Windows System Administrator with Security Clearance

Windows System Administrator Colorado Springs, CO Active Top Secret/SCI Compensation Range: $120,000 - $160,000 Company Overview: Cornerstone Defense is the Employer of Choice within the Intelligence, Defense, and Space communities of the U.S. Government. Realizing early on that our most prized assets are our employees; we continually focus our attention on improving the overall work/life experience they have supporting the mission. Our Team is pushed every day to use their industry leading knowledge to provide end-to-end solutions to combat our nation's toughest and most secure problems. If you are looking for a place to not only be professionally challenged, but encouraged and supported by a company that cares, don't look any further than Cornerstone Defense. Job Responsibilities: * Windows Server Administration * Manage and maintain Windows Server instances in a highly available environment. * Oversee critical services such as DNS, DHCP, NTP, and WSUS. * Monitor and troubleshoot IIS-based web applications as needed. * Maintain Microsoft SQL Server instances, ensuring availability and resiliency. * Support Microsoft Exchange Server, including backup/restore operations and performance tuning. * Active Directory & GPO Management * Design, maintain, and optimize the Windows Active Directory environment, including user/group management and OU structure. * Develop and implement Group Policy Objects (GPOs) aligned with best practices and STIG/DoD security requirements. * Ensure role-based access control (RBAC) following DoD 8140 requirements and maintain secure delegated administration. * Perform regular Windows performance optimization and tuning tasks. * Security & Compliance (STIG/DoD Requirements) * Conduct regular STIG compliance checks, vulnerability assessments, and system audits. * Apply security hardening guidelines to servers, applications, and network configurations. * Collaborate with Security teams to respond to security incidents and maintain compliance. * Automation & Scripting * Develop, maintain, and implement PowerShell or other relevant scripts to automate repetitive tasks (e.g., user provisioning, patch deployment, system reporting). * Identify opportunities for automation within daily administrative tasks to increase efficiency and reduce human error. * Patch Management & System Updates * Coordinate and execute WSUS / patch management to ensure timely and compliant system updates. * Schedule and manage monthly/quarterly patch cycles, including out-of-band updates as required for security. * Test and validate patches prior to deployment in production environments. * Performance Monitoring & Troubleshooting * Use industry-standard monitoring tools to proactively identify and resolve performance bottlenecks for Windows and Linux systems * Conduct root-cause analysis for complex technical issues and system outages. * Documentation & Knowledge Sharing * Maintain comprehensive system documentation, including architecture diagrams, SOPs, and knowledge base articles. * Provide mentorship, guidance, and training to junior-level administrators and service desk personnel. Required Skills: * Minimum of 5+ years supporting Windows-based server environments (Tier 3 level). * Strong background with Windows Server 2012/2016/2019/2022 (deployment, management, optimization). * Hands-on experience with Active Directory, DNS, DHCP, NTP, and Group Policy configuration. * Demonstrated understanding of STIG/DoD security compliance requirements and related best practices. * PowerShell (or equivalent) scripting for process automation and configuration management. Desired Skills: * Experience with virtualization platforms (e.g., VMware, Hyper-V). * Proficiency with Microsoft Exchange and Microsoft SQL Server administration. * Familiarity with IIS configuration and support. * Background in network protocols (TCP/IP, subnetting, VLANs, etc.). * Experience with Ansible Automation. * Education: * Bachelor's Degree in Computer Science, Information Systems, or related field (or equivalent work experience). * Microsoft certifications (e.g., MCSE, MCSA), CompTIA Security+ (or equivalent DoD 8570 baseline), or other relevant certifications. * Other Requirements: * Must be a U.S. Citizen and able to obtain and maintain a TS//SCI security clearance. * Excellent troubleshooting, communication, and documentation skills. * Ability to work both independently and collaboratively within a team-oriented environment. Benefits Overview : Cornerstone Defense offers a very comprehensive benefits package including, but not limited to: Medical, Dental and Vision Plans * Generous PTO Policy * 401(k) * HSA and FSA options * Life and Disability Insurance * Tuition Reimbursement and Training * Perks at Work Discount Program * Referral Program * Leads Generation Program * CollegeAmerica 529 * Fitness Reimbursement Program * Travel Assistance * Norton Lifelock Benefit Solutions * Life Planning Financial & Legal Services *