Senior Server Administrator with Security Clearance

Description:

On-site in Washington, DC Our client seeks a Senior Server Windows Engineer to provide systems administration, engineering, implementation, and migration support for a large Windows server estate across on-premises and cloud environments in AWS, Azure, Google, and Oracle. The role supports troubleshooting across multiple data centers, manages change requests, serves as an escalation point, and partners with cross-functional teams to operate, monitor, audit, and harden server assets.

The position blends engineering, operations, and hands-on support with a focus on vulnerability remediation, patching, automation, and documentation. Due to federal security clearance requirements, applicant must be a United States Citizen or Permanent Resident with an active Public Trust clearance. This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration.

For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance. Rate: $45.00 to $50.00/hr. w2 Responsibilities:
* Provide full-time on-site support at DOT HQ in Washington, DC, with coverage ending between 5pm and 7pm.
* Participate in a 24x7 on-call escalation rotation every 2-3 months.
* Identify opportunities to improve and automate service delivery through scripting.
* Perform security hardening, patching, and server certificate updates.
* Run and analyze vulnerability scans for an enterprise of 2000+ Windows servers.
* Maintain standard operating procedures and engineering documentation.
* Provide escalation support to system administrators and conduct root cause analysis for outages.
* Recognize and escalate risks, issues, and concerns.
* Analyze vulnerability reports, define remediation ownership, and prioritize critical items.
* Coordinate and implement vulnerability remediations across teams.
* Harden Windows OS per NIST policy, including TLS and cipher suites.
* Assist with POA&Ms for long-lead remediation items.
* Partner with SCCM/Deployment teams for routine and bulk patching and reporting.
* Provide on-call support and manage ticket queues.
* Drive continuous improvement of processes and documentation.
* Support new enterprise systems and engineering solutions.
* Create and maintain domain technology documentation for installation, configuration, and troubleshooting. Experience Requirements:
* Minimum 10 years administering and managing Windows servers, systems, and cloud infrastructure, including file and print.
* Experience managing 2000+ servers across multiple field locations.
* Proven leadership of cross-team troubleshooting calls using a multi-discipline approach.
* Extensive knowledge of multi-vendor server operating systems.
* Senior-level MS Server Administration.
* Senior-level scripting with MS Graph/Power Shell and VBScript.
* Senior-level experience with Windows Server .
* Senior-level VMware vSphere.
* Intermediate-level Active Directory / Entra.
* Strong skills resolving failed Windows update installations.
* Strong knowledge of AD Group Policy and applying security posture via GPOs.
* Strong knowledge of SCCM.
* Experience with root cause analysis, risk identification, and mitigation.
* Self-starter with strong problem solving and communication skills.
* Experience installing drivers, firmware, BIOS, and hardware upgrades on Dell servers.
* Knowledge of common Windows server and client ports and protocols.
* Experience in a fast-paced ITSM support environment.
* Preferred:
Intune co-management with SCCM/MECM.
* Preferred: ITSM service delivery to the US Government.
* Preferred:
Microsoft certifications such as Windows Server Hybrid Administrator Associate, Endpoint Administrator Associate, Azure Fundamentals, Azure Administrator Associate, MS365 Administrator Expert.
* Preferred: AWS/Azure cloud certifications and VMware certifications.
* Preferred:

Experience with Windows Server 2025, image building, and applying STIGs.
* Preferred:
Admin proficiency with vulnerability tools such as Tenable Nessus, Qualys WAS, Invicti, and Big Fix.
* Preferred:

Experience with Dell Open Manage Enterprise and Power BI.