On-Prem Systems Engineer W-2 ONLY

United Global Technologies, Inc.; Columbia (SC); Remote; USD 120,000 - 180,000; Full time

Job summary

United Global Technologies, Inc. is seeking an Information Systems Architect - Advanced (On-Prem Systems Engineer) for a 12-month contract. The role is 100% remote and requires Eastern Time Zone residency.

You will lead AD/GPO backlog execution, CIS baseline implementation, and PowerShell automation across a large Windows server estate. Responsibilities include Windows Server lifecycle management, automation via scripts, Azure DevOps work tracking, and ensuring thorough documentation and

Qualifications

• 5+ years of experience with Active Directory domain services, replication, delegation, permissions, and domain controller troubleshooting.
• 5+ years of experience with Group Policy design, scoping, filtering, troubleshooting, and change control in large environments.
• 5+ years of experience with PowerShell modules, error handling, remote execution, scheduled scripts, and AD/GPO automation.
• 3+ years of experience implementing CIS benchmarks on Windows endpoints via GPO and scripting.
• 5+ years of experience with Windows Server administration and lifecycle management across a large server estate.

Responsibilities

• Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.
• Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction.
• Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.
• Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.
• Manage the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.
• Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager's oversight.
• Log, update, and track all work items in Azure DevOps.
• Work service requests and change controls through the Service Management tool, following the team's change process.
• Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.
• Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.
• Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.

Skills

Active Directory

Group Policy

PowerShell

Windows Server

Documentation

Tools

Azure DevOps

Job description

W-2 ONLY NO SUB, NO subcontracting companies, NO sponsorship

Required Skills

• 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.

• 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment.

• 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.

• 3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.

• 5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning.

• Experience with documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups.

• Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.

Preferred Skills

• Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms.

• Endpoint patch management experience, including third-party application and Windows OS patching.

• Third-party application packaging and deployment automation, including application bundles (such as PDQ).

• PKI and AD Certificate Services operations.

Information Systems Architect - Advanced (On-Prem Systems Engineer)

Why is this position open: We are experiencing significant growth in our platform due to modernization efforts.

Interview Process: 2 rounds, virtual

Duration of the Contract: 12 months

Possibility for Extension: Yes

Work Location: Role is 100% remote

Candidate location: Candidate must currently reside in Eastern Time Zone.

Key Responsibilities

• Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.

• Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction. The Senior reviews and orchestrates; this role implements.

• Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.

• Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.

• Manage the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.

• Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager's oversight.

• Log, update, and track all work items in Azure DevOps.

• Work service requests and change controls through the Service Management tool, following the team's change process.

• Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.

• Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.

• Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.

  Success Metrics / Deliverables

• Success is assessed against metrics established with the Manager and tracked in Azure DevOps, including AD/GPO backlog reduction, CIS items implemented, and script and documentation coverage.

• AD/GPO backlog reduced and tracked in Azure DevOps.

• Items implemented per the Senior's direction, with before and after state recorded.

• Core administrative and remediation tasks covered by tested, documented PowerShell, with a baseline script library in Azure DevOps.

• All work product, including scripts, code, and documentation, stored in Azure DevOps as property of the branch, with no work held locally or in personal storage.

• Tested coverage on AD/GPO and PowerShell-based processes, so that more than one person can run and support them.

• SOPs for recurring AD/GPO and hardening tasks written and reviewed by the Senior.