Remote Active Directory & GPO Automation Engineer

VIVA USA Inc; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote work

Job summary

VIVA USA Inc. is seeking an Information Systems Architect - Advanced (On-Prem Systems Engineer) to join a fully remote team. You will lead AD/GPO automation, CIS hardening, and PowerShell scripting across enterprise endpoints.

The role emphasizes designing and implementing scalable Windows Server lifecycle management, documenting processes, and tracking work in Azure DevOps. Collaboration with the Server Operations Team is essential.

Qualifications

• 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.
• 5+ years with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment.
• 5+ years with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.
• 3+ years with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.
• 5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning.
• Experience documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups.
• Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.

Responsibilities

• Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.
• Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction. The Senior reviews and orchestrates; this role implements.
• Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.
• Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.
• Manage the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.
• Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager's oversight.
• Log, update, and track all work items in Azure DevOps.
• Work service requests and change controls through the Service Management tool, following the team's change process.
• Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.
• Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.
• Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.

Tools

Active Directory

Group Policy

PowerShell

CIS Benchmarks

Windows Server Administration

Azure DevOps

Job description

VIVA USA Inc. is seeking an Information Systems Architect - Advanced (On-Prem Systems Engineer) to join a fully remote team. You will lead AD/GPO automation, CIS hardening, and PowerShell scripting across enterprise endpoints.

The role emphasizes designing and implementing scalable Windows Server lifecycle management, documenting processes, and tracking work in Azure DevOps. Collaboration with the Server Operations Team is essential.