Address
Form of work
SalaryJob Description Summary:
The Microsoft Windows / Active Directory Infrastructure Systems Architect is a highly technical position responsible for the analysis, design, implementation, administration, security, maintenance and support of the department’s Windows Server / Active Directory-based environment. The environment is comprised of a multi-site, multi-forest Active Directory infrastructure, and supports Microsoft Exchange-based messaging services, Microsoft SharePoint collaboration services, Microsoft SQL Services, Single Sign-on services, File and Print Services, Microsoft O365, MS Teams. Microsoft-based configuration and software update management systems, systems performance management and infrastructure management tools. The Systems Architect will serve as a technical expert and will lead and work with users and collaborate with cross-functional teams.Job Description:
ESSENTIAL JOB DUTIES:
The individual will require the necessary skills to perform the following job duties (plus other related duties as assigned):
Function as an SME for Active Directory / Windows environment, provide oversight on daily activities to set priorities, function as mentor, help with problem escalation, and communicate significant problems or issues to management. Function as a technical resource and integrator regarding Active Directory and Microsoft L3 issues to administrators, programmers, web developers, network security engineers, database analysts, network managers, and implementation teams. Function as an SME for Microsoft cloud environments (M365, MS Teams, Sharepoint, etc.) including configuration, integration, management, performance tuning and security. Participate in the identification of vulnerabilities and their mitigation and collaborate with security teams to conduct regular vulnerability assessments and implement necessary security measures. Participate in the analysis and design of new or existing infrastructure systems and services. Create and maintain comprehensive system documentation, including architecture diagrams, configurations, and operational procedures. Research, evaluate, recommend, and implement new technologies. Perform capacity planning, upgrades, and expansion of the environment. Maintain effective communications with vendors, peers, and clients in support of assigned projects. Ability to serve as a resource to others in the resolution of complex problems and issues. Ability to solve problems of substantial variety and complexity. Hands-on experience with industry standard tools for network security and performance monitoring. Ability to solve problems of substantial variety and complexity. Ability to undertake tasks broad in nature, requiring ingenuity, and originality and operate with appreciable latitude for independent judgment and action. Troubleshoot and develop technical solutions related to incidents escalated from Tier 1 and Tier 2, addressing new or previously unknown issues. Excellent communication skills with a proven ability to effectively interact with all levels of employees.
NONESSENTIAL JOB DUTIES
- Related duties and special projects as assigned.
JOB SPECIFICATIONS
Required Knowledge, Skills, and Abilities: The individual should be familiar with standard operating procedures and best practices in the listed technology areas, and rely on experience and judgment to plan and accomplish goals:
- Windows Server and Active Directory
- Windows Server and Active Directory Security
- Windows DFS-N/DFS-R
- Active Directory integrated applications (includes single sign-on)
- Active Directory Group Policy to implement security standards on Domain Controllers, Domain Member Servers, and Domain Member Workstations
- Microsoft Azure Active Directory (AAD) and ADFS in hybrid environments
- Microsoft Azure Active Directory (AAD) Conditional Access Policies, AAD Connect
- DNS services • DHCP services • NTP services
- File and Print services
- Auditing technologies and tools, and provide reports as needed
- Implement security policies and procedures
- SCCM and WSUS, for both servers and desktops
- Virtualization
- High Availability / Disaster Recovery
- M365, MS Teams and MS Intune deployment, administration, and integrations
- MS Exchange Hybrid - L3 Management
- MS Sharepoint - L3 Management (cloud and on-prem)
- Microsoft CA - PKI
- Experience using Microsoft PowerShell across the different Microsoft ecosystem.
- Familiarity of the following third-party technologies: F5 LTM/GTM, RSA SecurID, CyberArk, Carbon Black App Control, and Ivanti RADIUS.
Minimum Education/Training Requirements: Bachelor's Degree in Computer Science or related field, or equivalent knowledge.
Minimum Experience: Eight years of related professional experience. Experience of Windows architecture in a multi-site company and project management is preferred.
Physical Capabilities: Ability to work at a computer for extended periods of time.
Required Licenses, Certification or Registration: Preferred. Advanced IT Industry certifications including, but not limited to, Microsoft technologies (cloud and on-prem), CompTIA, etc.
Supervisory Responsibilities/Controls: Reports to the Systems Architect Manager. General direction is provided.
Work Environment: This role has been approved for 100% remote status, with occasional travel between National Academies’ facilities and to off-site meeting/sponsor locations. Please note that The National Academies of Sciences, Engineering, and Medicine is not an approved employer in all states, so any remote work arrangement will need to be approved.
Compensation Range: The National Academies of Sciences, Engineering, and Medicine support equity, fairness, and transparency in our compensation programs. An estimated compensation range for this position is $97,240 - $170,170. Compensation offered to the selected candidate will be based on the candidate’s relevant knowledge, skills, and work experience, commensurate with compensation of current employees in comparable positions with similar knowledge, skills, and work experience, and subject to budget parameters. Note it is not typical for a candidate to be hired at the higher end of the range.
The National Academies’ Statement on Diversity and Inclusion:
To promote diversity and inclusion in the sciences, engineering, and medicine, we are committed to increasing the diversity of the National Academies’ staff, members, and volunteers to reflect the populations we serve. We pledge to cultivate an environment and culture that promotes inclusion and values respectful participation of all individuals who help advance the mission of the institution.
Equal Opportunity Employer:
It is the policy of the National Academies to recruit, hire, transfer, compensate, and promote people in all job categories and to administer all other personnel actions, terms and conditions of employment in a manner that is consistent with equal employment, and does not discriminate on the basis of race, creed, ethnicity, color, national origin, sex, sexual orientation, gender identity, age, religion, disability, medical condition for which a person has been rehabilitated or cured, marital status, family responsibilities, genetic information, political affiliation, personal appearance, matriculation, unemployment status, veteran status, or any other characteristic protected by applicable laws. It is also the institution's policy to recruit, hire, promote, and provide reasonable accommodation to qualified individuals with disabilities and covered veterans who are otherwise qualified.
Any qualification to be considered equivalent, in lieu of stated minimum, requires the prior approval of the Office of Human Resources.
The above statements are intended to describe the general nature and level of work performed by employees assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required of personnel so classified. Some functions in this description may be specific to a particular unit of the National Academies and not applicable to other units.
The above statements are intended to describe the general nature and level of work performed by employees assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required of personnel so classified. Some functions in this description may be specific to a particular unit of the National Academies and not applicable to other units.
Job Family:
INFOEmployee Type:
Scheduled Weekly Hours:
37.5City/State:
Remote, District of Columbia
