Senior Microsoft Systems Administrator

Job Summary

We are seeking an experienced Senior Microsoft Systems Administrator to support the security and stability of enterprise Windows environments. This role will focus on implementing system hardening practices, enforcing configuration standards, strengthening identity and access management, and supporting ongoing security monitoring initiatives.

The ideal candidate will have strong hands-on experience with Microsoft infrastructure technologies and a solid understanding of cybersecurity frameworks and enterprise security best practices.

Key Responsibilities

• Install, configure, patch, secure, and maintain Windows Server (2019/2022+) and Windows 10/11 systems within enterprise environments.
• Implement and maintain system security controls aligned with industry security frameworks and best practices.
• Configure and manage Group Policy Objects (GPOs) and device management policies using Microsoft Endpoint Manager / Intune.
• Maintain secure configuration baselines, including password policies, account lockout policies, endpoint protection, firewall configurations, application control, and disk encryption.

System Hardening & Security

• Enforce secure execution policies and application allow-listing practices.
• Configure host-based firewalls and endpoint protection capabilities.
• Support implementation of multi-factor authentication (MFA) and privileged access management controls.
• Implement encryption protections for data at rest and in transit.
• Remove or disable unnecessary services, roles, and default accounts to reduce system attack surfaces.

Microsoft Infrastructure Administration

• Manage and administer core Microsoft technologies, including:
• Active Directory
• Microsoft Endpoint Configuration Manager (SCCM/MECM)
• Microsoft Intune
• Azure AD / Entra ID
• Microsoft Defender for Endpoint
• Assist with configuration and policy management in hybrid or cloud-integrated environments when applicable.

Automation & Documentation

• Develop and maintain PowerShell scripts for automation, configuration validation, and system compliance reporting.
• Document system configurations, security implementations, and operational procedures.
• Maintain documentation for security configurations, remediation activities, and system improvements.

Required Qualifications

• 4+ years of experience administering Windows servers and workstations in enterprise environments.
• Strong hands-on experience with Microsoft infrastructure administration.
• Proficiency with Microsoft administration tools, including:
• Active Directory
• Group Policy
• PowerShell
• SCCM / MECM
• Microsoft Intune
• Microsoft Defender security tools
• Understanding of enterprise security principles, including:
• Access control
• Identity and authentication
• Configuration management
• Logging and auditing
• System protection
• Experience implementing system hardening techniques and least-privilege access models.
• Familiarity with vulnerability management tools such as Nessus, Tenable, or similar platforms.
• Strong PowerShell scripting skills for automation and system administration tasks.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).

Preferred Qualifications

• Relevant technical certifications such as:
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft Certified: Endpoint Administrator
• CompTIA Security+
• CISM
• CAP
• Experience with Azure AD / Entra ID, Microsoft Defender compliance policies, or Azure-based policy management.
• Familiarity with security compliance frameworks and regulatory standards used in enterprise environments.
• Experience working within hybrid cloud or security-focused infrastructure environments.