Cloud Systems Administrator

Thornton Tomasetti; New York (NY); On-site; USD 90,000 - 160,000; Full time

Job summary

Thornton Tomasetti is seeking a Cloud Systems Administrator to manage Windows Server, Active Directory, and Azure infrastructure, including VDI environments. You will work across government and commercial cloud platforms, implementing automation and security best practices to keep services reliable and compliant.

The role focuses on administering Azure VMs, Citrix DaaS, Entra ID, and supporting 3rd level IT incident resolution, with an emphasis on coordination with endpoint delivery teams and

Qualifications

• CUI/export-controlled work requires US citizenship and successful completion of a US government background investigation.
• Associate degree in computer science or higher (or equivalent experience).
• 3+ years in IT system administration, including Windows Server and Active Directory.
• Hands-on Windows Server administration: patching, hardening, roles/features, certificates.
• Hands-on Citrix DaaS or Citrix Virtual Apps and Desktops.
• Active Directory and Group Policy administration including domains, DNS, OUs, GPO design.
• Azure VMs, storage accounts, and Azure Files provisioning/configuration.
• IAM across AD and Microsoft Entra ID, including MFA and Conditional Access.
• Windows desktop policy and user profiles with GPOs and Intune.
• PowerShell scripting to automate tasks.
• Networking concepts (VNets, VPNs, firewalls, load balancers) and cloud integration.
• Backup, recovery, and security practices in virtualized/cloud environments.
• Strong troubleshooting, problem-solving, documentation, and communication skills.
• Based in Austin, Chicago, or New York office; other US offices considered.

Responsibilities

• Collaborate with IT leadership and teams to improve government and commercial cloud environments.
• Identify opportunities for automation to reduce manual effort and improve reliability.
• Contribute to platform modernization projects for security and efficiency.
• Assist with deployment of Azure and Citrix DaaS Government services and Windows Server workloads.
• Utilize PowerShell, Bicep, and Azure Automation to standardize deployment and config.
• Coordinate with endpoint delivery teams for consistent app deployment across VDI environments.
• Administer Windows Server systems including patching, hardening, roles and features, and certificates.
• Administer AD and Group Policy, aligning VDA policy with Intune policies for endpoints.
• Administer and optimize Citrix DaaS platforms to improve user experience.
• Manage Azure VMs, storage accounts, and Azure File Sync.
• Identity/access management across AD and Microsoft Entra ID.
• Automate backups, restores, and high availability across VDI/servers/storage/cloud.
• Provide 3rd level support for Azure, Windows Server, Citrix DaaS, and identity issues.

Skills

PowerShell

Windows Server

Active Directory

Group Policy

Citrix DaaS

Azure VMs

Azure Storage

Entra ID / IAM

Intune

Networking concepts

Backup & recovery

Troubleshooting & documentation

Communication skills

Education

Associate degree in computer science or higher

Tools

Azure

Citrix DaaS

Microsoft Entra ID

Bicep

Intune

Job description

• Manage Azure VMs, Azure Storage accounts, and Azure File Sync.

Thornton Tomasetti applies engineering and scientific principles to solve the world's challenges. An independent organization of creative thinkers and innovative doers collaborating from offices worldwide, our mission is to bring our clients' ideas to life and, in the process, lay the groundwork for a better, more resilient future. We provide support and opportunities to our employees to achieve their full potential and cultivate a rewarding career.

Thornton Tomasetti provides engineering design, investigation, and analysis services to clients worldwide on projects of every size and level of complexity. We are a 100% employee-held organization of 1,700 engineers, architects, and sustainability and support professionals collaborating from about 43 offices across the United States and globally. We focus on providing a diverse suite of integrated services and leading innovation in our industry to ensure the continued success of our clients.

The Role

Thornton Tomasetti is seeking a Cloud Systems Administrator with two areas of responsibility: the Windows infrastructure in Azure and our Virtual Desktop Infrastructure platform. You will administer Windows Servers, Active Directory and Group Policy, Microsoft Entra ID, and Azure infrastructure services. On the VDI side, you will administer Citrix DaaS platforms and supporting services. Both areas span commercial and U.S. Government environments.

What You'll Do

• Collaborate with IT leadership, end-users, and the network, security, and endpoint teams to continually improve our government and commercial cloud environments.
• Identify opportunities for automation for server, identity, cloud, and VDI operations to reduce manual effort, and improve performance and reliability.
• Contribute to platform modernization projects to keep our infrastructure secure, reliable, and efficient.
• Assist with the deployment of Azure and Citrix DaaS Government services, Windows Server workloads, and other supporting cloud services using best practices.
• Utilize automation (PowerShell, Bicep, Azure Automation) to standardize and accelerate deployment and configuration.
• Coordinate with endpoint delivery teams to ensure applications are deployed consistently across both VDI environments.
• Administer Windows Server systems including patching, hardening, roles and features, certificates, and monitoring.
• Administer Active Directory and maintain Group Policy for servers and VDA policy, keeping virtual desktop policy deliberately aligned with the corresponding Microsoft Intune policies applied to laptop endpoints.
• Administer and optimize Citrix DaaS platforms, with a special focus on optimizing the user experience.
• Manage Azure VMs, Azure Storage accounts, and Azure File Sync.
• Assist with identity and access management for applications and staff across Active Directory and Microsoft Entra ID.
• Maintain automated backup, restore, and high availability across VDI, server, storage, and cloud systems.
• Perform work in our government environment in accordance with applicable security and compliance requirements, support the controls and evidence those requirements depend on, and protect the integrity and security of enterprise data across all platforms.
• Provide 3rd level support to our helpdesk and staff for Azure, Windows Server, Citrix DaaS, and identity issues, track work in ServiceNow, and use automation and documentation to proactively mitigate recurring problems.
• Maintain detailed documentation of configurations, automation scripts, and processes, to accelerate code and documentation work where appropriate.
• Maintain the Citrix NetScaler high-availability pair and Citrix StoreFront, including TLS certificate renewals, firmware updates, and routine troubleshooting of connectivity and authentication issues.

