EEDM Senior System Administrator

The Enterprise Email and Domain Management (EEDM) Senior System Administrator is part of a team responsible for managing and administrating the hybrid Active Directory, Exchange, and Mobility infrastructure for a large enterprise. In addition to these core services, the sysadmin will also manage several COTS applications that provide services and support to the Enterprise. The analyst is expected to maintain and manage these services at a level of quality acceptable to the government customer. The analyst will develop, review, and implement methods for improving processes and workflow; evaluate, report, and develop improvements to the performance of the EEDM infrastructure; and manage and maintain third-party software to keep within vendor-defined software lifecycles. As part of continuous process improvement, the analyst will play a critical, proactive role in reporting problems; tracking and reporting issues and/or error trends; and monitoring the results of changes implemented on the responsible systems. The senior EEDM System Administrator will be required to participate and lead both long-term projects and troubleshooting efforts in the event of outages.

Core duties include, but are not limited to:

• Manage all aspects of EEDM infrastructure to include monitoring, account creation, and domain experience.
  
• Manage core Mobility Services business to include, but is not limited to, the infrastructure, hardware, software, and services required to support and sustain how the workforce utilizes mobile devices, corporate data, and applications to perform business tasks and to fulfill its mission.
  
• Provide mobile device management (MDM) capability for mobile device and user level controls.
  
• Provides support for implementation, troubleshooting and maintenance of IT systems.
  
• Provide integration support for other applications/systems into the EEDM environment.
  
• Provide escalation and communication support to agency management and internal customers.
  
• Provide incident and problem identification, diagnosis, dispatch, and resolution support.
  
• Manages IT system infrastructure and any processes related to these systems.
  
• Create/Manage Active Directory user accounts in the domain.
  
• Modify existing Active Directory user accounts in the domain by updating user information, adding/removing the account to/from security groups, and moving accounts between Organizational Units (OUs).
  
• Disable or delete inactive and out-processed user accounts.
  
• Manage Enterprise E-mail user accounts, as well as Organizational Mailboxes, Distribution Lists, and other non-persona entities (NPEs).
  
• Review new account requests from site technical staff to ensure required forms are filled out correctly and contain all required signatures.
  
• Escalate tickets to appropriate internal teams, or vendor as required.
  
• Provide After Action Reports, root-cause analysis, and/or lessons learned, following major outages.
  
• Evaluate performance and recommend changes to reduce the types of incidents and problems impacting the daily operations of the IT Infrastructure.
  
• Ensure the change management procedures are followed across the enterprise.
  
• Provide reports to management and other groups.
  
• Create or update application, process/procedure, and system documentation as needed.
  
• Maintain applications managed by EEDM, including reviewing application best practices, how-tos, known issues, whitepapers, and version upgrade release notes from software vendors; plan for, and execute, software and OS upgrades while minimizing downtime.
  

Required Skills:

• Associates degree or higher in related field or equivalent experience.
  
• 6 years of experience providing System Administration or similar support.
  
• 3 years of experience with PowerShell, managing Active Directory objects in a hybrid on-prem and AzureAD/M365 environment, creating scripts on-demand and for automation of tasks.
  
• 2 years of experience administrating cloud environments, such as AWS or Microsoft Azure, such as managing accounts, email and virtual machines. Terraform, or similar automation tool experience, a plus
  
• 2 years of experience developing, managing, and supporting features in the M365 E5 suite, including Azure apps and app registrations, SSO/SAML configuration and troubleshooting, conditional-access policies, MFA, Privileged Identity Management (PIM)/just-in-time access.
  
• At least one of the following new version of Microsoft Associate certifications. Certification must be achieved no later than 60 days after hire:
  
  
  
  • Microsoft Certified: Azure Administrator Associate
    
  • Microsoft 365 Certified: Messaging Administrator Associate
    
  • Microsoft 365 Certified: Enterprise Administrator Associate
    
  
  
• Experience with Active Directory (i.e. DNS, Group Policy, PKI, Trusts, etc.).
  
• Experience with Blackberry UEM and mobile device management capability for mobile device and user level control.
  
• Strong ability to troubleshoot issues surrounding identity and accessing resources in both an Azure tenant and resources found in cross-tenant collaboration scenarios.
  
• Demonstrated ability to lead troubleshooting for issues both known and unknown across all manner of applications/products to include vendor support if required.
  
• Has an understanding of the OSI Model.
  
• Demonstrated ability to lead troubleshooting for issues both known and unknown across all manner of applications/products to include vendor support.
  
• Proven ability to provide technical recommendations to solve short- and long-term issues.
  
• Must be a U.S. Citizen and pass the DHS Employment Eligibility Verification process.
  

Preferred Skills:

• 10 years of experience in IT support or related field.
  
• Familiar with Privileged Access Management (PAM) device or software, such as CyberArk.
  
• Experience using system monitoring tools, such as SCOM, Splunk, TrueSight, etc.
  
• Understanding of IT Security Standards, including the NIST Cybersecurity Framework.
  
• Exposure to PKI infrastructure and smartcard/certificate-based access.
  
• Experience using ITSM ticketing systems, such as ServiceNow.
  
• Experience with report creation and use of Axonius.
  
• Experience with Microsoft Graph.
  
• Basic experience with SCCM.
  
• Basic experience with VBScript.
  
• Demonstrated ability to lead a project from concept to completion, taking a lead role in implementation across multiple simultaneous projects.
  

EOE, including Disability/Vets.

Reasonable accommodation will be made for qualified individuals with a disability, where such accommodation will not impose an undue hardship during the application process and on the job.