Tier 3 Level Systems Administration Support Services

Tier 3 Systems Administrator

Location: San Antonio, TX

Clearance Required: Public Trust (ADP/IT-II); Tier 3 Investigation (NACLC)

Program Overview

The Defense Health Agency’s Domain and Directory Services Branch (DDSB) supports the global IT infrastructure that underpins medical readiness for the Army, Navy, and Air Force. This includes sustaining both on-premise and cloud-based environments serving over 200,000 users and 250,000 end-user devices across 250 sites worldwide. DDSB manages core identity, access, and directory services essential to mission-critical healthcare delivery within the Military Health System. Team members contribute to a broad range of IT operations and modernization efforts that directly impact service members, veterans, and their families. This is a high-impact environment supporting both peacetime healthcare and wartime readiness across the DoD medical enterprise.

Summary

The Tier 3 Systems Administrator provides senior-level enterprise administration and engineering support across hybrid cloud and on-premise environments within the Military Health System. This role is responsible for maintaining, optimizing, and troubleshooting enterprise-scale services, including Active Directory (AD), Microsoft Entra ID (Azure AD), enterprise monitoring systems, and encrypted data platforms. The administrator ensures continuity of service, compliance, and security for critical directory, authentication, and communication tools throughout the enterprise.

Key Responsibilities

• Manage and sustain enterprise services such as Active Directory, Microsoft Entra ID, System Center Operations Manager (SCOM), and the Quest tool suite to ensure availability and scalability across the DHA enterprise.
• Implement schema extensions, GPO administration, domain trust management, and OU configuration using Quest and related tools.
• Provide advanced support and optimization for DHA’s MED365 Azure Cloud environment, including eDiscovery and Exchange Online.
• Ensure authentication, synchronization, user provisioning, and encryption compliance across AD and cloud-based systems.
• Monitor data encryption services; create, upgrade, and deploy encryption clients, and ensure systems comply with DHA/DoD encryption standards.
• Customize enterprise monitoring rules and produce performance metrics (uptime, downtime) using SCOM and related monitoring platforms.
• Develop and test disaster recovery procedures; ensure STIG compliance for all monitoring infrastructure.
• Support PKI/PKE integration and compliance per DoDI 8520.02.
• Manage enterprise Exchange Online services (mail flow, distribution lists, shared mailboxes, migrations, and uptime).
• Administer eDiscovery functions including data collection, analysis, and response to legal/regulatory requests; handle incidents related to data leakage, phishing, and unauthorized exposure.

Preferred Tools & Technologies

• Microsoft SCOM, Entra ID, AD, Quest Tools, Exchange Online, eDiscovery, Azure Cloud
• PowerShell, Windows Server OS, Microsoft 365 / MED365, Encryption platforms (e.g., BitLocker)

Education & Certification Requirements (per DoD 8140 Qualification Matrices)

1) Microsoft Certified: Azure Administrator Associate or Windows Server Hybrid Administrator Associate

2) Any of the following...

• Academic Education: Bachelor’s degree in information technology, Cybersecurity, or a related discipline.
• OR Baseline: Cloud+, or GICSP, or SSCP, or Security+ or GSEC, or GLSC, or CISSP
• OR DoD/Military Training: F07DZZ1 or M03385G or M10395B or M223854 or A-150-0045 (now W-250-0750) or A-531-0021 or W-250-0750 or A-150-3400 now W-250-0750 or A-150-1980 or A-150-1202 or A-150-1203 or A-150-1250 or A-150-1855 / A-150-1940 or A-113-0205 or A-113-0175 or A-113-0018 or A-113-0382 or A-113-0027 or A-113-0383 or A-113-0175 or A-113-0202 or A-113-0233 or DISA-US1379