Required

What You'll Bring

• Because this role includes working with systems that handle U.S. Government Controlled Unclassified Information (CUI) and export-controlled information, candidates must be a U.S. citizen and be able to successfully complete a U.S. Government background investigation after their employment begins. Obtaining and keeping this authorization is a condition of employment in this role.
• Associate degree in computer science or higher (or equivalent experience).
• 3+ years in IT system administration, including Windows Server and Active Directory.
• Hands-on experience administering Windows Server, including patching, hardening, roles and features, and certificates.
• Hands-on experience administering Citrix DaaS or Citrix Virtual Apps and Desktops.
• Hands-on experience administering Active Directory and Group Policy, including domain controllers, DNS, organizational units, groups and accounts, and GPO design and troubleshooting.
• Hands-on experience provisioning and configuring Azure VMs, storage accounts, and Azure Files.
• Experience with identity and access management across Active Directory and Microsoft Entra ID, including group-based access, multi-factor authentication, and Conditional Access.
• Experience managing Windows desktop policy and user profiles with GPOs and Microsoft Intune.
• Proficiency in PowerShell scripting to automate administrative tasks.
• Familiarity with networking concepts (VNets, VPNs, firewalls, load balancers) and their integration with cloud platforms.
• Experience with backup, recovery, and security practices in virtualized and cloud environments.
• Strong troubleshooting, problem-solving, documentation, and communication skills.
• Based in Austin, Chicago, or New York office although other US office locations may be considered.

Preferred

• Familiarity with U.S. Government compliance frameworks (NIST SP 800-171, CMMC, FedRAMP) and CUI handling; experience in Azure Government, Microsoft 365 GCC High, or another regulated cloud, including CIS or DISA STIG hardening.
• Experience administering Microsoft Entra ID Enterprise Applications and App Registrations for SSO and SCIM provisioning.
• Experience with infrastructure-as-code, particularly Bicep, and with Azure DevOps or GitHub-based deployment pipelines.
• Experience with Citrix NetScaler (ADC) operations, such as certificate renewals, updates, and troubleshooting, and with Citrix StoreFront.
• An active or previously held U.S. security clearance.
• Certifications: Microsoft Azure Administrator (AZ-104), Microsoft Identity and Access Administrator (SC-300), Windows Server Hybrid Administrator (AZ-800/AZ-801), or Citrix Certified Associate – Virtualization (CCA-V).

People successful in this position

• Excel at prioritizing tasks and staying organized in a dynamic environment.
• Are proactive in identifying and implementing continual improvements to drive efficiency.
• Are disciplined about following process in a compliance-bound environment.
• Enjoy learning new technologies and solving complex problems.
• Thrive in a collaborative, global team setting.
• Reflect Thornton Tomasetti's core values of innovation, excellence, and client focus.

Compensation

The rate for this position generally is $1,000 - $800,000 annually. This range is a good faith estimate provided pursuant to the New York Pay Transparency Law. It is based on what a successful New York applicant might be paid and assumes that the successful candidate will be in New York or perform the position from New York. Similar positions located outside of New York will not necessarily receive the same compensation. Actual pay rates may vary from the range, as permitted by New York Equal Pay Transparency Law. Compensation offers will be based on various factors, including operational needs, individual education, qualifications and experience, work location and comparison to employee already in the role, as well as other considerations permitted by law. A potential new employee’s pay history will not be used in compensation decisions.

Benefits

Depending on your employment status, benefits may include:

• Medical, Dental, Vision, Life, AD&D, Disability and other voluntary benefits
• Flexible Spending Accounts for Medical and Childcare
• Paid Time Off, Family Leave for New Parents, Volunteer Time
• Tuition Reimbursement
• Commuter Transit (where available)
• 401k retirement savings with Company matching on employee contributions and/or qualified student loan repayments
• Fitness Reimbursement
• And other various wellness, diversity/inclusion and employee resource programs and initiatives

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Thornton Tomasetti is proud to be an equal employment workplace. Individuals seeking employment at Thornton Tomasetti are considered without regards to age, ancestry, color, gender (including pregnancy, childbirth, or related medical conditions), gender identity or expression, genetic information, marital status, medical condition, mental or physical disability, national origin, protected family care or medical leave status, race, religion (including beliefs and practices or the absence thereof), sexual orientation, military or veteran status, or any other characteristic protected by federal, state, or local laws.

Thornton Tomasetti Global Terms of Use and Privacy Statement

Carefully read these Terms of Use before using this website. Your access to and use of this website and application for a job at Thornton Tomasetti are conditioned on your acceptance and compliance with these terms.

Please access the linked document by clicking here, select the country where you are applying for employment, and review. Before submitting your application you will be asked to confirm your agreement with the terms.

To request a reasonable accommodation during the application process for this role, please contact [e-mail]

Beware Of Recruitment Fraud: Scammers may attempt to impersonate Thornton Tomasetti. Messages from our firm come only from the ThorntonTomasetti.com domain, Thornton Tomasetti does not use any third-party recruiters. When in doubt, please contact us through our web form here and see how you can protect yourself online here.