System Engineer

InstantServe LLC; South Carolina; On-site; USD 90,000 - 120,000; Full time

Job summary

InstantServe LLC is seeking a Senior Server Administrator to execute AD, GPO, and permissions work backlog, including creation, modification, testing, retirement, and delegation changes.

The role involves implementing CIS baselines via GPO and scripted remediation, guided by the Senior Server Administrator. You will design, write, and maintain PowerShell for automation, auditing, remediation, and reporting across endpoints and AD.

Qualifications

• 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.

Responsibilities

• Design, implement, and maintain AD/GPO configurations and permissions.
• Automate administration, auditing, remediation, and reporting using PowerShell across endpoints and AD.
• Manage Windows Server lifecycle at enterprise scale: build, patch, upgrade, troubleshoot, and decommission.
• Track work in Azure DevOps and follow change-control processes.
• Document runbooks, SOPs, and verification steps; share knowledge with teammates.

Skills

Active Directory

Group Policy

PowerShell

CIS benchmarks

Windows Server administration

Tools

Azure DevOps

Job description

Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.

Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction. The Senior reviews and orchestrates; this role implements.

Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.

Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.

Manage the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.

Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under theManageroversight.

Log, update, and track all work items in Azure DevOps.

Work service requests and change controls through the Service Management tool, following the team& change process.

Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.

Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.

Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.

Required Skills & Experience

5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.

5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment.

5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.

3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.

5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning.

Server Operations Team - Contract Position Description

Experience with documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups.

Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.

Preferred / Nice-to-Have

Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms.

Endpoint patch management experience, including third-party application and Windows OS patching.

Third-party application packaging and deployment automation, including application bundles (such as PDQ).

PKI and AD Certificate Services operations.