Senior System Administrator – Windows Server & Active Directory
Syracuse, NY - USA
Job Summary
- Own the architecture health and roadmap of Active Directory domains forests trusts sites OUs and replication.
- Define and govern Group Policy strategy and standards for security configuration and standardization across the estate.
- Lead design and administration of core Windows Server roles and services including DNS DHCP file/print and PKI (AD CS).
- Set build patching and hardening standards for Windows Server; own server lifecycle and capacity planning.
- Establish identity and access-governance practices for user group and service accounts (least privilege tiering).
- Maintain and troubleshoot domain controllers FSMO roles replication and authentication (Kerberos/NTLM) at an expert level.
- Design and validate backup restore and disaster recovery strategy for Active Directory and server workloads.
- Own hybrid identity strategy and synchronization between on-premises Active Directory and Microsoft Entra ID (Entra Connect).
- Define and enforce strong authentication standards including multi-factor authentication (MFA) and conditional access.
- Establish and maintain server and endpoint security baselines patching cadence and hardening standards.
- Lead support for audits access reviews logging and compliance requirements (e.g. SOC 2 ISO 27001 HIPAA as applicable).
- Drive detection of and response to identity- and infrastructure-related security events; lead root-cause analysis.
- Provide senior-level administration of the Microsoft 365 tenant including Exchange Online SharePoint Online OneDrive and Microsoft Teams.
- Govern licensing tenant configuration and administrative role assignments.
- Design and maintain Microsoft 365 security and compliance controls (DLP retention email protection / Defender for Office 365).
- Lead tenant migrations and the adoption of new Microsoft 365 services; resolve complex mail flow and service issues.
- Own administration and design of VMware vSphere/ESXi and vCenter including HA DRS and resource strategy.
- Lead VM provisioning standards host upgrades patching and capacity planning for performance and availability.
- Manage storage and networking within the virtual environment (datastores vSwitches VLANs vMotion).
- Lead troubleshooting and remediation of performance and availability issues across the virtualization stack.
- Serve as the highest level of escalation for complex infrastructure identity and platform issues.
- Mentor and provide technical leadership to junior administrators and help desk staff; review work and share knowledge.
- Lead infrastructure projects migrations and upgrades from planning through implementation and handover.
- Define automation strategy and build tooling using PowerShell (and Microsoft Graph) to improve reliability and efficiency.
- Author and maintain architecture documentation runbooks standards and configuration records.
- Partner with security networking and application teams; contribute to the infrastructure roadmap and technology decisions.
- Participate in and lead an on-call rotation for critical systems as required.
- 6 years of system administration experience including senior-level hands-on Active Directory and Windows Server administration in production.
- Expert working knowledge of Group Policy DNS DHCP PKI and core Windows Server roles and services.
- Proven experience designing and governing identity access and least-privilege controls in a Windows-centric environment.
- Strong hands-on experience administering Microsoft 365 / Office 365 (Exchange Online Teams SharePoint security).
- Strong hands-on experience administering VMware vSphere/ESXi and vCenter.
- Experience leading projects migrations and disaster recovery planning for core infrastructure.
- Demonstrated ability to mentor others and set technical standards and best practices.
- Excellent troubleshooting communication and stakeholder-management skills with a security-focused mindset.
- This role is based in Syracuse NY and will require onsite presence.
- Bachelors degree in Information Technology Computer Science or a related field (or equivalent experience).
- Senior-level certifications such as Microsoft Certified: Windows Server Hybrid Administrator Associate Identity and Access Administrator Associate (SC-300) or Microsoft 365 Administrator Expert.
- Additional certifications such as VMware VCP-DCV or Azure Solutions Architect / Administrator (AZ-104).
- Advanced scripting and automation with PowerShell and Microsoft Graph; familiarity with infrastructure-as-code.
- Experience with hybrid identity (Entra Connect) Intune / endpoint management Zero Trust and security/compliance frameworks.
- Solid networking fundamentals (VLANs firewalls VPN load balancing).
Required Experience:
Director
About Company
Wireless technology now impacts nearly every aspect of daily life around the world. As the fastest-growing global tech company, JMA designs and delivers cutting-edge wireless technology solutions that modernize how people learn, work, live and play, like never imagined. We power today ... View more