Systems Administrator III

job summary:
We are seeking a Senior Windows Systems Engineer to serve as a technical lead for a critical federal agency contract. In this role, you will hold design and architectural ownership over the enterprise Windows Server and Microsoft Azure cloud environment, ensuring high availability, modern automation, and strict federal security compliance.

 
location: Washington, Washington, D.C.
job type: Contract
salary: $51 - 61 per hour
work hours:
education: Bachelors

responsibilities:
KEY RESPONSIBILITIES

• Architect, deploy, and maintain Windows Server infrastructure (2019/2022/2025) and Microsoft Azure cloud environments.
• Configure identity, access control, and single sign-on using Microsoft Entra ID, Active Directory, and federated identity solutions.
• Implement Zero Trust security principles, Azure Policy frameworks, and federal security hardening (STIGs / CIS benchmarks).
• Automate infrastructure provisioning using PowerShell, Python, Bash, and Infrastructure-as-Code (IaC) tools.
• Deliver Tier-3 escalation support, resolve complex operational incidents, and author technical SOPs.

qualifications:
REQUIRED QUALIFICATIONS

U.S. Citizenship and ability to obtain/maintain a federal Public Trust clearance prior to start.

Bachelor's degree in CS/IT with 8+ years (or Master's with 6+ years) of progressive Windows Systems Administration and Engineering experience.

Minimum 6 years of experience in cloud operations and Microsoft Azure engineering.

Minimum 3 years in a lead role with design/architecture ownership in an enterprise Windows environment.

Strong experience in Active Directory, PKI / AD CS, Group Policy, and security hardening (NIST/FISMA/STIGs).

Proficiency in scripting (PowerShell, Python, or Bash) for infrastructure automation.

Local to the Greater Washington, DC area for hybrid/onsite support as needed.

PREFERRED QUALIFICATIONS

Microsoft Certified Azure Administrator Associate (AZ-104).

Current DoD 8570/8140 IAT Level II baseline certification (e.g., Security+, SSCP, GSEC).

Experience with configuration management tools (Ansible, Chef, Puppet) and CI/CD pipelines.

Experience with ServiceNow and ITIL4 service management processes.

skills:
Active Directory,AWS,Ansible,Microsoft Entra ID,Azure AD,Bash,CIS benchmarks,Cloud Operations,DNS,DHCP,hybrid cloud environments,hybrid cloud,IT infrastructure,enterprise IT systems,Infrastructure-as-Code tools,IaC tools,load balancers,Azure cloud platform,Microsoft Azure,Azure Infrastructure,Azure,Visio,Microsoft Visio,Windows Systems,Windows,PKI,Python,RAID,scripting,virtual server,ServiceNow,SCSI,Symantec Endpoint Protection,configuring,system architecture,Systems Engineer,VPNs,Visual Basic,PowerShell,Windows server,Windows Server environments,Zero Trust principles,Zero Trust,self-starter,access control,Administration,design and architecture,architecture,automation,Automation & Scripting,enterprise security,diagramming,FISMA,Group Policy Objects,NIST SP 800-53,infrastructure,lifecycle management,mentoring,Microsoft Certified Azure Administrator Associate (AZ-104),NIST 800-53,Federal Compliance,security,technical documentation,technical leadership

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact View email address on randstadusa.com.


Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.