On-Prem Systems Engineer

InterSources Inc.; Columbia (SC); Remote; USD 90,000 - 110,000; Full time

Job summary

InterSources Inc. is seeking an On-Prem Systems Engineer to join a 12-month engagement based in Columbia, SC with 100% remote work options. The role focuses on Active Directory, Group Policy, PowerShell, and Windows Server administration for large enterprise environments.

You will implement CIS benchmarks, develop automation scripts, maintain runbooks, and track work in Azure DevOps, collaborating with senior admins to improve operations.

Qualifications

• 5+ years of Active Directory experience (domain services, replication, delegation, permissions, DC troubleshooting).
• 5+ years of Group Policy design, scoping, filtering, troubleshooting, and change control.
• 5+ years of PowerShell scripting, automation, and remote execution.
• 3+ years implementing CIS benchmarks on Windows endpoints via GPO/scripts.
• 5+ years Windows Server administration in large environments (build, patch, upgrade, decommission).
• Experience maintaining SOPs, runbooks and change records as work is performed.
• Experience with Azure DevOps Boards, service requests, and formal change control processes.

Responsibilities

• Manage Active Directory, GPOs, permissions, delegation, and DC troubleshooting.
• Implement CIS benchmarks and Windows hardening via GPO and PowerShell scripting.
• Develop, test, and maintain PowerShell scripts for automation, auditing, remediation, and reporting.
• Manage enterprise Windows Server infrastructure: provisioning, configuration, patching, upgrades, troubleshooting, decommissioning.
• Track work, service requests, and changes in Azure DevOps and Service Management tool.
• Maintain technical documentation, scripts, SOPs, and runbooks in Azure DevOps.
• Collaborate with Senior Server Administrator to improve operations and share knowledge.

Skills

Active Directory

Group Policy

PowerShell

CIS Benchmarks

Windows Server

Documentation & Runbooks

Azure DevOps Boards

Tools

Azure DevOps

PDQ

Job description

Job Title: On-Prem Systems Engineer (14260)

Location: Columbia, SC 29201 100% Remote

Duration: 12 Months (Possible Extension)

Interview: 2 Rounds – Virtual

Candidate Location: Must currently reside in the Eastern Time Zone (ET)

Required Skills

• 5+ years of experience with Active Directory: Domain services, replication, delegation, permissions, and domain controller troubleshooting.
• 5+ years of experience with Group Policy: Design, scoping, filtering, troubleshooting, and change control in a large environment.
• 5+ years of experience with PowerShell: Modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.
• 3+ years of experience implementing CIS benchmarks (or equivalent hardening baselines) on Windows endpoints through GPO and scripting.
• 5+ years of experience with Windows Server administration and lifecycle management across large server environments, including building, patching, upgrading, and decommissioning servers.
• Experience maintaining SOPs, runbooks, and change records as work is performed, rather than preparing documentation afterward.
• Experience working with tracked work queues (such as Azure DevOps Boards), service requests, and formal change control processes.

Preferred Skills

• Experience with task automation and orchestration beyond PowerShell, including scheduled workflows and automation platforms.
• Endpoint patch management experience, including Windows OS and third-party application patching.
• Experience with third-party application packaging and deployment automation, including PDQ or similar tools.
• Experience with Public Key Infrastructure (PKI) and Active Directory Certificate Services (AD CS).

Key Responsibilities

• Manage Active Directory, Group Policy Objects (GPOs), permissions, delegation, and domain controller troubleshooting.
• Implement CIS security benchmarks and Windows endpoint hardening through GPO and PowerShell scripting under the Senior Server Administrator's direction.
• Develop, test, and maintain PowerShell scripts for automation, auditing, remediation, and reporting.
• Manage enterprise Windows Server infrastructure, including provisioning, configuration, patching, upgrades, troubleshooting, and decommissioning.
• Track assigned work, service requests, and change controls in Azure DevOps and the Service Management tool.
• Maintain technical documentation, scripts, SOPs, and runbooks in Azure DevOps throughout project execution.
• Collaborate with the Senior Server Administrator and Server Operations Team to improve operational efficiency and share technical knowledge.