Primary Skills: Active Directory (domain services, replication, delegation, permissions, domain controller troubleshooting), Group Policy (design, scoping, filtering, troubleshooting, change control), PowerShell (modules, error handling, remote execution, scheduled/unattended scripts, AD/GPO automation), CIS benchmarks implementation via GPO and scripting, Windows Server administration and lifecycle management (build, patching, upgrading, decommissioning), Azure DevOps, service request and change control processes, SOP and runbook documentation. The role executes the Active Directory, Group Policy, and permissions work backlog, implements CIS baselines through GPO and scripted remediation, designs and maintains PowerShell for administration and automation, and manages the Windows Server lifecycle at enterprise scale.