Windows Systems Administrator
Thyssenkrupp · Aurora · $85,000–$95,000 (stated in the posting)
As one of the world's leading manufacturers of slewing bearings, thyssenkrupp rothe erde leads the way. We develop solutions for the most diverse applications which all have something in common: They transcend the ordinary. From exploring the universe, the sourcing of raw material in the open sea, through to mine or tunnel excavations deep under the earth - our products help turn visions into reality and ensure projects around the world are successful under the most difficult conditions.
Rothe Erde consists of around 6,000 employees who represent different lifestyles and cultures. Despite this diversity, we are united by a common identity: we are one team. We strengthen each other through close collaboration, continuous learning and joint development. We believe in fairness. We respect each other and maintain open communication. We keep our word and put our promises into practice. This framework of values unites us and makes us successful.
POSITION SUMMARY:
Seeking a mid-level Windows Systems Administrator to maintain and support the company's Windows Server and Active Directory environment. Performs daily administration, escalated troubleshooting, patching, backup and recovery, security, documentation, and infrastructure project work. Resolve routine issues and coordinate complex work with internal teams, vendors, and service providers.
KEY RESPONSIBILITIES:
Windows Server and Infrastructure
- Administer, monitor, patch, upgrade, troubleshoot, and lifecycle-manage physical and virtual Windows Server systems, including domain controllers and Windows-based application servers.
- Monitor availability, performance, capacity, services, scheduled tasks, event logs, and system health; investigate outages and recurring issues and coordinate maintenance windows and service-impact communications.
- Support DNS, DHCP, file and print services, NTFS and share permissions, certificates, service accounts, scheduled tasks, and other core Windows infrastructure services.
Active Directory and Access Management
- Administer Active Directory users, computers, groups, organizational units, service accounts, domain controllers, and Group Policy Objects.
- Troubleshoot authentication, account lockouts, permissions, replication, DNS, time synchronization, domain trust, and Group Policy processing issues.
- Apply least-privilege and role-based access practices; review inactive, privileged, expired, and service accounts and maintain appropriate group-based access.
- Test and deploy approved Group Policy and centralized configuration changes, documenting scope, results, and rollback requirements.
Security, CMMC and Compliance
- Implement and maintain assigned CMMC and NIST SP 800-171 controls for access, authentication, audit logging, configuration management, system hardening, patching, and account management.
- Maintain approved security baselines; reduce unnecessary services, legacy protocols, excessive permissions, and administrative access, particularly on systems that process, store, or transmit Controlled Unclassified Information.
- Support account and access reviews, corrective actions, Plans of Action and Milestones, security-event escalation, and implementation of approved compensating controls.
- Collect and maintain assessment evidence, including procedures, inventories, diagrams, configuration records, logs, reports, screenshots, review records, and change documentation.
Vulnerability Report Review and Remediation Planning
- Review existing vulnerability reports supplied by authorized internal or external sources; identify affected servers, operating systems, applications, services, and infrastructure components.
- Determine whether findings apply to the environment and identify duplicates, false positives, previously remediated items, or findings mitigated by existing controls.
- Research vendor advisories, patch guidance, release notes, upgrades, configuration changes, and other corrective options; evaluate compatibility, downtime, dependencies, testing, and rollback requirements.
- Prioritize findings with the IT Manager and relevant system owners based on severity, exploitability, exposure, system criticality, business impact, compliance requirements, and available mitigations.
- Develop remediation project plans that identify scope, corrective actions, responsible parties, dependencies, testing, maintenance windows, target dates, rollback steps, and required documentation.
Salary Range: $85,000 - $95,000
EDUCATON AND QUALIFICATION REQUIREMENTS:
- Associate degree in information technology, computer science, cybersecurity, or a related field, or equivalent professional experience.
- Three or more years of hands-on experience administering Windows Server and Active Directory in a production environment.
- Availability for scheduled after-hours maintenance and urgent infrastructure incidents when required.
PREFERRED QUALIFICATIONS:
- Experience in manufacturing, engineering, government contracting, defense, or another regulated environment.
The [above] is intended to describe the general content of and requirements for the performance of this job. It is not to be construed as an exhaustive statement of duties, responsibilities, or requirements. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
EXPORT CONTROL: This position requires access to export-controlled technology. Employment is contingent upon thyssenkrupp's ability to obtain any required export authorization from the appropriate government agency or agencies.
- Medical, Dental, Vision and Prescription Drug
- Employee Assistance Program
- 401K Match
- Tuition Reimbursement
- 13 Paid Holidays
- Short Term and Long Term Disability
- Paid Time Off
More jobs at Thyssenkrupp · Infrastructure & IT jobs in Aurora, OH