Windows Server Administrator

Leidos has an opening for a Senior Windows Server Systems Administrator to support the ESA V program. ESA V is an IT Services program supporting several customers within the Department of Justice. The program provides a range of IT services, including help desk, deskside support, Windows engineering and maintenance, managed print services, ITSM, Account Management Services, Cybersecurity, Cloud technologies and other IT services.

We need you to participate in fostering a DevOps culture and building strong cross functional collaboration with all areas of development, product, and QA in a dynamic and fast paced environment supporting the development of a data pipeline and machine learning services.

Some minimal travel may be required to the Washington, DC area.

The individual selected for this position will be a member of the ESA V engineering team and the primary work location in Washington, DC and the work will be performed remotely. Some travel may be required based on the program needs and requirements. Excellent hands-on knowledge of Windows enterprise management technologies is required for this position.

You will work closely with the Infrastructure Engineering Manager on the following key tasks with the ones in bold the key needs:

• Configure and troubleshoot Windows Server operating system in support of Active Directory, DNS and Certificate Authorities.
• Demonstrate extensive understanding of Active Directory systems and be able to manage and maintain them
• Demonstrate extensive understanding of DNS, Certificate Authority, Certificate Management and Authentication Services – ADFS, SAML, SSO, OKTA
• Applying STIG and VPR adjustments as required
• Manage the certificate environment to ensure certificates are issued on time and installed with no outage
• Develop scripts to monitor and check health of Active Directory, DNS and Certificate Authorities.
• Design, develop, and support scalable, redundant infrastructure to include physical, virtualized and cloud environments
• Install, configure and manage a windows-based certificate authority sever
• Install, configure and maintain group management policies including role-based management
• Set up administrator and service accounts, maintain system documentation, tune system performance, install system wide software
• Apply NIST, DISA security controls, security hardening changes based on best practice
• Validate and implement critical system patches, and allocate directory storage space
• Improve existing infrastructure to incorporate latest technology best practices and cross application integrations
• Day-to-day collaboration with engineering teams and system owners, to influence design, and architect solutions in multi-tiered environments
• Manage individual project priorities, deliverables, and deadlines
• Produce clear documentation for delivered solutions

Education and Experience: Typically requires a Bachelor’s degree from an accredited college in a related discipline, with 8 - 12 years of prior relevant experience; or a Master’s degree with 6 - 10 years of prior relevant experience.  Additional years of experience and/or relevant certifications will be considered in lieu of degree.

Required Qualifications:

• BS in Computer Science, Systems Engineering, or related technical field or equivalent experience with at least 8+ years in systems engineering or administration (6+ years with a MS/MIS Degree)
• Experience orchestrating workflows to execute at predefined times, including workflows that have data dependencies.
• Proficiency in DevOps tools; scripting languages including PowerShell
• 5 years of experience with Directory services (Microsoft Active Directory, Entra ID/Azure AD), Certificate Administration and DNS
• 4 years’ experience providing Tier II & III Windows support for Windows OS
• 3 years of Experience with ADFS, OKTA or other Authentication services
• Experience managing certificates and certificate authorities like Microsoft, Digicert, Entrust/Sectigo and SSL.com
• Ability to work well with people from many different disciplines with varying degrees of technical experience
• Ability to work well without constant supervision
• Ability to express complex technical concepts effectively, both verbally and in writing

Desired Qualifications:

• Experience establishing large computer clusters- Experience in continuous configuration automation (CCA) methods for providing a flexible, programmatic platform for deploying and managing the configuration of infrastructure and application resources.
• Experience in cloud-based technologies Entra, AWS.  Integrating windows services (AD, ADFS) in a cloud architecture
• Networking (TCP/UDP, ICMP, and DNS, etc.), infrastructure services, and security experience
• ComTIA Security+
• Microsoft Certified Professional
• 3 years of patching servers, backups, permission management
• 4 years of experience in an operations role
• Government contracting experience, particularly with the DOJ
• DOJ - ATF Public Trust Clearance needed to start