Systems Administrator - Core Services (Microsoft)

Place of Performance:  National Capital Region (Pentagon and JSP-designated alternate sites) - You MUST reside in the DC Metro Area to be considered 

SHR – Software Hardware Re-engineered

About SHR Consulting Group:

SHR is a premier technology integrator solving our nation’s most complex modernization and readiness challenges across the defense, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration, enterprise IT, including cloud services: cyber, software, advanced analytics, and AI. With an intimate understanding of our customers’ challenges and deep expertise in existing and emerging technologies, we integrate the best components from our own portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions.

We are a rapidly growing organization seeking experienced Core Services Systems Administrators (multiple openings) to operate and maintain the Microsoft Core Services portfolio supporting the DISA Joint Service Provider (JSP). This portfolio provides user authentication, file share availability, workstation connectivity, server monitoring, printing, and messaging services across approximately 21 Active Directory domains, 2,500 Windows servers, and 300 Linux servers in NIPR, SIPR, TIPR, and JWICS security domains. This single posting covers Senior Systems Administrators and Systems Administrators supporting Domain Services, Exchange, SMTP Gateways, Print Services, and System Center Operations Manager (SCOM).

Key Responsibilities:

• Operate and maintain Active Directory, DNS, DHCP, and Distributed File System (DFS) infrastructure across approximately 21 AD domains; manage Active Directory Security Groups, Group Managed Service Accounts (gMSA), Organizational Units, and Group Policy Objects in accordance with Microsoft Security Administrative Environment guidance.


• Administer the JSP Microsoft Exchange Server environment supporting approximately 5,000 mailboxes on JWICS, including monitoring, mailbox provisioning, system upgrades, backup/restore, and patching.


• Operate and maintain enterprise SMTP gateways (currently Symantec Messaging Gateways) on NIPR and SIPR networks; maintain SMTP routing tables, MX/SPF/DKIM records, and the SMTP Outbound Client list in compliance with security policy.


• Operate and maintain the JSP enterprise Print Services environment: manage print servers, print drivers, print queues, and scaling for customer demand; coordinate with JP5/JP7 during major upgrades and lifecycle refresh.


• Operate and maintain the System Center Operations Manager (SCOM) deployment on NIPR, SIPR, and JWICS, including management servers, gateway servers, and Linux SSH/SSL monitoring; ensure systems are maintained with the latest Management Packs and that alerts function correctly.


• Identify, analyze, and resolve problems affecting system operations across all assigned core services; meet Group 1 restoral AQLs (CCIR Priority 1 – 2 hours; Priority 2 – 4 hours; Priority 3 – 6 hours) more than 90% of the time.


• Schedule and perform routine backups; test and validate backup procedures at least annually; store backups away from the proximity of the physical system.


• Apply security patches, GPO changes, and configuration updates to maintain compliance with DoD STIGs, IAVM notices, and other cyber tasking; collaborate with cyber teams on compliance scanning and endpoint analysis.


• Maintain DoD/NSS PKI server certificates and ensure they are issued/renewed within 30–15 days before expiration; maintain a tracker of expiration dates.


• Coordinate with the JSP Transport, Networks, and JP5/JP7 teams during major system upgrades, firewall changes, and hardware lifecycle refresh activities.

Minimum Qualifications:

• Five (5) or more years of hands-on experience administering Microsoft Windows Server in a large enterprise environment (3 years for the System Administrator variant).


• Strong experience with at least two of the following Core Services areas: Active Directory/DNS/DHCP/DFS, Microsoft Exchange Server, SMTP gateways/messaging security, Microsoft Print Services, or Microsoft System Center Operations Manager (SCOM).


• Working knowledge of CAC/PKI, DoD-issued SSL certificates, Group Policy, and complex multi-domain/multi-forest AD environments.


• Experience implementing DISA STIGs and supporting IAVM remediation against Windows Server platforms.


• Familiarity with virtualization (VMware vSphere/ESXi), backup and restore tooling, and enterprise monitoring tools.


• PowerShell scripting experience strongly preferred for automation of routine administrative tasks.


• For the Senior variant, demonstrated experience leading subject-matter design and complex troubleshooting across geographically dispersed, load-balanced, clustered server architectures isrequired.


• Strong troubleshooting, documentation, and customer-service skills; ability to support after-hours and on-call rotations.

Education Requirement:

• Bachelor’s degree in Computer Engineering, Computer Information Systems, Telecommunications, Management Information Systems, or a related field; or equivalent combination of education and five (5) recent years of documented relevant experience.


• Must meet DoD 8570.01-M / DoD 8140 IAT Level II baseline certification requirements prior to start (e.g., Security CE, CCNA-Security, CySA , GICSP, GSEC, or equivalent). Computing Environment certification appropriate to the role is also required.

Clearance Requirement:

• U.S. Citizenship


• Active Secret Clearance (or higher)


• Must comply with all DoD, DISA, and JSP security and access protocols, including the ability to access NIPRNet and SIPRNet environments.

Work Environment:

• 100% onsite at a government facility within the National Capital Region (NCR), primarily at the Pentagon, Crystal Gateway, Taylor Building, Mark Center, or other JSP-designated alternate site. Must be local to the DC Metro Area with reliable transportation and have a valid driver's license.


• Must comply with all DoD, DISA, and JSP security and access protocols, including the ability to access NIPRNet and SIPRNet environments.

Benefits:

• Competitive salary based on experience


• Comprehensive benefits package including health, dental, vision, and retirement plans


• Paid time off and holidays

We are an Equal Opportunity Employer and consider all qualified applicants without regard to protected characteristics under applicable law. EEO/AA Employer/Veteran/Disabled.