Windows Administrator IV

Chenega Professional & Technical Services; Central City (CO); Remote; USD 57,000 - 81,000; Full time

Job summary

Chenega Professional Technical Services, LLC. is seeking an expert Windows Administrator IV to manage enterprise AD migrations to Entra ID and domain consolidation for a Federal Government customer. The role emphasizes planning, execution, and O&M of Windows-based services.

You will collaborate with PMs, test migrations, deploy PowerShell automation, and provide Tier 3 support, ensuring secure authentication like Kerberos/SSO and PIV-related access.

Qualifications

• 15 years of experience designing, configuring, and supporting Microsoft Windows systems.
• Expert knowledge of Active Directory, AD Federated Services, and Azure AD and Entra ID.
• Kerberos/SSO and PowerShell automation experience.

Responsibilities

• Perform enterprise AD to Entra ID migrations and consolidation.
• Configure Entra ID synchronization and validate directory health.
• Deploy automation pipelines and pilot migrations.
• Provide Tier 3 escalation for permissions, ACL remediation, Kerberos/SSO issues.
• Monitor event/system logs and maintain OS patching baselines.

Skills

Active Directory

Entra ID / Azure AD

PowerShell

Kerberos / SSO

Enterprise IT

Education

Bachelor's Degree in Technology

Tools

WSUS

SCCM

SCOM

DNS

DHCP

AGPM

Job description

Overview Join a company with Extraordinary People and Exceptional Performance ! Chenega Professional Technical Services, LLC. , a Chenega Professional Services company, is looking for an expert level Windows Administrator IV , to perform enterprise identity and Active Directory (AD) migration to Entra ID and domain consolidation for a Federal Government customer.

A successful candidate must demonstrate expert level knowledge and experience in planning and executing AD to Entra ID migrations and consolidation activities and provide expert technical operations and maintenance (O&M) for the supported environment.

Responsibilities

• Work in coordination with the Project Manager and stakeholder to perform enterprise directory services, migration wave planning and communications, application owner engagement and compatibility testing, cutover execution with next-day support, and foundational operations & maintenance (O&M) of supported Windows-based services.
• Perform AD to Entra ID technical migration and identity management
• Configure Entra ID (Azure AD) identity synchronization and validate directory health as required to support migration.
• Deploy automation pipelines; execute pilot migrations (~200 test users) prior to full-scale cutover.
• Conduct controlled nightly batches Monday–Thursday (≤150 users per night) with pre/post validation.
• Implement Kerberos/SSO.
• Perform workstation/domain re-joins.
• Design and Execute PowerShell automation.
• Provide Tier 3 escalation for permissions, Access Control List (ACL) remediation, Kerberos/SSO issues, and workstation/domain re-joins.
• Perform PowerShell automation for bulk updates and monitoring.
• Execute identity cutovers and deliver next-day support to resolve authentication, profile, and application access issues including PIV certificate login troubleshooting.
• Monitor event/system logs and performance; maintain OS and software patching baselines (WSUS or equivalent).
• Assist in infrastructure planning, design, and implementation; develop project plans for transition, administration, and ongoing operations.
• Prepare authoritative runbooks for Tier 1 and Tier2 helpdesk support.
• Perform Foundational O&M
• Performance monitoring
• OS patching
• Backup/restore
• Configuration Management and Change Control
• Disaster Recovery testing
• Documentation and Training
• Daily status updates shall be provided before 12:00 PM MT, with urgent items escalated to PDA within one hour of identification.

Other duties as assigned

Qualifications

• ~ A Bachelor’s Degree in a technology field
• ~15 years of experience designing, configuring, and supporting Microsoft Windows system environments
• ~ Expertise with Active Directory, Active Directory Federated Services, and Azure AD and Entra ID
• ~ Kerberos/SSO
• ~ PowerShell automation
• ~ Large Enterprise experience
• ~ Strict Change Control

Desirable Qualifications

• Microsoft Certified: Windows Server Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Azure Administrator Associate (AZ-104)
• Experience with DNS, DCHP
• Experience with ACL
• Experience with Group Policy, AGPM
• Experience with SCCM
• Experience with SCOM
• Experience with WSUS

Knowledge, Skills and Abilities

• Authorized to work in the U.S. without sponsorship
• Must be able to pass the Public Trust Government background investigation
• Strong communication skills (both written and oral)
• Strong troubleshooting skills
• Ability to work closely with a small team
• Ability to work in a high stress environment
• Teleworking Permitted?
• Yes Teleworking Details
• 100% remote, onsite travel as required Estimated Salary/Wage

Up to USD $50.00/Hr.