System Administrator II

System Administrator II

AFINC III

The System Administrator II will support the operation, maintenance, and security of Microsoft Windows Server capabilities for the AFINC III environment. This role installs, configures, hardens, patches, and documents systems and associated tools, ensuring compliance with applicable DISA STIG requirements and local configuration standards.

• 5+ years experience with installs, tests, tunes, maintains, hardens, upgrades, patches, designs and documents supporting systems, utility programs, and monitoring tools for physical and virtual Microsoft Windows Server servers on both classified and unclassified networks. Experience with system design, implementation, and support of core Windows server infrastructure/components in the environment, specifically;
  Active Directory, DNS, DHCP, WINS, Certificate Services, AD Federation Services, Key Management Services, Microsoft Endpoint Configuration Manager (MECM), and Windows Server Update Services (WSUS). Creates and manages capacity and trending reports of system operations. Analyzes system requirements and performance of hardware/software systems, and develops/recommends specific measures to increase the overall efficiency of these systems. Perform day to day troubleshooting and maintenance of Microsoft Windows Server and related servers.
  
  Perform annual DISA STIGs compliance checks on all servers and installed software. Notify appropriate Information Technical Equipment Custodian (ITEC) or Property Custodian (PC), in writing, within 4 hours for all accountable item moves. Neatly bundle and conceal all excess system or peripheral cabling after each installation or repair.

• Hands‑on experience administering Microsoft Windows Server in physical and virtual environments on classified and unclassified networks.
• Working knowledge of core Windows infrastructure services (Active Directory, DNS, DHCP, certificate services, and related components).
• Ability to perform day‑to‑day troubleshooting, maintenance, patching, and performance tuning for Windows Server systems.
• Ability to conduct annual DISA STIG compliance checks and remediate findings.
• Experience producing capacity and trending reports and using data to improve system efficiency.
• Ability to obtain and maintain a Gunter – Secret security clearance.
• Maintain DoD 8140 IAT-II baseline certification (one of: CCNA‑Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP).

• Experience supporting mission critical environments with customer‑focused service delivery.
• Familiarity with ITIL‑based incident, problem, and change management practices.
• Strong verbal and written communication skills and ability to work effectively in a team environment.

High School diploma or GED

Minimum Professional Certification:

• Microsoft 365 Certified:
  Endpoint Administrator Associate
• Microsoft Certified:
  Information Security Administrator Associate

Preferred Professional Certification:

• Microsoft 365 Certified:
  Enterprise Administrator Expert
• Microsoft 365 Certified:
  Administrator Expert
• Microsoft Certified:
  Identity and Access Administrator Associate
• Microsoft Certified:
  Windows Server Hybrid Administrator Associate (Server Admin)

• Work location:
  
  Montgomery, AL [Gunter-Annex].
• Must be able to work onsite at government or contractor facilities as mission needs dictate.
• Must be able to lift and move IT equipment (e.g., desktops, monitors, printers) as required for installation or repair.

• Prolonged periods of sitting at a desk and working on a computer.
• Periodic standing, bending, and lifting during equipment installs, repairs, and moves.