Senior Windows System Administrator

Job Description

Senior Windows System Administrator Date Available: 1 April 2024 # openings: 2 Location: Patrick SFB, FL S2Technologies is seeking a skilled Senior Windows System Administrator to support AFTAC and sustain/enhance the 709th Cyber Support Squadron's capabilities to provide cyberspace mission assurance for AFTAC's global enterprise. Job Responsibilities: Document and present criteria and specifications for system modification and maintain equipment Support network tests to validate interoperability of changes on the operational network. Address and provide mitigation plan on CCRI findings. Maintain CCRI patching compliance score of 2.5 or below on a weekly basis. Perform Microsoft Server installations and creation of Virtual Machines (VMs) with the latest DISA STIGs as a baseline. Optimize virtualization performance using virtualization software such as VMware and Windows tools, and recommend corrective actions to any real and perceived performance problems. Collaborate with team members to derive a collectively agreed upon course of action while informing the AFTAC team lead. Adjust all performance settings of individual virtualization server, virtualized hosts, software, data replications, snapshots, and backup configurations in order to optimize virtualization performance. Maintain virtualization by the daily monitoring and reporting of any hardware or software faults. Address virtualization reporting by opening internal service tickets and remediate faults that are locally fixable. Report virtualization fault trends to the AFTAC team lead. Provide technical support for bare metal and Microsoft Windows servers and VDI. Ensure Windows server instances are compliant with all applicable DoD and AF policies for hardware/software configuration and approval requirements, to ensure sustainability and availability throughout the lifecycle of the system/software. Meet the following certification and accreditation standards: ICD 503 - IC Info Tech Systems Security Risk Management, and NIST 800-53, Security and Privacy Controls for Federal Information Systems and Organizations. Performs Windows Server installation, configuration, and administration through current release and creations of Virtual Machines (VMs). Perform server/database patching and bug fixes via Microsoft Endpoint Configuration Manager (MECM) and Windows Server Update Services (WSUS). Monitor, plan, and coordinate the distribution of client/server software and service packs via scheduled outages. Perform administrative tasks in Active Directory and Directory Resource Administrator (DRA) such as creating user accounts, adding users to security groups, adding workstations and servers to Organization Units (OUs), creating distribution groups, and creation of OUs. Carry out maintenance and configuration of New Technology File System (NTFS) permissions Access Control List (ACLs), share permissions, and verification on file server shares. Execute system backups and verification of data integrity with backup Client and VMWare snapshots. Perform data migrations (e.g. using tools like robocopy). Support to server and data migrations. Perform print server management by configuring 32 and 64-bit printer drivers for queue creation, Management Frame Protection (MFP) settings for emailing and scanning, port configuration, and Dynamic Host Configuration Protocol (DHCP) reservations. Perform Console management - observation and monitoring of components and services using metrics/analysis of event logs (e.g. with tools such as Resource Monitor/Task Manager). Manage job scheduling/automation - routine jobs and knowledge of scripting. Perform audit log monitoring of all systems via log puller script or other technologies and verification to ensure logs are pulling correctly. Manage and maintain Patch Management software: Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager (MECM). Perform troubleshooting with upstream servers and/or site management aspects of boundaries, component configuration, Structured Query Language (SQL) tasks, and health of site status for Distribution Points and Management Points. Execute tasks with print, anti-virus, file, and application servers, migrate printers to new print server; configure antivirus policies, client and version upgrades; setup/configure file shares in a failover cluster, and modify ACL structure; configure application dependencies such as Internet Information Services (IIS), .NET Framework, etc. for certain application servers. Provide support to the IT manager in developing and coordinating future IT infrastructure replacement plans and shall include hardware tech refreshes and software upgrades. Oversee network and server configuration maintenance and management with proper continuity on day-to-day tasks. Coordinate large-scale projects such as the movement of a data storage, physicalto-virtual (P2V) server conversions, migrations and Domain Controller configuration changes. Design, implement, and perform Active Directory Organization Units structure, Security Group structure (group nesting), delegate control of OUs, raise domain functional level, run Lightweight Directory Access Protocol (LDAP) queries and command-line tools dsquery, dsget and dsmod. Perform Terminal Services/Remote Desktop Services and tasks such as adding roles in Windows Server (Remote Desktop Session Host, Remote Desktop Services), configure ACLs, add required Group Policy changes, obtain self-signed Secure Sockets Layer (SSL) certificates, and configure components for RemoteApp Manager access, monitoring sessions, applying Citrix licensing settings, publishing applications, and control application incidents not relating to user's profiles. Execute Domain Controller administration and maintenance to include identifying and transferring Flexible Single Master Operation (FSMO) roles and use Active Directory Service Interfaces (ADSI) for attribute changes, ensure the proper assignment and configuration of operations master roles, perform regular backups of the directory database, manage domain and domain controller security policies, and set application-specific attributes for Active Directory-enabled and -integrated applications, such as Microsoft Exchange. Perform daily tasks with Recovery Manager for Active Directory (RMAD). Perform complex Windows based issue resolution, correlation and root cause analysis on recurring issues and analytics for trend analysis. Perform Windows based proactive space and growth management, HA and scalability improvements and strategy, backup and recovery improvements and strategy, and clustering and publication improvements and strategy Evaluate Windows based vendor submissions for compliance with the customer's specifications on technical solutions. Evaluate service-level contracts for IT infrastructure such as server hardware or software licensing. Experience: 8+ years of relevant Windows System Administration experience Education: None Certifications: IAT Level 2 Certification Computer Environment Certification (i.e., MCSA, MCSE, MCTS, etc.) Security Clearance: Active TS with SCI eligibility

#J-18808-Ljbffr