Systems Administrator IV

Responsibilities

• Lead installation, configuration, hardening, and sustainment of on‑prem Windows systems, including Windows Server 2019/2022 and Windows 11, across multiple enclaves and classification levels in compliance with DISA STIGs and NIST 800-53.
• Architect, administer, and sustain Active Directory Domain Services, including domain and forest design, Domain Controller deployment and lifecycle management, replication, FSMO role management, backup and recovery, DNS, DHCP, time services, trust relationships, and cross‑domain integration.
• Architect, implement, and sustain Group Policy architecture and lifecycle management, including GPO design, testing, deployment, troubleshooting, enforcement of security baselines, workstation hardening, and user, computer, and OU design aligned with least‑privilege principles.
• Architect, operate, and sustain VMware vSphere and ESXi environments, including host lifecycle management, virtual networking, storage integration using NFS and/or vSAN, performance tuning, and fault recovery.
• Plan, integrate, and validate new systems and technologies in coordination with network, cybersecurity, and engineering teams while maintaining operational stability.
• Perform advanced system troubleshooting across operating systems, identity services, virtualization, and authentication layers in restricted or air‑gapped environments.
• Execute vulnerability management activities, including Nessus and SCAP scanning, analysis of findings, remediation, and validation of compliance.
• Serve as the technical subject matter expert for Windows and VMware platforms only during RMF and ATO activities, assessments, inspections, and audits by providing technical responses and evidence artifacts within the systems under their responsibility.
• Develop, maintain, and enforce system documentation, security baselines, architecture diagrams, SOPs, and recovery procedures.
• Design, implement, and maintain backup, restore, disaster recovery, and continuity of operations strategies for enterprise systems and directory services.
• Provide technical leadership, mentorship, and oversight to junior system administrators to ensure adherence to standards and timely issue resolution.
• Ensure proper marking, handling, storage, and protection of classified systems and data in accordance with DoD policy.
• Architect, build, customize, and sustain Windows 10/11/Server 2019/2022 deployment images using Microsoft Deployment Toolkit (MDT), including task sequence design, driver and application injection, unattended installations, post‑deployment hardening, and integration with DISA STIG baselines.
• Support up to 25% travel to deploy, maintain, and support systems at remote or customer sites in support of operational and mission requirements.

• BS with 8‑10, MS 6‑8, PhD 3‑5
• Must possess and maintain an Active DoD Secret clearance
• Expert‑level experience administering Active Directory, including Domain Controllers, DNS, Group Policy, trusts, and recovery operations.
• Strong hands‑on experience with Windows Server 2019/2022 and Windows 11 in domain‑joined environments.
• Proven experience operating VMware vSphere and ESXi in production environments.
• Strong understanding of system hardening, STIG implementation, and vulnerability remediation.
• Experience supporting RMF and ATO processes and interacting with auditors and assessors.
• Ability to troubleshoot complex, multi‑layered system issues in restricted or air‑gapped environments.
• Active IAT Level II certification (Security +, etc.)

We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.