Senior Systems Engineer

Andrews-Federal-Credit-Union; Suitland (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

Andrews Federal Credit Union in Suitland, MD, seeks an experienced IT Infrastructure Engineer to configure, secure, and optimize our Microsoft 365 and Azure environment. You will serve as global admin, automate tasks with PowerShell, and align with CIS baselines.

Lead AD architecture and GPOs, migrate tools to Azure, manage Exchange Online and Teams governance, and partner with security and CIO to execute Microsoft strategy. Willingness to work irregular hours and minimal supervision.

Qualifications

• 7–10 years of hands-on IT engineering and Exchange experience.
• Experience with Active Directory including AD forest migration, remediation, and consolidation.
• Strong foundation in directory services (DNS, DHCP, GPO).
• Experience migrating disparate toolsets into Azure.
• Microsoft 365 administration and governance experience.

Responsibilities

• Lead redesign of Active Directory architecture and GPOs for efficiency and performance.
• Replace disparate tools with Microsoft equivalents where applicable.
• Collaborate with Security to enforce CIS baselines and OS hardening standards.
• Develop PowerShell scripts to automate repetitive tasks.
• Act as global administrator for Microsoft 365 and related services.
• Manage Azure Active Directory for a cohesive, secure environment.
• Participate in audit remediation to maintain compliance and reduce vulnerabilities.
• Work with Director of Infrastructure and CIO on Microsoft strategy.
• Create governance models for Teams, Power BI, Exchange Online, and more.
• Implement and configure Microsoft 365 and cloud apps for seamless integration.
• Document standardized procedures and educate users on technologies.

Skills

Active Directory

Group Policy

PowerShell scripting

Microsoft 365

Exchange Online

Intune Autopilot

Automox

Automation

Documentation

Education

Bachelor's degree

Associate degree

Tools

Azure Active Directory

Active Directory

GPO

PowerShell

MS Exchange

MS Teams

Intune Autopilot

Automox

Job description

Purpose of PositionPlay a critical role in configuring, maintaining, and optimizing Andrews Federal's server and desktop infrastructure, both on-premises and in the cloud. Leveraging the power of Microsoft 365, including tools such as Power BI and Teams, you will modernize our systems, ensuring they remain at the forefront of technology.Essential DutiesLead the analysis and redesign of Active Directory architecture and Group Policy Objects (GPOs) to enhance system efficiency and performance.Lead the effort of replacing existing disparate products with the Microsoft equivalent.Work closely with the Security Team to establish and enforce Center for Internet Security (CIS) baselines and rigorous operating system hardening standards across our infrastructure.Develop and maintain a library of PowerShell scripts to automate repetitive tasks.Act as the global administrator and subject matter expert for all Microsoft 365 related matters, ensuring seamless operation and alignment with organizational objectives.Manage Microsoft Azure Active Directory, ensuring a cohesive and secure environment.Participate actively in audit remediation processes when necessary to maintain compliance and minimize vulnerabilities.Work closely with the Director of Infrastructure and CIO to shape and execute Andrews Federal's Microsoft strategy.Partner with the Application Team on automation projects, creating scripts to streamline common tasks.Establish governance models for Teams, PowerBI, Exchange Online, and other Microsoft services.Implement and configure Microsoft 365 and other cloud applications, ensuring seamless integration.Develop and document standardized procedures, strictly adhering to existing protocols.Educate and demonstrate the potential of Microsoft 365 and related technologies to users and managers.Stay up-to-date with relevant technologies and act as an in-house expert in cloud applications.Serve as an escalation point for Microsoft-related products.Oversee operational activities, including system upgrades, patching, capacity planning, and performance analysis.Adhere to Andrews Federal Credit Union's policies, procedures, and regulations, including those pertaining to the Bank Secrecy Act.Required KSAsBachelor's or Associate's degree (engineering or information systems related field). Solid on-the-job experience will be considered in lieu of a degree.7 - 10 years of hands-on IT engineering and Exchange experience.Minimum 5 years of solid experience in Microsoft 365 support, administration, and implementation.Experience with Active Directory including AD forest migration, remediation, and consolidation, as well as a strong foundation in other directory service technologies including GPO, DNS, and DHCP.Experience migrating disparate toolsets into Azure.Desirable certifications: Microsoft - MCDST, MCTS, MCITP, MCSA, MCSE.Implementation and strong enterprise support experience with the following technologies.Active Directory and Group Policy ManagementMS Exchange/MS Teams- unified communicationsMicrosoft 365 administration4+ years of experience with Windows Server 2016 and aboveConfiguration management software deployments (Automox)Expert level PowerShell experience; beyond running single cmdlets, experience with writing larger scripts and automation-driven processesEnterprise systems application deployment and managementNetwork Monitoring Performance Tools (Solarwinds preferred)Imaging Tools such as Intune AutopilotKnowledge of Authentication, Identity, and Access Management (IAM), and Conditional Access Policies.Remote Administration ToolsAbility and willingness to work alone, and irregular hours and days.Ability to work with individuals of all levels and varying technical skills.Excellent written and verbal communication skills required.Physical RequirementsReasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.While performing the duties of the job, the individual is regularly required to sit, use hands to finger, handle or feel, reach with hands and arms, and see, talk, or hear.The individual is frequently required to stand, walk, carry or pull.The individual may be required to climb, bend or squat on occasion.The individual must regularly lift and/or move 20-35 pounds and occasionally lift or pull 35-80 pounds.In accordance with the Americans with Disabilities Act, requirements may be modified to reasonably accommodate disabled individuals. However, no accommodation will be made which may pose serious health or safety risks to the employee or others or which impose undue hardships on the organization. EOE