Lead Windows Administrator

Responsibilities

• Oversee endpoint management and IT workflows to ensure a secure, reliable, and seamless end-user experience.
• Lead patch management efforts, including planning, testing, and deployment of patches to ensure functionality, compatibility, and minimal disruption to existing infrastructure and applications.
• Proactively monitor and remediate security vulnerabilities in coordination with security teams, implementing measures to mitigate risks.
• Manage automation and workflow optimization for device provisioning, patch management, encryption, software deployment, and other IT workflows.
• Leverage scripting and automation tools such as PowerShell, Ansible, SCCM, and Intune to streamline and enhance desktop engineering processes.
• Provide technical leadership and oversight of endpoint security and encryption management activities.
• Serve onsite at the Fairchild Building in Washington, D.C., five (5) days per week, ensuring direct support and operational oversight.

Required Experience

• 8-10 years of professional experience in Windows systems administration or a related area as an individual contributor.
• Proven track record in supporting large-scale enterprise IT environments with responsibility for Windows workstation support, imaging, patch management, and software deployment.
• Demonstrated experience managing Active Directory, Group Policy, and enterprise-level system administration

Required Skills

• Expert-level proficiency in Windows workstation imaging, patch management, COTS and GOTS software deployment, encryption, and automation.
• Strong knowledge of Windows Desktop and Server operating systems and associated technologies.
• Advanced proficiency in PowerShell scripting for automation and administrative task management.
• Hands-on expertise with Group Policy management and troubleshooting.
• Strong understanding of security best practices, including implementing and maintaining security measures within Active Directory.
• In-depth knowledge of Active Directory architecture, design, backup, and recovery solutions.
• Proficiency in BIOS management, BitLocker and encryption-at-rest solutions, Microsoft Administrative tools, M365, and Azure management/reporting systems.
• Skilled in supporting Microsoft Enterprise management systems, Microsoft Endpoint Configuration Manager (MECM), and Intune/Entra AD.

Required Education

• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related discipline (preferred)

Required Certifications

• CompTIA A+, Microsoft Certified Solutions Expert (MCSE), or equivalent certification.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Other

Industries

• IT Services and IT Consulting