System Administrator 3 - - Domain Administration

Job Title: System Administrator 3 - Domain AdministrationJob Number: 12029Location: Portland, OROnsite: 5 days per week, situational Telework - This assignment potentially could transition to routine telework at the manager’s discretionOn Call: Yes, One week every 4-5 weeksLocation for on-call and backup support may be at CLIENT facilities or off-siteOvertime: 5%Length: 5 years2 Openings MUST be US Citizen to be eligible to apply for Federal Background CheckRequires Real ID and or Valid Passport to interview SUMMARYThis contract System Administrator primarily focuses on Domain Administration.  This assignment plays an integral role in building and maintaining the authentication and authorization environment, administering and troubleshooting hybrid identity environments (ensuring synchronization between on-premises Active Directory and Entra ID), planning for and managing capacity and providing Domain support services.   This work required of this assignment must adhere to corporate Cyber Security policies and be performed in a manner that is compliant with corporate audit requirementsPOSITION RESPONSIBILITIES

• Research, test and document standardized technical procedures for the deployment / troubleshooting of server hardware, the associated operating systems and application software.
• Perform system vulnerability assessments using vendor native (MS SCT) and third party tools (Nessus), recommending mitigation options based on risk of exploit after consideration of environmental factors.
• Schedule and perform risk assessments regularly and when vulnerabilities are identified on operational network equipment, such as computer systems devices and various software packages.
• Act as a service response escalation point, working with teams of varying technical ability in response to service availability and/or performance related incidents / problems.
• Provide recommendations for process / procedural changes that may become necessary due to environmental changes, upgrades.
• Support disaster recovery by verifying continuous availability of domain services such as Active Directory, DNS, DHCP, IPAM, DFS.
• Serve as a technical advisor for project and service response and related tasks.
• Apply the aforementioned processes/procedures in support of the following technologies:
  • Microsoft Windows Server  2019/2022/2025
  • Microsoft Active Directory
  • Microsoft  DNS
  • Microsoft ADFS
  • Microsoft DFS
  • Microsoft Public Key Infrastructure solutions
  • Hardware Security Module support for protection of private keys
  • SAML, OAuth 2.0, OpenID Connect and SCIM
  • FIDO2 security keys
• As requested, provide system administration expertise for special projects, which may include working with internal and external clients and vendors. This includes technical input and recommendations; automation solutions; and, other system administration actions. Confer with corporate workplace manager or federal team lead on a routine basis for project status updates and/or any project issues.
• Provide technical input and recommendations, as a non-voting participant, for potential acquisitions in area of expertise.
• Provide systems administration support for any new systems added to corporate IT infrastructure, assisting with testing, configuration, integration and implementation efforts, including developing test plans, implementation schedule, scope, dependencies, documentation, and user training.
• Create, develop / draft and recommend cross training and functional documentation of subject matter for corporate audiences; conduct User training on an individual or group basis as requested.
• Participate in corporate process workshops, including project lessons learned, group improvement and documentation efforts for procedures, processes, standards, guidelines, practices, and other technical and instructional material 

Education & Corresponding Experience

• Bachelor’s Degree in Computer Science, Information Technology, Engineering, or a related technical field is preferred.
  • With an Associate’s or Bachelor’s Degree in applicable fields, 8 years of experience is required.
  • With an Associate’s or Bachelor’s Degree not in applicable fields or without a degree, 10 years of experience is required.
  • Applicable Certifications may count for 1 year of experience.

• Experience must include direct work experience in Information Technology performing System Administration 

Required Skills & Experience

• 5 Years of knowledge and experience sufficient to administer disparate Active Directory domains and services necessary to support these domains such as DNS, ADCS, DFS.
• 7 Years of knowledge of and experience sufficient to successfully troubleshoot Windows operating systems using text-based logs, windows event logs, and various utilities.
• 5 Years of knowledge of and experience with TCP/IP and related services.
• 5 Years knowledge of and experience with Kerberos authentication in enterprise environments and a strong understanding of Active Directory (AD) integration, LDAP, and hybrid-joined infrastructure.
• 2 Years knowledge and experience of Active Directory Federation services as well as federated identity concepts to support authentication in a SaaS environment.
• 2 years Hands-on experience with Microsoft Entra ID and a solid understanding of SSO and identity protocols such as SAML, OAuth 2.0, OpenID Connect, and SCIM.  Implementation of FIDO2 security keys and experience migrating large enterprise user bases from traditional MFA to passwordless solutions is desirable 

Preferred Skills & Experience

• Direct experience operating an enterprise cyber vulnerability scanning and assessment infrastructure such as Nessus.
• Experience configuring and managing systems using Puppet Enterprise.
• Strong knowledge and experience with PowerShell to automate processes, gather information and make infrastructure configuration changes.
• Windows operating system and software packaging, installation, and troubleshooting.
• VMware vSphere administration and operation 

Additional Requirements:

• Valid U.S. Driver’s License is required

Pre-Employment RequirementAll employment offers are contingent upon successful completion of our pre-employment screening that may include drug testing, background/criminal check, and if applicable, must meet eligibility requirements for access to classified information. APR Staffing is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law. About APR Staffing APR Staffing was born from the merger of two well-respected technical staffing firms in Portland. ieSolutions and Data Resource Group. Both companies have recently been award winners for the Portland Business Journal's Fastest-Growing Private Companies. The two firms, now as APR Staffing, make for one of the fastest-growing and most-respected professional and technical staffing companies in Oregon and Southwest Washington. Collaborating with our customers, we augment their workforce with technical and administrative professionals. We provide only high-caliber, professional-grade resources throughout the Pacific Northwest.