Job Description

Description

Windows System Administrator Colorado Springs, CO Active Top Secret/SCI Compensation Range: $120,000 - $160,000 Company Overview: Cornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government. Realizing early on that our most prized assets are our employees; we continually focus our attention on improving the overall work/life experience they have supporting the mission. Our Team is pushed every day to use their industry leading knowledge to provide end-to-end solutions to combat our nation's toughest and most secure problems. If you are looking for a place to not only be professionally challenged, but encouraged and supported by a company that cares, don't look any further than Cornerstone Defense. Job Responsibilities: • Windows Server Administration • Manage and maintain Windows Server instances in a highly available environment. • Oversee critical services such as DNS, DHCP, NTP, and WSUS. • Monitor and troubleshoot IIS-based web applications as needed. • Maintain Microsoft SQL Server instances, ensuring availability and resiliency. • Support Microsoft Exchange Server, including backup/restore operations and performance tuning. • Active Directory & GPO Management • Design, maintain, and optimize the Windows Active Directory environment, including user/group management and OU structure. • Develop and implement Group Policy Objects (GPOs) aligned with best practices and STIG/DoD security requirements. • Ensure role-based access control (RBAC) following DoD 8140 requirements and maintain secure delegated administration. • Perform regular Windows performance optimization and tuning tasks. • Security & Compliance (STIG/DoD Requirements) • Conduct regular STIG compliance checks, vulnerability assessments, and system audits. • Apply security hardening guidelines to servers, applications, and network configurations. • Collaborate with Security teams to respond to security incidents and maintain compliance. • Automation & Scripting • Develop, maintain, and implement PowerShell or other relevant scripts to automate repetitive tasks (e.g., user provisioning, patch deployment, system reporting). • Identify opportunities for automation within daily administrative tasks to increase efficiency and reduce human error. • Patch Management & System Updates • Coordinate and execute WSUS / patch management to ensure timely and compliant system updates. • Schedule and manage monthly/quarterly patch cycles, including out-of-band updates as required for security. • Test and validate patches prior to deployment in production environments. • Performance Monitoring & Troubleshooting • Use industry-standard monitoring tools to proactively identify and resolve performance bottlenecks for Windows and Linux systems • Conduct root-cause analysis for complex technical issues and system outages. • Documentation & Knowledge Sharing • Maintain comprehensive system documentation, including architecture diagrams, SOPs, and knowledge base articles. • Provide mentorship, guidance, and training to junior-level administrators and service desk personnel. Required Skills: • Minimum of 5+ years supporting Windows-based server environments (Tier 3 level). • Strong background with Windows Server 2012/2016/2019/2022 (deployment, management, optimization). • Hands-on experience with Active Directory, DNS, DHCP, NTP, and Group Policy configuration. • Demonstrated understanding of STIG/DoD security compliance requirements and related best practices. • PowerShell (or equivalent) scripting for process automation and configuration management. Desired Skills: • Experience with virtualization platforms (e.g., VMware, Hyper-V). • Proficiency with Microsoft Exchange and Microsoft SQL Server administration. • Familiarity with IIS configuration and support. • Background in network protocols (TCP/IP, subnetting, VLANs, etc.). • Experience with Ansible Automation. • Education: • Bachelor's Degree in Computer Science, Information Systems, or related field (or equivalent work experience). • Microsoft certifications (e.g., MCSE, MCSA), CompTIA Security+ (or equivalent DoD 8570 baseline), or other relevant certifications. • Other Requirements: • Must be a U.S. Citizen and able to obtain and maintain a TS//SCI security clearance. • Excellent troubleshooting, communication, and documentation skills. • Ability to work both independently and collaboratively within a team-oriented environment. Benefits Overview : Cornerstone Defense offers a very comprehensive benefits package including, but not limited to: Medical, Dental and Vision Plans * Generous PTO Policy * 401(k) * HSA and FSA options * Life and Disability Insurance * Tuition Reimbursement and Training * Perks at Work Discount Program * Referral Program * Leads Generation Program * CollegeAmerica 529 * Fitness Reimbursement Program * Travel Assistance * Norton Lifelock Benefit Solutions * Life Planning Financial & Legal Services *