Senior On-Prem Systems Engineer - Active Directory & Windows Infrastructure - REMOTE (W2 ONLY)
Chandra Technologies, Inc
Job Description Only W2 resumes are accepted Work Location: Role is 100% remote Candidate location: Candidate must currently reside in Eastern Time Zone. Key Responsibilities Execute the Active Directory, Group Policy, and permissions work backlog: GPO...
Job description
Required Skills & Experience
5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting. 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment. 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation. 3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting. 5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning. Experience with documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups. Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.
Preferred / Nice-to-Have
Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms. Endpoint patch management experience, including third-party application and Windows OS patching. Third-party application packaging and deployment automation, including application bundles (such as PDQ). PKI and AD Certificate Services operations.
Success Metrics / Deliverables
Success is assessed against metrics established with the Manager and tracked in Azure DevOps, including AD/GPO backlog reduction, CIS items implemented, and script and documentation coverage. AD/GPO backlog reduced and tracked in Azure DevOps. CIS items implemented per the Senior's direction, with before and after state recorded. Core administrative and remediation tasks covered by tested, documented PowerShell, with a baseline script library in Azure DevOps. All work product, including scripts, code, and documentation, stored in Azure DevOps as property of the branch, with no work held locally or in personal storage. Tested coverage on AD/GPO and PowerShell-based processes, so that more than one person can run and support them. SOPs for recurring AD/GPO and hardening tasks written and reviewed by the Senior.