Job description

NDI Engineering Company is seeking a full time Windows Administrator to join our team in South Jersey to support our growing operations. The ideal candidate will have demonstrated experience performing the following: administration of Windows server environments; ability to design, install, and configure windows servers; perform scheduled auditing of asset performance and availability, perform system backups and disaster recovery for continuity of business operations, install and configure system hardware; troubleshoot system problems and analyze system logs; identifying potential issues with systems, configuration and maintenance of network appliances (firewalls, switches, routers, WiFi access points, etc.) and working collaborative with NDI’s cyber security team to ensure that the NDI security posture is compliant with government security control standards. Ideal candidate will have experience working with technology resellers and distributors to find the best value (price and delivery) for upgrade/repair components and evaluating requirements for company-wide computing infrastructure modifications and upgrades. Job Responsibilities • Familiarity with NIST 800-171/172 or ISO/IEC 27001/27002 for establishing security controls for protecting information technology infrastructure • Hardening of Microsoft Windows servers, workstations and laptop computers in accordance with the Security Technical Implementation Guides (STIGs) and Windows GPO configuration developed by the NDI Cyber Security Team • Remediate security findings detected in security audits, vulnerability scans, AV scans, internal security assessments and external security assessments. • Create and Manage Group Policy (GPO) and Implement Active Directory Certificate Services (AD CS) that operates similar to “Let’s Encrypt” to provide internal network applications the ability to request and update self-signed certificates from the Active Directory CA. • Continuous monitoring and updating of all computing infrastructure and network devices (switches, firewalls, Wi-Fi APs operating systems and firmware • Configuration, Installation, checkout, update, version migration and administration of Windows server environments (2016/2019/2022/2025) • Configuration, Installation, checkout and administration of on-premise Microsoft Sharepoint Server • Configuration, deployment and administration of Fortiswitch • Define policies, rules and profiles • Assign IPs, VLANs, and trunks, uplinks/downlinks • Apply QoS and security profiles, port configuration, port mirroring • Integrate with FortiGate and FortiLink • Enable redundancy and failover settings (LAG/MLAG as needed) • Configuration, deployment and administration of Fortigate Firewall • Define security fabric, policies, rules and profiles to meet the security control requirements of NIST 800-53R5 • Integration of WiFi Access Points • VPN gateway configuration and monitoring • Migration Windows 10 laptop/desktop to Windows 11 • Perform maintenance, user/customer support, security compliance testing, system upgrades, performance monitoring, disaster recovery, system backups and documentation • Document the configuration of IT environment; hardware, network and software and perform continuous updating of asset configuration management database (CMDB) • Troubleshoot system problems; analyze system logs and identify potential issues • Provide support with escalated help desk requests via JIRA Service Management • Perform troubleshooting as needed, assist with problem-solving efforts, involving other teams, partners, and outside vendors Requirements • Must be a US citizen and able to qualify for a DoD Secret clearance. • Associates Degree in Information/Computer Science or related discipline • 3-5 years’ experience as Windows System Administrator • Hands-On network design, configuration, implementation and deployment experience with Fortinet Firewalls, Switches, WiFi Access Points or similar devices from other vendors (Cisco, Juniper, HPE/Aruba, etc.) • Windows MSCA/MSCE Certification for Windows Server and Office 365 • Ability to work on-site in our offices is required. Ability to provide periodic after-hours support for infrastructure weekend maintenance and related emergencies • Good verbal and written communications skills along with ability to implement feedback from engineers, follow work instructions and work somewhat independently are highly desirable traits.

Requirements