Windows Systems Engineer with Azure

Accord Technologies Inc; Columbia (SC); Remote; USD 90,000 - 120,000; Part time

Job summary

Accord Technologies Inc in Columbia, SC (remote) is seeking a Windows Systems Engineer with Azure to join the Server Operations team. You will manage Active Directory, Group Policy, and permissions at scale, implement CIS baselines through GPO and scripting, and develop PowerShell-based administration and automation across endpoints and Windows servers.

The role emphasizes Azure DevOps for workflow, formal service requests and change controls, and cross-skilling with the Senior Server

Qualifications

• Experience with AD domain services, replication, delegation and DC troubleshooting.
• Design, implement and troubleshoot Group Policy across large environments.
• Develop and maintain PowerShell scripts for administration and automation.
• Implement CIS baselines via GPO and scripting on Windows endpoints.
• Administration and lifecycle management of Windows Server at scale.
• Document processes with SOPs and runbooks; maintain change records.
• Work from Azure DevOps boards within formal service request/change controls.

Responsibilities

• Execute AD, Group Policy, and permissions work backlog: create/modify/test/retire GPOs and manage delegation.
• Implement CIS baselines through GPO and scripted remediation based on senior guidance.
• Design and maintain PowerShell for administration, auditing, remediation, and reporting.
• Automate repetitive tasks with tested scripts and documented processes.
• Manage Windows Server lifecycle: build, patch, upgrade, and decommission at scale.
• Log and track work items in Azure DevOps and follow change control procedures.
• Cross-skill with Senior Server Administrator to share CIS/AD knowledge across the team.
• Take on additional on-prem duties as directed by the Manager.

Skills

Active Directory

Group Policy

PowerShell

Windows Server

Azure administration

SOP / runbooks documentation

Change control processes

Tools

Azure DevOps

PDQ packaging

Job description

Job Title: Windows Systems Engineer with Azure

Job Location: Columbia, SC (remote)

Position Type: W2 Contract

Duration: 12 months.

Primary Skills: Active Directory (domain services, replication, delegation, permissions, domain controller troubleshooting), Group Policy (design, scoping, filtering, troubleshooting, change control), PowerShell (modules, error handling, remote execution, scheduled/unattended scripts, AD/GPO automation), CIS benchmarks implementation via GPO and scripting, Windows Server administration and lifecycle management (build, patching, upgrading, decommissioning), Azure DevOps, service request and change control processes, SOP and runbook documentation

Preferred Skills: Task automation and orchestration platforms, endpoint patch management (third-party application and Windows OS patching), third-party application packaging and deployment automation (such as PDQ), PKI and AD Certificate Services operations, Azure cloud services administration

Position Overview

The Windows Systems Engineer with Azure reports to the Server Operations Team Manager and is a peer to the Senior Server Administrator. The role executes the Active Directory, Group Policy, and permissions work backlog, implements CIS baselines through GPO and scripted remediation, designs and maintains PowerShell for administration and automation, and manages the Windows Server lifecycle at enterprise scale. Work is assigned and prioritized by the Server Operations Team Manager and tracked in Azure DevOps, with formal service request and change control processes. The engineer will cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared across the team.

Daily Duties / Responsibilities

Technical

• Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.
• Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction.
• Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.
• Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.
• Manage the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.
• Log, update, and track all work items in Azure DevOps.
• Work service requests and change controls through the Service Management tool, following the team's change process.
• Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs.
• Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.
• Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager. Non-Technical
• Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager's oversight.

Required Skills

• 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting
• 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment
• 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation
• 3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting
• 5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning
• Experience with documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups
• Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes

Preferred Skills

• Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms
• Endpoint patch management experience, including third-party application and Windows OS patching
• Third-party application packaging and deployment automation, including application bundles (such as PDQ)
• PKI and AD Certificate Services operations
• Azure cloud services administration

Additional Skills

• Success is assessed against metrics established with the Manager and tracked in Azure DevOps, including AD/GPO backlog reduction, CIS items implemented, and script and documentation coverage.
• AD/GPO backlog reduced and tracked in Azure DevOps.
• CIS items implemented per the Senior's direction, with before and after state recorded.
• Core administrative and remediation tasks covered by tested, documented PowerShell, with a baseline script library in Azure DevOps.
• All work product, including scripts, code, and documentation, stored in Azure DevOps as property of the branch, with no work held locally or in personal storage.
• Tested coverage on AD/GPO and PowerShell-based processes, so that more than one person can run and support them.
• SOPs for recurring AD/GPO and hardening tasks written and reviewed by the Senior.