Systems Administrator IV

Job Summary

Opening for a Senior Windows Server Systems Administrator to support the ESA V program. ESA V is an IT Services program supporting several customers within the Department of Justice. The program provides a range of IT services, including help desk, deskside support, Windows engineering and maintenance, managed print services, ITSM, Account Management Services, Cybersecurity, Cloud technologies, and other IT services. This role involves fostering a DevOps culture and building strong cross-functional collaboration with all areas of development, product, and QA in a dynamic and fast-paced environment.

Responsibilities

• Configure and troubleshoot Windows Server operating system in support of Active Directory, DNS, and Certificate Authorities.
• Manage and maintain Active Directory systems.
• Manage DNS, Certificate Authority, Certificate Management, and Authentication Services such as ADFS, SAML, SSO, OKTA.
• Apply STIG and VPR adjustments as required.
• Manage the certificate environment to ensure timely issuance and installation without outages.
• Develop scripts to monitor and check the health of Active Directory, DNS, and Certificate Authorities.
• Design, develop, and support scalable, redundant infrastructure, including physical, virtualized, and cloud environments.
• Install, configure, and manage a Windows-based certificate authority server.
• Install, configure, and maintain group management policies, including role-based management.
• Set up administrator and service accounts, maintain system documentation, tune system performance, install system-wide software.
• Apply NIST, DISA security controls, and security hardening changes based on best practices.
• Validate and implement critical system patches, and allocate directory storage space.
• Improve existing infrastructure to incorporate the latest technology best practices and cross-application integrations.
• Collaborate with engineering teams and system owners to influence design and architect solutions in multi-tiered environments.
• Manage individual project priorities, deliverables, and deadlines.
• Produce clear documentation for delivered solutions.

Qualifications

Required

• Bachelor’s degree in Computer Science, Systems Engineering, or a related technical field, or equivalent experience with at least 8 years in systems engineering or administration (6 years with a MS/MIS Degree).
• Experience orchestrating workflows with data dependencies.
• Proficiency in DevOps tools and scripting languages, including PowerShell.
• 5 years of experience with Directory services (Microsoft Active Directory, Entra ID/Azure AD), Certificate Administration, and DNS.
• 4 years of experience providing Tier II & III Windows support for Windows OS.
• 3 years of experience with ADFS, OKTA, or other Authentication services.
• Experience managing certificates and certificate authorities like Microsoft, Digicert, Entrust/Sectigo, and SSL.com.
• Ability to work well with people from various disciplines with varying degrees of technical experience.
• Ability to work independently without constant supervision.
• Ability to express complex technical concepts effectively, both verbally and in writing.

Desired

• Experience establishing large computer clusters and continuous configuration automation (CCA) methods.
• Experience in cloud-based technologies such as Entra and AWS, integrating Windows services (AD, ADFS) in a cloud architecture.
• Networking (TCP/UDP, ICMP, DNS), infrastructure services, and security experience.
• CompTIA Security+ certification.
• Microsoft Certified Professional.
• 3 years of experience in patching servers, backups, and permission management.
• 4 years of experience in an operations role.
• Government contracting experience, particularly with the DOJ.
• DOJ or DOD Clearance.

Work Environment and Schedule

This is a remote position with a primary work location in Washington, DC. Some travel may be required based on program needs. The typical workday is from 8 AM to 4 PM ET, with some on-call requirements. This role involves participating in various daily meetings and supporting ATF Support environment management (DNS/Active Directory).

Additional Information

This position is to replace a retiree, and there will be cross-training available. The candidate must have their Public Trust in place to start, as ATF takes longer than most. The maximum salary upon conversion is possible at $140K. US Citizenship is required, and the candidate selected will be subject to a Government Public Trust security investigation and must meet eligibility requirements for access to the customer’s information. A current clearance is not required, but the individual cannot start the assignment until the customer grants the required security clearance.