Job Description
Place of Performance: National Capital Region (Pentagon and JSP-designated alternate sites) - You MUST reside in the DC Metro Area to be considered SHR – Software Hardware Re-engineered About SHR Consulting Group SHR is a premier technology integrator solving our nation’s most complex modernization and readiness challenges across the defense, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration, enterprise IT, including cloud services: cyber, software, advanced analytics, and AI. With an intimate understanding of our customers’ challenges and deep expertise in existing and emerging technologies, we integrate the best components from our own portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions. We are a rapidly growing organization seeking experienced Core Services Systems Administrators (multiple openings) to operate and maintain the Microsoft Core Services portfolio supporting the DISA Joint Service Provider (JSP). This portfolio provides user authentication, file share availability, workstation connectivity, server monitoring, printing, and messaging services across approximately 21 Active Directory domains, 2,500 Windows servers, and 300 Linux servers in NIPR, SIPR, TIPR, and JWICS security domains. This single posting covers Senior Systems Administrators and Systems Administrators supporting Domain Services, Exchange, SMTP Gateways, Print Services, and System Center Operations Manager (SCOM). Key Responsibilities Operate and maintain Active Directory, DNS, DHCP, and Distributed File System (DFS) infrastructure across approximately 21 AD domains; manage Active Directory Security Groups, Group Managed Service Accounts (gMSA), Organizational Units, and Group Policy Objects in accordance with Microsoft Security Administrative Environment guidance. Administer the JSP Microsoft Exchange Server environment supporting approximately 5,000 mailboxes on JWICS, including monitoring, mailbox provisioning, system upgrades, backup/restore, and patching. Operate and maintain enterprise SMTP gateways (currently Symantec Messaging Gateways) on NIPR and SIPR networks; maintain SMTP routing tables, MX/SPF/DKIM records, and the SMTP Outbound Client list in compliance with security policy. Operate and maintain the JSP enterprise Print Services environment: manage print servers, print drivers, print queues, and scaling for customer demand; coordinate with JP5/JP7 during major upgrades and lifecycle refresh. Operate and maintain the System Center Operations Manager (SCOM) deployment on NIPR, SIPR, and JWICS, including management servers, gateway servers, and Linux SSH/SSL monitoring; ensure systems are maintained with the latest Management Packs and that alerts function correctly. Identify, analyze, and resolve problems affecting system operations across all assigned core services; meet Group 1 restoral AQLs (CCIR Priority 1 – 2 hours; Priority 2 – 4 hours; Priority 3 – 6 hours) more than 90% of the time. Schedule and perform routine backups; test and validate backup procedures at least annually; store backups away from the proximity of the physical system. Apply security patches, GPO changes, and configuration updates to maintain compliance with DoD STIGs, IAVM notices, and other cyber tasking; collaborate with cyber teams on compliance scanning and endpoint analysis. Maintain DoD/NSS PKI server certificates and ensure they are issued/renewed within 30–15 days before expiration; maintain a tracker of expiration dates. Coordinate with the JSP Transport, Networks, and JP5/JP7 teams during major system upgrades, firewall changes, and hardware lifecycle refresh activities. Minimum Qualifications: Five (5) or more years of hands-on experience administering Microsoft Windows Server in a large enterprise environment (3+ years for the System Administrator variant). Strong experience with at least two of the following Core Services areas: Active Directory/DNS/DHCP/DFS, Microsoft Exchange Server, SMTP gateways/messaging security, Microsoft Print Services, or Microsoft System Center Operations Manager (SCOM). Working knowledge of CAC/PKI, DoD-issued SSL certificates, Group Policy, and complex multi-domain/multi-forest AD environments. Experience implementing DISA STIGs and supporting IAVM remediation against Windows Server platforms. Familiarity with virtualization (VMware vSphere/ESXi), backup and restore tooling, and enterprise monitoring tools. PowerShell scripting experience strongly preferred for automation of routine administrative tasks. For the Senior variant, demonstrated experience leading subject-matter design and complex troubleshooting across geographi