Senior Windows Administrator

Description Do you thrive in a fast-paced, dynamic classified environment? Do you want to be empowered to take ownership of enterprise active directory domain infrastructure and have a direct impact on the reliability, performance, and security of critically important systems? Are you interested in working with a wide range of technologies, building supervising solutions from the ground up, and helping drive operational excellence across complex infrastructure environments? If so, we're looking for someone like you to join our team at Johns Hopkins Applied Physics Laboratory (APL), consistently ranked by Computerworld as one of the Top Places to Work in IT. We are seeking a Senior Windows Systems Administrator to support and secure enterprise systems within a Department of Defense (DoD) environment. This role is responsible for endpoint management, Active Directory administration, and thorough security compliance aligned with DISA STIGs and RMF requirements. The ideal candidate has deep experience with MECM, strong automation skills, and a consistent record operating in highly regulated environments. As a Senior Windows Systems Administrator, you will... Lead small teams and drive technical initiatives, successfully delivering complex projects with minimal supervision in a mission-critical environment. Deploy, configure, and sustain Microsoft Endpoint Configuration Manager (MECM/SCCM) for enterprise device management in a DoD environment. Administer Active Directory infrastructure, including advanced Group Policy design, enforcement, and troubleshooting. Implement, validate, and maintain

DISA STIG

compliance across Windows servers and endpoints. Lead the planning and execution of complex infrastructure and endpoint management projects with minimal supervision. Create and maintain detailed technical documentation, SOPs, and compliance artifacts. Qualifications You meet our minimum qualifications for the job if you... 5-10+ years of experience administering Windows Server and enterprise desktop environments Proven experience running

MECM/SCCM

in large, secure environments Advanced expertise in Active Directory, including GPOs, DNS, and identity/access management Hands-on experience implementing and maintaining

DISA STIG

compliance Strong analytical and troubleshooting abilities in high-security environments Self-directed with strong ownership mentality and the ability to prioritize and complete tasks in low-supervision environments. Ability to work independently and lead technical initiatives Clear verbal and written communication skills, especially in documenting compliance and audit artifacts Thorough with a strong focus on security, accountability, and process adherence Active CompTIA Security+ certification (DoD 8570/8140 compliant) required Hold an active Secret level security clearance by your start date and can ultimately obtain a Top Secret level clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. citizenship. You'll go above and beyond our minimum requirements if you... Prior experience supporting DoD or federal government systems Experience with virtualization platforms (VMware, Hyper-V, or KVM) Knowledge of Infrastructure as Code (IaC) and secure automation pipelines Additional certifications (e.g., Microsoft, CISSP, CASP+) About Us Why Work at APL? The Johns Hopkins University Applied Physics Laboratory (APL) brings world-class expertise to our nation's most critical defense, security, space and science challenges. While we are dedicated to solving complex challenges and pioneering new technologies, what makes us truly outstanding is our culture. We offer a vibrant, welcoming atmosphere where you can bring your authentic self to work, continue to grow, and build strong connections with inspiring teammates. At APL, we celebrate our differences of perspectives and encourage creativity and bold, new ideas. Our employees enjoy generous benefits, including a robust education assistance program, unparalleled retirement contributions, and a healthy work/life balance. APL's campus is located in the Baltimore-Washington metro area. Learn more about our career opportunities at http://www.jhuapl.edu/careers . All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, physical or mental disability, genetic information, veteran status, occupation, marital or familial status, political opinion, personal appearance, or any other characteristic protected by applicable law. APL is committed to providing reasonable accommodation to individuals of all abilities, including those with disabilities. If you require a reasonable accommodation to participate in any part of the hiring process, please contact Accommodations@jhuapl.edu . The referenced pay range is based on JHU APL's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level with consideration for internal parity. For salaried employees scheduled to work less than 40 hours per week, annual salary will be prorated based on the number of hours worked. APL may offer bonuses or other forms of compensation per internal policy and/or contractual designation. Additional compensation may be provided in the form of a sign-on bonus, relocation benefits, locality allowance or discretionary payments for exceptional performance. APL provides eligible staff with a comprehensive benefits package including retirement plans, paid time off, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, education assistance, and training and development. Applications are accepted on a rolling basis. Minimum Rate $100,000 Annually Maximum Rate $245,000

Annually Qualifications:

You meet our minimum qualifications for the job if you... 5-10+ years of experience administering Windows Server and enterprise desktop environments Proven experience running

MECM/SCCM

in large, secure environments Advanced expertise in Active Directory, including GPOs, DNS, and identity/access management Hands-on experience implementing and maintaining

DISA STIG

compliance Strong analytical and troubleshooting abilities in high-security environments Self-directed with strong ownership mentality and the ability to prioritize and complete tasks in low-supervision environments. Ability to work independently and lead technical initiatives Clear verbal and written communication skills, especially in documenting compliance and audit artifacts Thorough with a strong focus on security, accountability, and process adherence Active CompTIA Security+ certification (DoD 8570/8140 compliant) required Hold an active Secret level security clearance by your start date and can ultimately obtain a Top Secret level clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. citizenship. You'll go above and beyond our minimum requirements if you... Prior experience supporting DoD or federal government systems Experience with virtualization platforms (VMware, Hyper-V, or KVM) Knowledge of Infrastructure as Code (IaC) and secure automation pipelines Additional certifications (e.g., Microsoft, CISSP, CASP+)