On-Prem Systems Engineer

Required Skills

• 5+ years of experience with Active Directory: Domain services, replication, delegation, permissions, and domain controller troubleshooting.
• 5+ years of experience with Group Policy: Design, scoping, filtering, troubleshooting, and change control in a large environment.
• 5+ years of experience with PowerShell: Modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.
• 3+ years of experience implementing CIS benchmarks (or equivalent hardening baselines) on Windows endpoints through GPO and scripting.
• 5+ years of experience with Windows Server administration and lifecycle management across large server environments, including building, patching, upgrading, and decommissioning servers.
• Experience maintaining SOPs, runbooks, and change records as work is performed, rather than preparing documentation afterward.
• Experience working with tracked work queues (such as Azure DevOps Boards), service requests, and formal change control processes.

Preferred Skills

• Experience with task automation and orchestration beyond PowerShell, including scheduled workflows and automation platforms.
• Endpoint patch management experience, including Windows OS and third-party application patching.
• Experience with third-party application packaging and deployment automation, including PDQ or similar tools.
• Experience with Public Key Infrastructure (PKI) and Active Directory Certificate Services (AD CS).

Key Responsibilities

• Manage Active Directory, Group Policy Objects (GPOs), permissions, delegation, and domain controller troubleshooting.
• Implement CIS security benchmarks and Windows endpoint hardening through GPO and PowerShell scripting under the Senior Server Administrator's direction.
• Develop, test, and maintain PowerShell scripts for automation, auditing, remediation, and reporting.
• Manage enterprise Windows Server infrastructure, including provisioning, configuration, patching, upgrades, troubleshooting, and decommissioning.
• Track assigned work, service requests, and change controls in Azure DevOps and the Service Management tool.
• Maintain technical documentation, scripts, SOPs, and runbooks in Azure DevOps throughout project execution.
• Collaborate with the Senior Server Administrator and Server Operations Team to improve operational efficiency and share technical knowledge.