System Administrator

Industrial-Service-Solutions,-LL; Camp Hill (Cumberland County); On-site; USD 90,000 - 130,000; Full time

Job summary

Industrial Service Solutions in Camp Hill, PA is seeking a Senior Systems Administrator to secure, maintain, and improve a distributed Microsoft infrastructure spanning on‑premises, Azure, and Microsoft 365. This role requires hands‑on troubleshooting, project leadership, and disciplined change management to protect data and ensure business continuity.

You will administer Windows Server, Active Directory/Entra ID, Microsoft 365, Azure resources, and endpoint security while implementing security

Qualifications

• At least five years of progressively responsible systems administration experience.
• Strong hands-on experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, and permissions.
• Practical security administration experience with identity protection and vulnerability remediation.
• Experience administering Microsoft 365, Entra ID, and hybrid Microsoft environments.
• Experience with virtualization, backup and recovery, file services, and network troubleshooting.
• Working experience with Azure infrastructure and endpoint management through Intune or comparable tools.
• Ability to write, troubleshoot, and safely maintain PowerShell scripts.
• Strong documentation, communication, and problem-solving skills; able to work independently.

Responsibilities

• Apply and maintain security baselines, system hardening, MFA, and Conditional Access.
• Administer AD/Entra ID, including GPO, replication, and access lifecycle management.
• Review access and perform periodic access reviews; coordinate with IT Manager and security providers.
• Investigate security alerts, support incident containment and recovery, and plan remediation.
• Maintain endpoint protection, encryption, and secure remote access; support data protection and audits.
• Manage Windows Server, DNS, DHCP, file services, and certificate services.
• Manage Hyper-V hosts, VMs, Remote Desktop Services, and FSLogix profiles.
• Administer Microsoft 365 services and Azure resources; manage Purview retention and eDiscovery around procedures.
• Lead infrastructure upgrades, migrations, and integrations; create PowerShell automation with logging.

Skills

Windows Server

Active Directory

Group Policy

DNS

DHCP

PowerShell

Azure

Intune

Microsoft 365

Remote Desktop Services

Tools

Hyper-V

FSLogix

Entra ID

Microsoft Purview

Intune

Job description

Position Summary

Industrial Service Solutions is seeking a Senior Systems Administrator to secure, maintain, and improve a distributed Microsoft infrastructure spanning on-premises systems, Azure, and Microsoft 365. This position requires an experienced administrator who can independently troubleshoot complex issues, lead infrastructure projects, and follow work through to resolution. Security is a core responsibility across identity, servers, endpoints, networking, and cloud services, with particular attention to protecting company data and intellectual property.

The successful candidate combines hands‑on technical depth with sound judgment, clear communication, and disciplined change management. They identify risks, recommend practical improvements, and implement changes while supporting business continuity.

Location: Camp Hill, PA 17011

Key Responsibilities

Security and Identity

• Apply and maintain security baselines, system hardening, least privilege, MFA, and Conditional Access across supported systems.
• Administer Active Directory and Entra ID, including Group Policy, replication, hybrid identity synchronization, privileged accounts, service accounts, and access lifecycle management.
• Review administrative, vendor, and external‑user access; maintain appropriate permissions and support periodic access reviews.
• Investigate security alerts and suspicious activity, support incident containment and recovery, and coordinate with the IT Manager and security providers.
• Prioritize vulnerability remediation and security updates based on risk; plan, test, deploy, and verify changes with recovery procedures.
• Maintain endpoint protection, encryption, local administrator controls, and secure remote access; support data protection, retention, and audit requirements.

Infrastructure and Operations

• Administer Windows Server, DNS, DHCP, file services, NTFS permissions, DFS namespaces, and certificate services.
• Manage Hyper‑V hosts and virtual machines, storage capacity and performance, Remote Desktop Services, and FSLogix profiles.
• Administer Microsoft 365 services, including Exchange Online, Teams, SharePoint, licensing, and mail security; support Purview retention and eDiscovery activities under established procedures.
• Manage Azure virtual machines, storage, virtual networks, role assignments, monitoring, and resource costs.
• Troubleshoot network connectivity, VLANs, routing, firewall rules, site‑to‑site VPNs, and remote access across multiple business locations.
• Manage endpoints through Intune, Autopilot, application deployment, BitLocker, LAPS, and update policies.
• Maintain backup operations and disaster recovery runbooks; perform documented restore tests and validate recovery readiness.
• Lead infrastructure upgrades, migrations, and integrations; coordinate dependencies, vendors, implementation schedules, and production changes.
• Create and maintain PowerShell automation with appropriate logging, error handling, and safeguards.

Required Qualifications

• At least five years of progressively responsible systems administration experience, including independent ownership of production infrastructure and complex escalations.
• Strong hands‑on experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, and permissions management.
• Practical security administration experience with identity protection, least privilege, vulnerability remediation, endpoint protection, and incident investigation.
• Experience administering Microsoft 365, Entra ID, and hybrid Microsoft environments.
• Experience with virtualization, backup and recovery, file services, and network troubleshooting.
• Working experience with Azure infrastructure and endpoint management through Intune or comparable tools.
• Ability to write, troubleshoot, and safely maintain PowerShell scripts.
• Demonstrated ability to plan changes, assess business impact, maintain recovery options, and verify results.
• Strong documentation, prioritization, communication, and problem‑solving skills; ability to work independently and coordinate across teams.
• Relevant education, technical training, or equivalent practical experience.

Preferred Qualifications

• Experience supporting multiple sites, Active Directory forests and trusts, acquisitions, or tenant and domain migrations.
• Experience with Hyper‑V, RDS, FSLogix, PKI, Entra Connect, and Microsoft Purview.
• Familiarity with Cloudflare Zero Trust/WARP, Sophos, UniFi, Resilio, Splashtop, or ConnectWise Automate.
• Experience securing engineering or CAD file workflows and protecting sensitive business information.
• Relevant Microsoft, Azure, networking, or security certifications.

Success in This Role

• Security issues are identified, prioritized, and resolved with documented evidence.
• Infrastructure remains reliable, and recurring incidents are reduced through corrective action and automation.
• Projects and escalations progress with limited supervision and clear status reporting.
• Documentation is usable by other technicians, and backup recovery is demonstrated through testing.