preferred | | |
| PKI and AD Certificate Services operations. | Preferred | | |
