Senior Systems Engineer

The contractor will support OFR’s efforts to engineer, build, configure and maintain the OFR’s Windows, Cloud, Virtualization and Storage systems following best practices to better ensure that OFR designs, deploys and sustains secure, high quality, highly available information technology solutions that align with operational objectives. Duties include but not limited to: Expert in Active Directory/Entra ID administration in a Hybrid Environment Proficiency in Active Directory administration, FSMO roles, replication, and OU management Knowledge of PKI, CAC/ALT-token authentication, and certificate lifecycle management Expert in Microsoft 365 Management (Hybrid) administration including Exchange Online, Teams, and OneDrive for Business. Experienced in Virtualization; Manage and optimize virtualization platforms (e.g., VXRail/VMware/Horizon). Systems administration of Windows systems using PowerShell, scripting, and automation. Desktop/Laptop deployment and management. Amazon Web Services Windows instances deployment and administration - a plus SCCM (MECM) / Intune administration in a co-managed environment, including patching, package prep and deployment and reporting on Windows devices – a plus Documentation, development of system diagrams and SOPs Conducting integration testing, transition and acceptance and training from the Engineering phase to the production phase. Coordinate activities at the system interface boundaries with other contractors and Government organizations. Key Tasks & Responsibilities Microsoft Active Directory: Administer and maintain Active Directory (AD) and Group Policy Objects (GPOs). Manage user accounts, permissions, and security groups. Implement AD best practices and troubleshoot AD-related issues. Perform regular AD health checks and ensure system integrity. Administer DHCP, DNS, and file/directory permissions. Utilize PowerShell for automation, reporting, and system management. Manage folder and file share permissions following least‑privilege principles. Office 365 Management (Hybrid): Administer Office 365 environment, including Exchange Online, Teams, and OneDrive for Business. Manage user accounts, licensing, and service configurations. Lead and drive Microsoft 365 upgrades, migrations, and platform modernization effort. Implement best practices around identity, access, and compliance policies using Conditional Access, DLP, Sensitivity Labels, and Defender for Office 365. Virtualization: Manage and optimize virtualization platforms (e.g., VXRail/VMware/Horizon). Oversee virtual machine creation, configuration, and performance tuning. Ensure high availability and disaster recovery solutions for virtual environments. Troubleshoot and resolve virtualization-related issues. Server Maintenance: Oversee physical and virtual servers Monitor server performance, conduct regular updates, and perform backups. Troubleshoot and resolve server issues to minimize downtime. Implement and manage server security patches and updates. Documentation and Reporting: Maintain accurate and up-to-date documentation for all IT systems and procedures. Create and manage system diagrams, configuration records, and troubleshooting guides. Generate regular reports on system performance, security incidents, and project status. Collaboration and Support: Work closely with other IT staff, departments, and external vendors to resolve technical issues. Provide guidance and mentorship to junior IT staff and helpdesk personnel. Participate in IT planning and strategy sessions. Education & Experience 10+ or more years of IT experience in an Active Directory environment Experienced in M365 Hybrid environment (on-prem / M365) Experience with Windows PowerShell scripting. Must have experience in the following technologies: Expert in Active Directory/Entra ID administrationin a hybrid environment Experience with Okta, including installation, configuration, and migrations Certificate lifecycle management Expert in Microsoft 365 administration VxRail / VMware / Horizon management and administration Systems administration of Windows systems using PowerShell, scripting, and automation Manage Engine tools (ADManager/ADAudit/AD360) BeyondTrust (Bomgar) solutions experience a plus (Remote Assistance/PAM) Windows server deployment in cloud (AWS) and virtualized environments (VMware) (Windows 2019/20222 experience preferred) Documentation, development of system diagrams and SOPs Conducting integration testing, transition and acceptance and training from the Engineering phase to the production phase. Coordinate activities at the system interface boundaries with other contractors and Government organizations. Preference given for experience in the following technologies: Active Directory/Entra ID Microsoft 365 administration Certificate lifecycle management Skilled in using Active Directory Group Policies to manage and configure security settings on Windows as well as general Active Directory administration Worked in VMware environments with Horizon VDI solutions or Windows AWS Workspaces solution MDM Solution such as Intune Excellent written and verbal communications skills Certifications Preference given for Microsoft certifications Preference given for VMWare certification Preference given for Okta certification Security Clearance Public Trust High (Tier 4/BI) Risk Level Must be a US citizen or Lawful Permanent Resident Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.) The position is remote but preference is given to candidates in the DC metro area. $145,000 - $155,000 a year The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity. The posted range is appropriate for a typical candidate meeting, at a minimum, all the core requirements of the position. Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations. Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [emailprotected] . We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.