Windows System Administrator

Windows System Administrator
Colorado Springs, CO
Active Top Secret/SCI
Compensation Range: $120,000 - $160,000

Company Overview:
Cornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government. Realizing early on that our most prized assets are our employees; we continually focus our attention on improving the overall work/life experience they have supporting the mission. Our Team is pushed every day to use their industry leading knowledge to provide end-to-end solutions to combat our nation's toughest and most secure problems. If you are looking for a place to not only be professionally challenged, but encouraged and supported by a company that cares, don't look any further than Cornerstone Defense.

Job Responsibilities:

• Windows Server Administration
• Manage and maintain Windows Server instances in a highly available environment.
• Oversee critical services such as DNS, DHCP, NTP, and WSUS.
• Monitor and troubleshoot IIS-based web applications as needed.
• Maintain Microsoft SQL Server instances, ensuring availability and resiliency.
• Support Microsoft Exchange Server, including backup/restore operations and performance tuning.

• Active Directory & GPO Management
• Design, maintain, and optimize the Windows Active Directory environment, including user/group management and OU structure.
• Develop and implement Group Policy Objects (GPOs) aligned with best practices and STIG/DoD security requirements.
• Ensure role-based access control (RBAC) following DoD 8140 requirements and maintain secure delegated administration.
• Perform regular Windows performance optimization and tuning tasks.
• Security & Compliance (STIG/DoD Requirements)
• Conduct regular STIG compliance checks, vulnerability assessments, and system audits.
• Apply security hardening guidelines to servers, applications, and network configurations.
• Collaborate with Security teams to respond to security incidents and maintain compliance.
• Automation & Scripting
• Develop, maintain, and implement PowerShell or other relevant scripts to automate repetitive tasks (e.g., user provisioning, patch deployment, system reporting).
• Identify opportunities for automation within daily administrative tasks to increase efficiency and reduce human error.
• Patch Management & System Updates
• Coordinate and execute WSUS / patch management to ensure timely and compliant system updates.
• Schedule and manage monthly/quarterly patch cycles, including out-of-band updates as required for security.
• Test and validate patches prior to deployment in production environments.
• Performance Monitoring & Troubleshooting
• Use industry-standard monitoring tools to proactively identify and resolve performance bottlenecks for Windows and Linux systems
• Conduct root-cause analysis for complex technical issues and system outages.
• Documentation & Knowledge Sharing
• Maintain comprehensive system documentation, including architecture diagrams, SOPs, and knowledge base articles.
• Provide mentorship, guidance, and training to junior-level administrators and service desk personnel.
  Required Skills:
  • Minimum of 5+ years supporting Windows-based server environments (Tier 3 level).
  • Strong background with Windows Server 2012/2016/2019/2022 (deployment, management, optimization).
  • Hands-on experience with Active Directory, DNS, DHCP, NTP, and Group Policy configuration.
  • Demonstrated understanding of STIG/DoD security compliance requirements and related best practices.
  • PowerShell (or equivalent) scripting for process automation and configuration management.
  
  Desired Skills:
  • Experience with virtualization platforms (e.g., VMware, Hyper-V).
  • Proficiency with Microsoft Exchange and Microsoft SQL Server administration.
  • Familiarity with IIS configuration and support.
  • Background in network protocols (TCP/IP, subnetting, VLANs, etc.).
  • Experience with Ansible Automation.
  • Education:
  • Bachelor's Degree in Computer Science, Information Systems, or related field (or equivalent work experience).
  • Microsoft certifications (e.g., MCSE, MCSA), CompTIA Security+ (or equivalent DoD 8570 baseline), or other relevant certifications.
• Other Requirements:
• Must be a U.S. Citizen and able to obtain and maintain a TS//SCI security clearance.
• Excellent troubleshooting, communication, and documentation skills.
• Ability to work both independently and collaboratively within a team-oriented environment.

Benefits Overview :
Cornerstone Defense offers a very comprehensive benefits package including, but not limited to: Medical, Dental and Vision Plans * Generous PTO Policy * 401(k) * HSA and FSA options * Life and Disability Insurance * Tuition Reimbursement and Training * Perks at Work Discount Program * Referral Program * Leads Generation Program * CollegeAmerica 529 * Fitness Reimbursement Program * Travel Assistance * Norton Lifelock Benefit Solutions * Life Planning Financial & Legal Services *