Systems Administrator, Windows System SME

Job Type: Full-Time

Clearance: TS/SCI

Must be a U.S. Citizen

Job Summary

A Systems Administrator, Windows System SME will play a pivotal role in ensuring the operational efficiency and security of Windows-based systems and applications across HQ USINDOPACOM networks. This position involves collaboration with various teams to maintain information asset integrity and confidentiality. The administrator manages over 150 virtual and physical servers spanning multiple networks and security classifications, providing essential support, monitoring, and maintenance.

Roles and Responsibilities

A qualified candidate will perform the following duties and responsibilities, but are not limited to:

• Windows System Administration: Maintain, secure, and update OS and applications, including Windows Active Directory, Windows Server, Workstations, DHCP, and more.
• Oversee patching efforts for systems and applications.
• Security & Compliance: Ensure compliance with DoD and requirements, including STIG compliance and process optimization.
• Monitoring: Utilize WhatsUpGold for daily monitoring, including configuration, queries, filters, dashboards, and status validation.
• Employ Endpoint Configuration Manager, Intune, and Ivanti for patch management, configuration, system security, and zero trust compliance.
• PKI Compliance: Manage DoD PKI compliance and certificates for Windows/Active Directory systems and applications.
• Integrate Windows/Active Directory systems into the USINDOPACOM Endpoint Security Solutions (ESS) architecture.
• Review security and performance logs.
• Evaluate and address ServiceNow tickets daily.
• Collaborate with developers to design and implement ServiceNow workflows for Windows-based assets.
• Provide support for DoD Local Registration Authority (LRA) computer and ensure security for Apple devices within a DoD environment.
• Create, maintain, test, and update Windows/Active Directory Standard Operating Procedures (SOP) and documentation.
• Windows Active Directory Management: Oversee the day-to-day management of the J6631 Windows Active Directory environments, ensuring operational continuity and providing weekly status reports.
• Test and execute the Windows/Active Directory Continuity of Operations (COOP) plan, documenting and reporting results.
• Occasionally work after hours and on weekends to support scheduled and unscheduled service outages.

Knowledge and Skills

• Must have experience managing and securing Windows Active Directory, Windows Servers, and Windows Workstations within a DoD environment.
• Must have experience securing systems and applications in accordance with Federal, DoD and HQ USINDOPACOM regulations, directives, policies, and Security Technical Implementation Guides (STIG).
• Must have knowledge of Endpoint Configuration manager, Intune, Ivanti.
• Must have experience managing Group Policy.
• Must have experience utilizing SPLUNK, ACAS and WhatUp-Gold.
• Must have experience managing Windows Server and Workstation operating systems in a Virtual Machine Operating Environment (VOE) like VMware.
• Knowledge of PowerShell scripting, Active Directory Service Management, Group Policy, and automation is required.
• Must have experience patching Windows servers and workstations via automated tools.
• Must have experience backing up and restoring Active Directory and Windows operating systems in a virtual environment.
• Must have experience in managing and reviewing audit logs.
• Must have experience supporting Endpoint Security Solutions (ESS) agents on Windows systems.

Education

• High School Diploma.
• At least 3+ years of experience managing and supporting Windows Active Directory (2016 on later), Servers (2016 or later) and Workstations (Windows 11 or later).
• IAW DoD 8140.03-M, must meet the Intermediate Proficiency Level qualifications.

Required Certifications (One or More):

• CISM
• CISSP (OR ASSOCIATE)
• GSLC
• CCISO
• CAP
• CASP+ CE
• HCISSP
• CND
• CLOUD+
• SECURITY+ CE
• CCNP SECURITY
• CISA
• GCED
• GCIH
• CCSP
• CCNA SECURITY
• CySA+
• GICSP
• GSEC
• SSCP

Physical Requirements/Work Environment

• Typical office environment.

Travel

• Not required.

Compensation

At Castalia Systems, we provide you with opportunities and choices and support your total well-being. Our benefits include: Medical, dental, vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too. All regularly scheduled employees working at least 30 hours per week are eligible to participate in Castalia Systems’ benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Salary at Castalia Systems is determined by various factors, including but not limited to location, position knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $136,000.00 to $152,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Castalia Systems’ total compensation package for employees.

Disclaimer

Castalia Systems is an equal employment opportunity and affirmative action employer and strives to comply with all applicable laws prohibiting discrimination based on race, color, creed, sex, sexual orientation, age, national origin, or ancestry, physical or mental disability, veteran status, marital status, HIV-positive status, as well as any other category protected by federal, state, or local laws. All such discrimination is unlawful, and all persons involved in the operations of the company are prohibited from engaging in this type of conduct.