Senior Microsoft Systems Administrator

Senior Microsoft Systems Administrator

A Senior Microsoft Systems Administrator is responsible for leading efforts to enhance the security posture of Windows servers and workstations through comprehensive implementation of NIST SP 800-53 security controls. This role involves configuring, hardening, and maintaining Microsoft environments in alignment with cybersecurity standards, ensuring ongoing compliance and security. It is a senior-level position suited for candidates with extensive experience in Microsoft systems administration and security best practices.

Responsibilities

• Install, configure, harden, patch, and maintain Windows Server (2019/2022+) and Windows 10/11 workstations according to NIST SP 800-53 Rev. 5 controls.
• Implement and validate security controls across various families including Access Control, Configuration Management, Identification & Authentication, Audit & Accountability, and System & Communications Protection for endpoints and servers.
• Manage Group Policy Objects (GPOs), security baselines, and Intune/Microsoft Endpoint Manager policies to enforce NIST-aligned configurations such as password policies, account lockout, least privilege, firewall rules, AppLocker, and BitLocker.
• Perform system hardening tasks by enforcing deny-by-default policies, configuring host-based firewalls and intrusion detection/prevention systems, implementing multi-factor authentication, managing privileged accounts, and enabling cryptographic protections for data at rest and in transit.
• Remove unnecessary services, features, and default accounts to enhance security measures.
• Administer Microsoft security and compliance tools, including Active Directory, Microsoft Endpoint Configuration Manager (SCCM/MECM), Microsoft Intune, Azure AD/Entra ID, Defender for Endpoint, and Azure Policy for hybrid/cloud environments.
• Document security plans (SSP), control implementation procedures, Plan of Action & Milestones (POA&Ms), and maintain evidence for NIST 800-53 controls throughout project execution.
• Develop PowerShell scripts to automate compliance checks, security configurations, and reporting activities.

Qualifications

• Minimum of 4 years of hands-on experience managing Windows servers and workstations within enterprise environments.
• Proven experience in implementing NIST SP 800-53 security controls on Microsoft platforms.
• Proficiency with Microsoft administration tools such as Active Directory, Group Policy, PowerShell, SCCM/MECM, Intune, and Defender for Endpoint.
• Strong understanding of NIST 800-53 control families, including Access Control, Audit & Accountability, Configuration Management, Identification & Authentication, and System & Communications Protection.
• Extensive experience with system hardening techniques, baseline configuration management, and least privilege security principles.
• Familiarity with vulnerability management and compliance tools such as Nessus/Tenable or similar solutions.
• Strong scripting skills, particularly with PowerShell, to automate compliance processes and security tasks.
• This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required.

Publishing Pay Range: $110,000.00 – $130,000.00 Annually

This position is based in the office and requires employee to work on-site.

At GDH, we believe in the power of people and the importance of caring. Our culture statement, "We care about people," isn't just a tagline – it's the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs.

GDH, founded in 2001, has grown into a leader in providing staffing solutions across various industries. We specialize in IT across several sectors, connecting top talent with leading enterprises. As a Best of Staffing firm recognized for excellence in client, employee, talent, and women's services, we pride ourselves on our commitment to quality and service.

GDH offers a range of employee benefits that are designed to promote well-being and help maintain a healthy work-life balance. These comprehensive benefits cover various aspects of an employee's life and aim to enhance their overall experience with the company. Our health benefits include three medical insurance options with access to KISx Card, Zero Card, and HealthJoy concierge services. Other plan offerings include dental, vision, life, disability, supplemental insurance, and pet insurance plans. Enjoy additional perks like holiday pay, 401(k) plan, direct deposit, an employee referral program, work-life balance benefits, a Wellbeats membership, a discounted gym membership program, and more! For more detailed information on benefits, please go to GDH's website under the tab for candidates.

GDH provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, gender, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, ancestry, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable federal, state, and local laws. Applicants with disabilities who require an accommodation or assistance in applying and/or for interviewing, please contact our HR Department.

Please visit our notice of collection for California applicants.