Cloud Systems Administrator

Cloud Systems AdministratorThornton Tomasetti applies engineering and scientific principles to solve the world's challenges. An independent organization of creative thinkers and innovative doers collaborating from offices worldwide, our mission is to bring our clients' ideas to life and, in the process, lay the groundwork for a better, more resilient future. We provide support and opportunities to our employees to achieve their full potential and cultivate a rewarding career.Thornton Tomasetti is seeking a Cloud Systems Administrator with two areas of responsibility: the Windows infrastructure in Azure and our Virtual Desktop Infrastructure platform. You will administer Windows Servers, Active Directory and Group Policy, Microsoft Entra ID, and Azure infrastructure services. On the VDI side, you will administer Citrix DaaS platforms and supporting services. Both areas span commercial and U.S. Government environments.What You'll DoCollaborate with IT leadership, end-users, and the network, security, and endpoint teams to continually improve our government and commercial cloud environments.Identify opportunities for automation for server, identity, cloud, and VDI operations to reduce manual effort, and improve performance and reliability.Contribute to platform modernization projects to keep our infrastructure secure, reliable, and efficient.Assist with the deployment of Azure and Citrix DaaS Government services, Windows Server workloads, and other supporting cloud services using best practices.Utilize automation (PowerShell, Bicep, Azure Automation) to standardize and accelerate deployment and configuration.Coordinate with endpoint delivery teams to ensure applications are deployed consistently across both VDI environments.Administer Windows Server systems including patching, hardening, roles and features, certificates, and monitoring.Administer Active Directory and maintain Group Policy for servers and VDA policy, keeping virtual desktop policy deliberately aligned with the corresponding Microsoft Intune policies applied to laptop endpoints.Administer and optimize Citrix DaaS platforms, with a special focus on optimizing the user experience.Manage Azure VMs, Azure Storage accounts, and Azure File Sync.Assist with identity and access management for applications and staff across Active Directory and Microsoft Entra ID.Maintain automated backup, restore, and high availability across VDI, server, storage, and cloud systems.Perform work in our government environment in accordance with applicable security and compliance requirements, support the controls and evidence those requirements depend on, and protect the integrity and security of enterprise data across all platforms.Provide 3rd level support to our helpdesk and staff for Azure, Windows Server, Citrix DaaS, and identity issues, track work in ServiceNow, and use automation and documentation to proactively mitigate recurring problems.Maintain detailed documentation of configurations, automation scripts, and processes, to accelerate code and documentation work where appropriate.Maintain the Citrix NetScaler high-availability pair and Citrix StoreFront, including TLS certificate renewals, firmware updates, and routine troubleshooting of connectivity and authentication issues.What You'll BringRequiredBecause this role includes working with systems that handle U.S. Government Controlled Unclassified Information (CUI) and export-controlled information, candidates must be a U.S. citizen and be able to successfully complete a U.S. Government background investigation after their employment begins. Obtaining and keeping this authorization is a condition of employment in this role.Associate degree in computer science or higher (or equivalent experience).3+ years in IT system administration, including Windows Server and Active Directory.Hands-on experience administering Windows Server, including patching, hardening, roles and features, and certificates.Hands-on experience administering Citrix DaaS or Citrix Virtual Apps and Desktops.Hands-on experience administering Active Directory and Group Policy, including domain controllers, DNS, organizational units, groups and accounts, and GPO design and troubleshooting.Hands-on experience provisioning and configuring Azure VMs, storage accounts, and Azure Files.Experience with identity and access management across Active Directory and Microsoft Entra ID, including group-based access, multi-factor authentication, and Conditional Access.Experience managing Windows desktop policy and user profiles with GPOs and Microsoft Intune.Proficiency in PowerShell scripting to automate administrative tasks.Familiarity with networking concepts (VNets, VPNs, firewalls, load balancers) and their integration with cloud platforms.Experience with backup, recovery, and security practices in virtualized and cloud environments.Strong troubleshooting, problem-solving, documentation, and communication skills.Based in Austin, Chicago, or New York office although other US office locations may be considered.PreferredFamiliarity with U.S. Government compliance frameworks (NIST SP 800-171, CMMC, FedRAMP) and CUI handling; experience in Azure Government, Microsoft 365 GCC High, or another regulated cloud, including CIS or DISA STIG hardening.Experience administering Microsoft Entra ID Enterprise Applications and App Registrations for SSO and SCIM provisioning.Experience with infrastructure-as-code, particularly Bicep, and with Azure DevOps or GitHub-based deployment pipelines.Experience with Citrix NetScaler (ADC) operations, such as certificate renewals, updates, and troubleshooting, and with Citrix StoreFront.An active or previously held U.S. security clearance.Certifications: Microsoft Azure Administrator (AZ-104), Microsoft Identity and Access Administrator (SC-300), Windows Server Hybrid Administrator (AZ-800/AZ-801), or Citrix Certified Associate – Virtualization (CCA-V).People successful in this positionExcel at prioritizing tasks and staying organized in a dynamic environment.Are proactive in identifying and implementing continual improvements to drive efficiency.Are disciplined about following process in a compliance-bound environment.Enjoy learning new technologies and solving complex problems.Thrive in a collaborative, global team setting.Reflect Thornton Tomasetti's core values of innovation, excellence, and client focus.CompensationThe rate for this position generally is $1,000 - $800,000 annually. This range is a good faith estimate provided pursuant to the New York Pay Transparency Law. It is based on what a successful New York applicant might be paid and assumes that the successful candidate will be in New York or perform the position from New York. Similar positions located outside of New York will not necessarily receive the same compensation. Actual pay rates may vary from the range, as permitted by New York Equal Pay Transparency Law. Compensation offers will be based on various factors, including operational needs, individual education, qualifications and experience, work location and comparison to employee already in the role, as well as other considerations permitted by law. A potential new employee's pay history will not be used in compensation decisions.BenefitsDepending on your employment status, benefits may include:Medical, Dental, Vision, Life, AD&D, Disability and other voluntary benefitsFlexible Spending Accounts for Medical and ChildcarePaid Time Off, Family Leave for New Parents, Volunteer TimeTuition ReimbursementCommuter Transit (where available)401k retirement savings with Company matching on employee contributions and/or qualified student loan repaymentsFitness ReimbursementAnd other various wellness, diversity/inclusion and employee resource programs and initiativesPursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Thornton Tomasetti is proud to be an equal employment workplace. Individuals seeking employment at Thornton Tomasetti are considered without regards to age, ancestry, color, gender (including pregnancy, childbirth, or related medical conditions), gender identity or expression, genetic information, marital status, medical condition, mental or physical disability, national origin, protected family care or medical leave status, race, religion (including beliefs and practices or the absence thereof), sexual orientation, military or veteran status, or any other characteristic protected by federal, state, or local laws.