Microsoft Server & Azure IaaS Administrator

Job Description

Summary
:
This Microsoft infrastructure administrator will assist with management of Windows Server, Active Directory, Group Policy, IIS, and Azure IaaS resources. The role will handle day‑to‑day operations, security hardening, automation, and high‑availability support across on‑premises and cloud environments. It will partner closely with network, security, and application teams to ensure reliable service delivery and continuous improvement.

• Windows Server Administration: Configure and maintain Windows Server (2016–2025), manage roles/features (AD DS, DNS, DHCP, DFS, File Services), patching, performance tuning, capacity planning.
• IIS Administration: Configure and support IIS websites and applications, including application pools, bindings, SSL/TLS certificates, URL Rewrite/ARR, security hardening, log analysis; optimize availability and performance.
• Active Directory: Maintain domain health and replication; manage OU structure, users, groups, GMSAs, service accounts, delegated permissions; troubleshoot authentication/Kerberos/NTLM issues.
• Monitoring & Troubleshooting: Use native tools and platforms (Event Viewer, Perf Mon, Azure Monitor, Log Analytics) to proactively detect and resolve issues impacting availability, performance or security.
• Group Policy: Design, implement and maintain GPOs for security baselines, server configurations and compliance; perform impact testing and change control.
• Security & Compliance: Apply CIS/Microsoft security baselines, TLS configurations, vulnerability remediation, endpoint hardening and log review; partner with security for audits and incident response.
• Automation & Scripting: Build Power Shell scripts/modules to automate routine tasks (provisioning, patching, reporting) and Infrastructure-as-Code (e.g., Bicep/ARM/Terraform) for repeatable deployments.
• Documentation & Change Management: Produce and maintain SOPs, diagrams, inventories and runbooks; follow ITIL change/incident processes; contribute to knowledge base.
• Collaboration & Support: Serve as escalation point for server/web platform issues; coordinate with app owners on deployments, certificates and integration.
• Lifecycle & Projects: Lead or support upgrades, migrations, re‑platforming and cloud adoption initiatives; drive standardization and modernization.
• IRS 1075 Compliance: Provide answers and documentation and implement changes required as part of IRS audit findings.

• Experience: 5–7+ years administering Windows Server, AD, GPO and IIS in mid‑to‑large enterprise environments.
• Technical Proficiency: Group Policy design and troubleshooting (RSOP, GPMC, GPResult); IIS configuration, SSL/TLS, bindings, app pools, URL Rewrite/ARR, logging;
  Power Shell scripting (automation, modules, REST/Graph, CLI).
• Process & Practices: Strong documentation, change control and incident/problem management (ITIL).
• Soft Skills: Clear communicator, collaborative, organized and able to prioritize across multiple stakeholders and deadlines.

• Certifications: Azure Network Engineer (AZ‑700), Azure Administrator Associate (AZ‑104), Windows Server Hybrid Administrator Associate (AZ‑800 / AZ‑801).
• Enterprise Tools: Experience with MCM/Config Mgr, WSUS, Defender for Cloud, Sentinel, Splunk/ELK, Service Now/Jira.
• Networking: Solid understanding of TCP/IP, DNS, routing, VPN, firewall rules, load balancing and private endpoints.
• Web/App Integration: Familiarity with .NET application hosting, SSO (SAML/OIDC), App Gateway/WAF, certificate pinning and mutual TLS.
• Infrastructure-as-Code & Config: Experience with Bicep/ARM/Terraform, DSC or Ansible, Azure Policy/Blueprints.
• Azure Dev Ops: Experience with server‑side configurations.