Description

Key Responsibilities:
*) Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.
*) Implement CIS baselines through GPO and scripted remediation, working from the senior server administrator's analysis and direction. The senior reviews and orchestrates; this role implements.
*) Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.
*) Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.
*) Manage the Windows Server lifecycle at an enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.
*) Receive work as assigned and prioritised by the Server Operations Team Manager, including work routed through the Senior Server *) Administrator or the Server Administrator under the Manager's oversight.
Log, update, and track all work items in Azure DevOps.
*) Work service requests and change controls through the Service Management tool, following the team's change process.
*) Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.
*) Cross-skill with the senior server administrator so that AD/GPO and CIS knowledge is shared, not held by one person.
*) Take on additional on-premises duties as team responsibilities are realigned, as directed by the manager.

Required Skills and Experience:
*) 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.
*) 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment.
*) 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.
*) 3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.
*) 5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning.
*) Experience with documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups.
*) Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes

Key Skills

Education

Bachelor's degree