System Administrator III

For more than 50 years, Photronics has been a global leader in photomask technology-powering the innovation behind smartphones, computers, automotive technology, and countless devices used every day. Our success is built on quality, collaboration, and the dedication of our people. Join us and be part of a company recognized for cutting-edge technology, exceptional service, and strong customer partnerships.

Photronics is seeking a seasoned Windows Systems Administrator will take hands-on ownership of the Windows platform at the Allen, TX site while supporting Photronics' global Windows infrastructure. This role serves as a senior technical authority and escalation point for Windows services, with responsibility for providing coverage and support across multiple global locations as needed.

The position is responsible for driving a secure, stable, and scalable Windows environment through strong operational discipline, automation, documentation, and cross-team collaboration. Responsibilities include maintaining and enhancing system performance, leading standardization efforts, and supporting both local and global IT operations while ensuring consistency across the Windows ecosystem.

This role is critical to ensuring Photronics maintains a resilient and efficient Windows platform that supports business continuity worldwide. As a key technical leader, the position plays an important role in strengthening and standardizing the organization's Windows environment while enabling reliable operations across all sites.

This role focuses on Microsoft Azure infrastructure and identity services (including Entra ID) and does not serve as an Office 365 application administration role.

Location

Texas Office - Allen, TX. This is an on-site position and we are not open to remote candidates at this time.


Travel

Limited travel as needed.


Responsibilities

Windows Platform & Core Services

• Own and administer Windows Server (2012-2022+), including lifecycle management, hardening, and upgrades
• Manage Active Directory Domain Services (forests, trusts, FSMO roles, Sites & Services)
• Design and troubleshoot Group Policy (security baselines, delegation, issue resolution)
• Support enterprise DNS, DHCP, and AD Certificate Services (PKI), including lifecycle, automation, and recovery

Microsoft Azure & Hybrid Identity Platform

• Own and support Microsoft Azure services as they relate to infrastructure, identity, and security (excluding Office 365 workloads)
• Administer and maintain Microsoft Entra ID (Azure AD), including hybrid identity design, synchronization, authentication flows, and conditional access integration
• Manage Azure IaaS and PaaS components relevant to enterprise infrastructure (e.g., Azure virtual machines, networking, storage, backup, recovery, and monitoring)
• Design and support hybrid identity and access models across on-premises Active Directory and Azure
• Implement and maintain secure identity practices including MFA, privileged access, role based access control (RBAC), and identity lifecycle management
• Partner with Security and Architecture teams to ensure Azure configurations align with enterprise security, compliance, and governance standards
• Support Azure logging, monitoring, and operational visibility using native Microsoft tooling
• Contribute to Azure platform standardization, documentation, and operational runbooks across global sites

Data Center Operations & Resiliency

• Support storage integrations (SAN/NAS, iSCSI, multipathing) and Windows storage features
• Operate and validate backup and recovery solutions (e.g., Veeam), ensuring RPO/RTO alignment
• Implement high availability solutions (Failover Clustering, load balancing coordination)
• Support disaster recovery planning, testing, and failover execution

Global Support & Technical Leadership

• Serve as senior escalation point for complex incidents and platform issues
• Lead root cause analysis (RCA) and corrective action planning
• Ensure alignment between enterprise standards and global site execution
• Collaborate with Network, Virtualization, Linux, Security, and Application teams
• Mentor junior administrators and promote operational consistency

Automation & Operational Excellence

• Develop automation using advanced PowerShell and configuration management tools (e.g., DSC)
• Leverage monitoring and patching tools (SCOM, Nagios, CheckMK, WSUS, SCCM) to improve stability
• Create and maintain runbooks, procedures, and operational documentation

Security, Compliance & Risk

• Implement Windows security hardening aligned to CIS/STIG standards
• Enforce credential and authentication best practices (Kerberos, NTLM reduction, LSA protections)
• Support audits (SOX, ISO, CMMC) and drive remediation efforts

Change, Incident & Problem Management

• Strong documentation and communication skills (technical and executive-level)
• Lead incident response and support global issue resolution
• Review changes for risk, readiness, and maintenance window alignment
• Identify recurring issues and implement permanent fixes to reduce technical debt
• Provides global Windows administration support and backfill coverage across regions as needed
• May require occasional off-hours support for global operations and major incidents

Qualifications

Knowledge, Skills & Abilities

• Strong documentation and communication skills (technical and executive-level)
• In-depth understanding of Windows Server, Active Directory, Group Policy, DNS/DHCP, and PKI
• Advanced PowerShell scripting and automation for operational efficiency
• Strong troubleshooting, root cause analysis, and problem-solving skills
• Familiarity with high-availability, clustering, and enterprise storage concepts
• Ability to lead, mentor, and collaborate effectively with cross-functional and global teams
• Strong hands-on experience with Microsoft Azure infrastructure services (non-O365)
• Deep understanding of Microsoft Entra ID and hybrid identity architectures

Experience

• 6-8 years of enterprise-level, hands-on network engineering and operations experience.
• Strong preference for experience transitioning network operations from a managed service or outsourced NOC to an internal team.
• Extensive experience with Fortinet FortiGate firewalls; Fortinet NSE certification strongly preferred.
• Deep knowledge of Juniper and Cisco platforms, including advanced routing and switching concepts.
• Proven experience designing and deploying Layer 2 / Layer 3 WAN architectures, including large-scale Ethernet WANs.
• Experience with monitoring and automation tools such as SolarWinds, Datadog, Grafana, Prometheus, or similar platforms.
• Familiarity with automation and scripting (Python, Ansible, Netmiko) and AIOps methodologies.

Education

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Professional certifications such as CCNP, JNCIP, or Fortinet NSE 4/7 are highly desirable.

Compensation & Benefits

• Competitive salary + bonus potential
• Comprehensive health, dental, and vision insurance
• 401(k) with company match
• Generous PTO and paid holidays
• Career development and training opportunities
• Collaborative, inclusive workplace culture

Equal Opportunity Statement

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. We are committed to providing reasonable accommodation for team members' disabilities and religious beliefs or practices.

Agency Notice

Photronics does not accept unsolicited resumes or outreach from search firms or employment agencies. Please, no phone calls or emails to any employee regarding this opening. Resumes submitted outside of our approved agency engagement process will be considered the sole property of Photronics, and no fees will be paid if such candidates are hired. Only agencies with a valid agreement in place with Photronics and assigned to this role may submit candidates.