Remote Active Directory & Windows Server Administrator

CAI; Hagåtña (GU); Remote; USD 69,000 - 79,000; Full time

Job summary

CAI is seeking an Active Directory and Windows Server Administrator to advance our enterprise-scale infrastructure. The role emphasizes AD, Group Policy, PowerShell scripting, and lifecycle management in a fully remote, full-time capacity.

The candidate will manage AD/GPO tasks, CIS baselines, script development, and Windows Server deployment and decommissioning while collaborating with the Server Operations Team. Prior experience with Azure DevOps and change controls is ideal.

Qualifications

• 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting
• 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in large environments
• 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled/unattended scripts, and AD/GPO automation
• 3+ years of experience implementing CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting
• 5+ years of experience in Windows Server administration and lifecycle management, including build, patching, upgrading, and decommissioning
• Experience documenting work in real-time, including SOPs, runbooks, and change records
• Experience working with a tracked work queue (e.g., Azure DevOps boards) and formal service request/change control processes

Responsibilities

• Execute Active Directory, Group Policy, and permissions work backlog, including GPO creation, modification, testing, retirement, and delegation
• Implement CIS baselines through GPO and scripted remediation per guidance from Senior Server Administrator
• Design, write, and maintain PowerShell scripts for administration, automation, auditing, remediation, and reporting
• Identify repetitive tasks and develop automation solutions with tested scripts
• Manage Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, decommissioning
• Work on tasks as assigned and prioritized by Server Operations Team Manager
• Log, update, and track all work items in Azure DevOps
• Process service requests and change controls through the Service Management tool
• Store all work products and documentation in Azure DevOps (scripts, code, GPO docs, runbooks, SOPs)
• Cross-skill with Senior Server Administrator to share AD/GPO and CIS knowledge
• Adapt to additional on-prem duties as team responsibilities shift

Skills

Active Directory

Group Policy

PowerShell

CIS benchmarks

Windows Server administration

Documentation

Azure DevOps

Change control

Tools

Azure DevOps

Job description

CAI is seeking an Active Directory and Windows Server Administrator to advance our enterprise-scale infrastructure. The role emphasizes AD, Group Policy, PowerShell scripting, and lifecycle management in a fully remote, full-time capacity.

The candidate will manage AD/GPO tasks, CIS baselines, script development, and Windows Server deployment and decommissioning while collaborating with the Server Operations Team. Prior experience with Azure DevOps and change controls is ideal.