System Administrator

Job Description

Job Description

Position Summary

Industrial Service Solutions is seeking a Senior Systems Administrator to secure, maintain, and improve a distributed Microsoft infrastructure spanning on-premises systems, Azure, and Microsoft 365. This position requires an experienced administrator who can independently troubleshoot complex issues, lead infrastructure projects, and follow work through to resolution. Security is a core responsibility across identity, servers, endpoints, networking, and cloud services, with particular attention to protecting company data and intellectual property.

The successful candidate combines hands-on technical depth with sound judgment, clear communication, and disciplined change management. They identify risks, recommend practical improvements, and implement changes while supporting business continuity.

Location: Camp Hill, PA 17011

Key Responsibilities:

Security and Identity

• Apply and maintain security baselines, system hardening, least privilege, MFA, and Conditional Access across supported systems.
• Administer Active Directory and Entra ID, including Group Policy, replication, hybrid identity synchronization, privileged accounts, service accounts, and access lifecycle management.
• Review administrative, vendor, and external-user access; maintain appropriate permissions and support periodic access reviews.
• Investigate security alerts and suspicious activity, support incident containment and recovery, and coordinate with the IT Manager and security providers.
• Prioritize vulnerability remediation and security updates based on risk; plan, test, deploy, and verify changes with recovery procedures.
• Maintain endpoint protection, encryption, local administrator controls, and secure remote access; support data protection, retention, and audit requirements.

Infrastructure and Operations

• Administer Windows Server, DNS, DHCP, file services, NTFS permissions, DFS namespaces, and certificate services.
• Manage Hyper-V hosts and virtual machines, storage capacity and performance, Remote Desktop Services, and FSLogix profiles.
• Administer Microsoft 365 services, including Exchange Online, Teams, SharePoint, licensing, and mail security; support Purview retention and eDiscovery activities under established procedures.
• Manage Azure virtual machines, storage, virtual networks, role assignments, monitoring, and resource costs.
• Troubleshoot network connectivity, VLANs, routing, firewall rules, site-to-site VPNs, and remote access across multiple business locations.
• Manage endpoints through Intune, Autopilot, application deployment, BitLocker, LAPS, and update policies.
• Maintain backup operations and disaster recovery runbooks; perform documented restore tests and validate recovery readiness.
• Lead infrastructure upgrades, migrations, and integrations; coordinate dependencies, vendors, implementation schedules, and production changes.
• Create and maintain PowerShell automation with appropriate logging, error handling, and safeguards.

Required Qualifications

• At least five years of progressively responsible systems administration experience, including independent ownership of production infrastructure and complex escalations.
• Strong hands-on experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, and permissions management.
• Practical security administration experience with identity protection, least privilege, vulnerability remediation, endpoint protection, and incident investigation.
• Experience administering Microsoft 365, Entra ID, and hybrid Microsoft environments.
• Experience with virtualization, backup and recovery, file services, and network troubleshooting.
• Working experience with Azure infrastructure and endpoint management through Intune or comparable tools.
• Ability to write, troubleshoot, and safely maintain PowerShell scripts.
• Demonstrated ability to plan changes, assess business impact, maintain recovery options, and verify results.
• Strong documentation, prioritization, communication, and problem-solving skills; ability to work independently and coordinate across teams.
• Relevant education, technical training, or equivalent practical experience.

Preferred Qualifications

• Experience supporting multiple sites, Active Directory forests and trusts, acquisitions, or tenant and domain migrations.
• Experience with Hyper-V, RDS, FSLogix, PKI, Entra Connect, and Microsoft Purview.
• Familiarity with Cloudflare Zero Trust/WARP, Sophos, UniFi, Resilio, Splashtop, or ConnectWise Automate.
• Experience securing engineering or CAD file workflows and protecting sensitive business information.
• Relevant Microsoft, Azure, networking, or security certifications.

Success in This Role

• Security issues are identified, prioritized, and resolved with documented evidence.
• Infrastructure remains reliable, and recurring incidents are reduced through corrective action and automation.
• Projects and escalations progress with limited supervision and clear status reporting.
• Documentation is usable by other technicians, and backup recovery is demonstrated through testing.