Sr. Systems Engineer

The contractor will support OFR’s efforts to engineer, build, configure and maintain the OFR’s Windows, Cloud, Virtualization and Storage systems following best practices to better ensure that OFR designs, deploys and sustains secure, high quality, highly available information technology solutions that align with operational objectives.

Duties include but not limited to:

• Expert in Active Directory/Entra  in a Hybrid Environment

• Proficiency in Active Directory administration, FSMO roles, replication, and OU management
• Knowledge of PKI, CAC/ALT-token authentication, and certificate lifecycle management

• Expert in Microsoft 365 Management (Hybrid) administration including Exchange Online, Teams, and One Drive for Business.
• Experienced in Virtualization;
  Manage and optimize virtualization platforms (e.g., VXRail/VMware/Horizon).
• Systems administration of Windows systems using Power Shell, scripting, and automation.
• Desktop/Laptop deployment and management.
• Amazon Web Services Windows instances deployment and administration - a plus
• SCCM (MECM) / Intune administration in a co‑managed environment, including patching, package prep and deployment and reporting on Windows devices – a plus
• Documentation, development of system diagrams and SOPs
• Conducting integration testing, transition and acceptance and training from the Engineering phase to the production phase.

Coordinate activities at the system interface boundaries with other contractors and Government organizations.

Microsoft Active Directory: Administer and maintain Active Directory (AD) and Group Policy Objects (GPOs). Manage user accounts, permissions, and security groups. Implement AD best practices and troubleshoot AD‑related issues. Perform regular AD health checks and ensure system integrity. Administer DHCP, DNS, and file/directory permissions. Utilize Power Shell for automation, reporting, and system management. Manage folder and file share permissions following least‑privilege principles.

Office 365 Management (Hybrid): Administer Office 365 environment, including Exchange Online, Teams, and One Drive for Business. Manage user accounts, licensing, and service configurations. Lead and drive Microsoft 365 upgrades, migrations, and platform modernization effort. Implement best practices around identity, access, and compliance policies using Conditional Access, DLP, Sensitivity Labels, and Defender for Office 365.

Virtualization: Manage and optimize virtualization platforms (e.g., VXRail/VMware/Horizon). Oversee virtual machine creation, configuration, and performance tuning. Ensure high availability and disaster recovery solutions for virtual environments. Troubleshoot and resolve virtualization‑related issues.

Server Maintenance: Oversee physical and virtual servers Monitor server performance, conduct regular updates, and perform backups. Troubleshoot and resolve server issues to minimize downtime. Implement and manage server security patches and updates.

Documentation and Reporting: Maintain accurate and up‑to‑date documentation for all IT systems and procedures. Create and manage system diagrams, configuration records, and troubleshooting guides. Generate regular reports on system performance, security incidents, and project status.

Collaboration and Support: Work closely with other IT staff, departments, and external vendors to resolve technical issues. Provide guidance and mentorship to junior IT staff and helpdesk personnel. Participate in IT planning and strategy sessions.

• 10+ or more years of IT experience in an Active Directory environment
• Experienced in M365 Hybrid environment (on‑prem / M365)
• Experience with Windows Power Shell scripting.

Must have experience in the following technologies:

• Expert in Active Directory/Entra  in a hybrid environment
• Certificate lifecycle management
• Expert in Microsoft 365 administration
• VxRail / VMware / Horizon management and administration
• Systems administration of Windows systems using Power Shell, scripting and automation
• Manage Engine tools (ADManager/ADAudit/AD360)
• Beyond Trust (Bomgar) solutions experience a plus (Remote Assistance/PAM)
• Windows server deployment in…