Information Systems Architect

Windows Server & Active Directory Engineer

Position Summary

We are seeking an experienced Windows Server & Active Directory Engineer to administer and maintain a large Windows environment. The role focuses on Active Directory, Group Policy, PowerShell automation, Windows Server lifecycle management, and implementation of security hardening baselines.

The ideal candidate will combine strong troubleshooting skills with disciplined documentation, work tracking, and adherence to formal service request and change control processes.

Key Responsibilities

• Administer Active Directory domain services, including replication, delegation, permissions, and domain controllers.
• Investigate and resolve Active Directory and domain controller issues.
• Design, implement, maintain, and troubleshoot Group Policy Objects (GPOs), including scoping and filtering.
• Develop and maintain PowerShell scripts for Active Directory, Group Policy, and server administration.
• Implement reliable automation using modules, error handling, remote execution, and scheduled or unattended scripts.
• Apply CIS benchmarks or equivalent Windows endpoint hardening baselines through GPOs and scripting.
• Manage Windows Server lifecycle activities, including builds, patching, upgrades, and decommissioning.
• Maintain SOPs, runbooks, and change records as work progresses.
• Manage assigned tasks through a tracked work queue, such as Azure DevOps Boards.
• Execute work within established service request and change control processes.

Required Skills & Experience

• 5+ years of experience with Active Directory domain services, replication, delegation, permissions, and domain controller troubleshooting.
• 5+ years of experience designing, scoping, filtering, troubleshooting, and managing Group Policy changes in a large environment.
• 5+ years of PowerShell experience, including modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.
• 3+ years of experience implementing CIS benchmarks or equivalent hardening baselines on Windows endpoints using GPOs and scripting.
• 5+ years of Windows Server administration and lifecycle management across a large server estate.
• Experience maintaining accurate SOPs, runbooks, and change records during execution.
• Experience working from tracked work queues and following formal service request and change control processes.

Preferred Skills

• Experience with task automation and orchestration beyond PowerShell, including scheduled workflows and automation platforms.
• Experience with endpoint patch management for Windows operating systems and third-party applications.
• Experience with third-party application packaging and automated deployment, including application bundles using tools such as PDQ.
• Experience operating and supporting Public Key Infrastructure (PKI) and Active Directory Certificate Services (AD CS).