Remote Active Directory & Windows Server Engineer

CAI; Denver (CO); Remote; USD 69,000 - 79,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401k retirement plan

Paid time off

Job summary

CAI is seeking a Server Administrator to lead AD, GPO, and Windows Server lifecycle tasks in a remote, full-time role. You will design and implement PowerShell scripts, manage CIS baselines, and automate repetitive operations to improve reliability across enterprise endpoints.

Ideal candidates have 5+ years in AD/GPO/PowerShell, experience with Azure DevOps, and a track record of documenting changes with runbooks and SOPs while coordinating with the Server Operations Team.

Qualifications

• 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.
• 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in large environments.
• 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled/unattended scripts, and AD/GPO automation.
• 3+ years of experience implementing CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.
• 5+ years of experience in Windows Server administration and lifecycle management, including build, patching, upgrading, and decommissioning.
• Experience documenting work in real-time, including SOPs, runbooks, and change records.
• Experience working with a tracked work queue (e.g., Azure DevOps boards) and formal service request/change control processes.

Responsibilities

• Execute the Active Directory, Group Policy, and permissions work backlog, including GPO creation, modification, testing, and retirement, as well as delegation and access changes.
• Implement CIS baselines through GPO and scripted remediation, based on analysis and direction from the Senior Server Administrator.
• Design, write, and maintain PowerShell scripts for administration, automation, auditing, remediation, and reporting across endpoints and Active Directory.
• Identify repetitive operational tasks and develop automation solutions to replace manual procedures with tested, documented scripts.
• Manage the Windows Server lifecycle at enterprise scale, including build, configuration, patching, upgrading, troubleshooting, and decommissioning.
• Work on tasks as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager's oversight.
• Log, update, and track all work items in Azure DevOps
• Process service requests and change controls through the Service Management tool, adhering to the team's change management process
• Store all work products and documentation in Azure DevOps, including scripts, code, GPO documentation, runbooks, and SOPs
• Cross-skill with the Senior Server Administrator to ensure AD/GPO and CIS knowledge is distributed across the team
• Adapt to additional on‑premises duties as team responsibilities are realigned, as directed by the Manager

Skills

Active Directory

Group Policy

PowerShell

Windows Server

Tools

Azure DevOps

Job description

CAI is seeking a Server Administrator to lead AD, GPO, and Windows Server lifecycle tasks in a remote, full-time role. You will design and implement PowerShell scripts, manage CIS baselines, and automate repetitive operations to improve reliability across enterprise endpoints.

Ideal candidates have 5+ years in AD/GPO/PowerShell, experience with Azure DevOps, and a track record of documenting changes with runbooks and SOPs while coordinating with the Server Operations Team.