Systems Engineer/Administrator - Windows

Job description

Type of Requisition: Regular Clearance Level Must Currently Possess: Secret Clearance Level Must Be Able to Obtain: Top Secret/SCI Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Job Qualifications: Skills: Computer Servers, Microsoft Windows Server, Scripting, System Administration, Systems Design Certifications: None Experience: 5 + years of related experience US Citizenship Required: Yes Job Description: SYSTEMS ENGINEER/ADMINISTRATOR - WINDOWS - SENIORAdvance how our customers operate while you advance your career. Join GDIT as a Systems Engineer/Administrator Senior and build an impactful career in enterprise IT, collaborating with people who are driven and resourceful like you.MEANINGFUL WORK AND PERSONAL IMPACT As a Systems Engineer/Administrator, the work you’ll do at GDIT will be impactful to the mission of USAREUR-AF G6. This role is responsible for the engineering, maintenance, and modernization of identity, credential, and access management (ICAM) infrastructure across hybrid environments. You will focus on safeguarding and enabling access to business critical Headquarters applications, integrating legacy authentication systems with enterprise-level solutions, and advancing automation through Infrastructure as Code (IaC) and DevSecOps practices.The ideal candidate brings deep Windows Server and Active Directory expertise, hands-on experience with AD FS and Azure DevOps, and a strong commitment to secure, reliable, and automated solutions that support the DoWIN environment.Administer and optimize AD FS and ICAM services • Administer multiple Active Directory Federation Services (AD FS) environments that support authentication and authorization for users accessing applications via the DoWIN • Monitor, troubleshoot, and optimize federation services to ensure secure, highly available access to mission-critical applications • Coordinate changes and updates with other identity and directory teams across the enterprise Engineer integration solutions with enterprise ICAM providers • Design and implement solutions to integrate existing and new applications with DoW-wide ICAM providers • Develop technical designs, configuration standards, and documentation for application onboarding to centralized authentication and authorization services • Collaborate with application owners and security stakeholders to ensure compliance with relevant DoW and USAREUR-AF policies Manage on-premises DevSecOps platform • Administer an on-premises DevSecOps platform, including creation of new repositories, pipeline configuration, and agent deployment/management • Partner with development and operations teams to streamline CI/CD workflows, improve build and release reliability, and increase automation coverage • Implement and maintain controls that support secure code management, branching strategies, and auditability Design and implement Infrastructure as Code (IaC) solutions • Design IaC solutions using tools such as Microsoft Desired State Configuration (DSC) or similar tools to standardize system configurations and automate system deployments • Develop, test, and document reusable configuration templates and automation artifacts for Windows-based infrastructure and applications • Continuously improve deployment reliability, configuration consistency, and time-to-delivery through automation Deploy and maintain lab environments for research and testing • Build and maintain lab environments used by development and operations teams for research, prototyping, and pre-production testing • Coordinate refreshes, reconfigurations, and proof-of-concept efforts in support of modernization and migration activities Support core Windows infrastructure operations • Assist with Active Directory Domain Services (AD DS), Group Policy, and IIS web server operations as part of the broader operations team • Contribute to patching, STIG hardening, security remediation, and performance tuning tasks for Windows Server platforms • Participate in on-call or after-hours support rotations, as required by the mission WHAT YOU’LL NEED TO SUCCEED • Bring your technology expertise and drive for innovation to GDIT. The Systems Engineer/Administrator Senior must have : • Education: Bachelor of Arts/Bachelor of Science • Experience: 5+ years of related experience • Security clearance level: U.S. SECRET with the ability to obtain TS/SCI • US citizenship required • Meets DoD 8140 System Administrator Intermediate or Advanced certification requirements • ITIL Foundation Certification. • One of the following (or higher) Microsoft certifications: • Windows Server Hybrid Administrator Associate, or • DevOps Engineer Expert. • Demonstrated experience with: • Windows Server administration in an enterprise or DoW environment • AD FS– configuration, operations, and troubleshooting • AD DS – accounts, groups, OU structure, GPO application, and delegation • Azure DevOps – repositories, pipelines, and agents • Applying and interpreting STIGs for Windows Server and related technologies • Strong PowerShell scripting skills for automation, configuration, and administration tasks Preferred Qualifications / Desired Skills • Experience with eMASS and the RMF processes • Hands-on experience with DSC and/or similar configuration management frameworks • Experience using Evaluate-STIG • Strong Group Policy design and troubleshooting skills in complex AD environments • Experience with containerization and orchestration • One or more current cloud certifications GDIT IS YOUR PLACE At GDIT, the mission is our purpose, and our people are at the center of everything we do.Growth: AI-powered career tool that identifies career steps and learning opportunitiesSupport: An internal mobility team focused on helping you achieve your career goalsRewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time offCommunity: Award-winning culture of innovation and a military-friendly workplaceOW