This is a remote position.

Senior Windows Systems Engineer

Project Overview

The State of South Carolina is looking for an Information Systems Architect ? Advanced (On-Prem Systems Engineer). Reports to: Server Operations Team Manager Peer to the Senior Server Administrator. They are experiencing significant growth in the platform due to modernization efforts.

Duties/Responsibilities:

Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.

Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator?s analysis and direction. The Senior reviews and orchestrates; this role implements.

Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.

Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.

Manage the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.

Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager?s oversight.

Log, update, and track all work items in Azure DevOps.

Work service requests and change controls through the Service Management tool, following the team?s change process.

Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.

Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.

Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.

Success Metrics / Deliverables:

Success is assessed against metrics established with the Manager and tracked in Azure DevOps, including AD/GPO backlog reduction, CIS items implemented, and script and documentation coverage.

AD/GPO backlog reduced and tracked in Azure DevOps.

CIS items implemented per the Senior?s direction, with before and after state recorded.

Core administrative and remediation tasks covered by tested, documented PowerShell, with a baseline script library in Azure DevOps.

All work product, including scripts, code, and documentation, stored in Azure DevOps as property of the branch, with no work held locally or in personal storage.

Tested coverage on AD/GPO and PowerShell-based processes, so that more than one person can run and support them.

SOPs for recurring AD/GPO and hardening tasks written and reviewed by the Senior.

Requirements

Benefits