Open role
[Remote] NIH - Windows Systems Administrator
Note: The job is a remote job and is open to candidates in USA. cFocus Software seeks a Window System Administrator to join our program supporting the National Institutes of Health (NIH). The role involves administering and maintaining Windows Server infrastructure while ensuring compliance with security policies and managing various IT services.
Responsibilities
- Administering and maintaining Windows Server infrastructure in accordance with NIH security baselines
- Supporting enterprise vulnerability scanning activities and validating remediation of security findings
- Deploying operating system and application patches to reduce cybersecurity risk
- Performing Windows system hardening using Microsoft and NIST security best practices
- Managing Active Directory, Group Policy Objects (GPOs), DNS, DHCP, file services, and Windows authentication services
- Supporting Microsoft Defender, endpoint protection, BitLocker, and other data protection technologies
- Remediating findings from vulnerability scanners and coordinating with cybersecurity personnel to close POA&M items
- Supporting secure configuration management, change management, and documentation updates
- Assisting with disaster recovery, backup validation, and Windows system recovery procedures
- Maintaining compliance with FISMA, NIST SP 800-53 Rev. 5, NIH/HHS security policies, and enterprise vulnerability management requirements
Skills
- Public Trust Clearance
- B.S. Computer Science, Information Technology, or a related field
- 5+ years administering enterprise Windows Server environments in a federal or similarly regulated enterprise
- Experience with Windows Server 2019/2022, Active Directory, Group Policy, PowerShell, WSUS/SCCM/MECM, Microsoft Defender, DNS, DHCP, PKI, virtualization (VMware/Hyper-V), vulnerability remediation, backup and recovery, and configuration management
- Microsoft Certified: Windows Server Hybrid Administrator Associate
- Microsoft Certified: Azure Administrator Associate
- Security+
- CISSP
- MCSA/MCSE (legacy)
- Equivalent
Company Overview