Classified Senior Windows Systems Administrator

Are you an experienced Windows Systems Administrator who enjoys solving complex technical challenges and supporting mission-critical infrastructure?

Do you thrive in an environment where you can take ownership of enterprise systems, lead technical initiatives, and contribute to the security and reliability of critical IT services?

If so, we're looking for someone like you to join our team at APL!

We are seeking a highly skilled Senior Windows Systems Administrator to join our Information Technology Services Department (ITSD) in support of classified enterprise infrastructure. Our team delivers secure, reliable, and innovative IT solutions that enable APL's mission-critical operations.

Ranked among Computerworld 's Top Places to Work in IT for 8 consecutive years, APL opens the door for you to make a difference! On this remarkable team, contribute to the service delivery and security of our Highly Classified information systems. In doing so, you'll address the unique needs of our Research Programs.

As a member of our team, you will administer and modernize enterprise Windows environments, maintain essential infrastructure services, and ensure systems meet operational and cybersecurity requirements. We are looking for a self-motivated professional who demonstrates strong technical expertise, takes initiative, communicates effectively, and can independently manage complex infrastructure challenges while collaborating across technical teams.

As a Senior Windows Systems Administrator, you will...

• Administer and maintain enterprise Windows infrastructure, including Windows Server, Active Directory, Group Policy, DNS, DHCP, Public Key Infrastructure (PKI), virtualization platforms (VMware vSphere and Hyper-V), and supporting services to ensure system reliability, availability, and performance.
• Serve as a primary technical resource for on-premises Microsoft Exchange Server, responsible for administration, maintenance, troubleshooting, system upgrades, and ensuring the reliability and availability of enterprise messaging services.
• Manage enterprise authentication and security services, including RSA SecurID multifactor authentication (MFA), authentication policies, token administration, security patching, vulnerability remediation, and DISA Security Technical Implementation Guide (STIG) compliance.
• Lead infrastructure engineering and modernization initiatives, including system architecture and design, operating system and Exchange Server migrations, infrastructure upgrades, and implementation of solutions that improve reliability, performance, and security.
• Troubleshoot complex technical issues and improve operational efficiency through root cause analysis, system monitoring, PowerShell automation, enterprise patch management, and development of effective technical solutions.
• Support cybersecurity compliance and operational readiness, including Risk Management Framework (RMF) requirements, continuous monitoring, system documentation, standard operating procedures (SOPs), and backup and recovery processes.
• Provide technical leadership and collaboration, independently managing technical initiatives, mentoring other administrators, and communicating effectively with cybersecurity teams, technical stakeholders, and leadership.
• Support mission-critical operations outside normal business hours, including evenings, weekends, and holidays, as needed to perform scheduled maintenance, security patching, system upgrades, and respond to outages or other critical operational requirements.

You meet our minimum qualifications for the job if you...

• Have ten (10) or more years of direct, hands-on experience administering Windows Server infrastructure in an enterprise production environment.
• Have a minimum of five (5) years of hands-on experience administering on-premises Microsoft Exchange Server in a production environment, with demonstrated responsibility for independently managing system administration, maintenance, troubleshooting, upgrades, and operational reliability.
• Have advanced technical experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, enterprise authentication services, and virtualization technologies, including VMware vSphere or Hyper-V.
• Have experience administering enterprise multifactor authentication (MFA) solutions, including authentication integration, access policies, and troubleshooting.
• Are proficient in PowerShell scripting and automation, with experience performing operating system upgrades, enterprise patch management using technologies such as WSUS or Microsoft Configuration Manager (SCCM/MECM), system monitoring, backup, and disaster recovery.
• Have experience implementing DISA STIG requirements, remediating vulnerabilities, and supporting cybersecurity compliance activities.
• Hold an active CompTIA Security+ certification or another certification satisfying applicable DoD 8140 qualification requirements.
• Demonstrate strong initiative, technical ownership, and the ability to independently identify problems, develop solutions, prioritize competing requirements, and execute complex technical initiatives with minimal supervision.
• Possess excellent oral and written communication skills, including the ability to clearly communicate complex technical information, develop comprehensive documentation, and collaborate effectively with technical teams, customers, and leadership.
• Hold an active TS/SCI+poly security clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. citizenship.

You'll go above and beyond our minimum requirements if you...

• Have a bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field.
• Have experience administering enterprise infrastructure in classified, isolated, or disconnected environments.
• Have advanced experience with Microsoft Exchange Server, including database availability groups (DAGs), mail flow, transport services, high availability, and complex migrations.
• Have hands-on experience administering RSA SecurID and RSA Authentication Manager, including enterprise MFA integrations, token administration, and advanced authentication troubleshooting.
• Have experience with enterprise PKI, storage technologies, infrastructure resiliency, and high-availability architectures.
• Hold additional technical or cybersecurity certifications, such as Microsoft certifications, CISSP, or CompTIA SecurityX.

Why Work at APL?

The Johns Hopkins University Applied Physics Laboratory (APL) brings world-class expertise to our nation's most critical defense, security, space and science challenges. While we are dedicated to solving complex challenges and pioneering new technologies, what makes us truly outstanding is our culture. We offer a vibrant, welcoming atmosphere where you can bring your authentic self to work, continue to grow, and build strong connections with inspiring teammates.

At APL, we celebrate our differences of perspectives and encourage creativity and bold, new ideas. Our employees enjoy generous benefits, including a robust education assistance program, unparalleled retirement contributions, and a healthy work/life balance. APL's campus is located in the Baltimore-Washington metro area. Learn more about our career opportunities athttps://www.jhuapl.edu/careers.

All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, physical or mental disability, genetic information, veteran status, occupation, marital or familial status, political opinion, personal appearance, or any other characteristic protected by applicable law.APL is committed to providing reasonable accommodation to individuals of all abilities, including those with disabilities. If you require a reasonable accommodation to participate in any part of the hiring process, please contactAccessibility@jhuapl.edu.

The referenced pay range is based on JHU APL's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level with consideration for internal parity. For salaried employees scheduled to work less than 40 hours per week, annual salary will be prorated based on the number of hours worked. APL may offer bonuses or other forms of compensation per internal policy and/or contractual designation. Additional compensation may be provided in the form of a sign-on bonus, relocation benefits, locality allowance or discretionary payments for exceptional performance. APL provides eligible staff with a comprehensive benefits package including retirement plans, paid time off, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, education assistance, and training and development. Applications are accepted on a rolling basis.