Lead Windows Administrator
varmoda techWashington (DC)
About the role
Responsibilities:
Oversee endpoint management and IT workflows to ensure a secure, reliable, and seamless end-user experience. Lead patch management efforts, including planning, testing, and deployment of patches to ensure functionality, compatibility, and minimal disruption to existing infrastructure and applications. Proactively monitor and remediate security vulnerabilities in coordination with security teams, implementing measures to mitigate risks. Manage automation and workflow optimization for device provisioning, patch management, encryption, software deployment, and other IT workflows. Leverage scripting and automation tools such as PowerShell, Ansible, SCCM, and Intune to streamline and enhance desktop engineering processes. Provide technical leadership and oversight of endpoint security and encryption management activities. Serve onsite at the Fairchild Building in Washington, D.C., five (5) days per week, ensuring direct support and operational oversight.
Required Experience:
8-10 years of professional experience in Windows systems administration or a related area as an individual contributor. Proven track record in supporting large-scale enterprise IT environments with responsibility for Windows workstation support, imaging, patch management, and software deployment. Demonstrated experience managing Active Directory, Group Policy, and enterprise-level system administration
Required Skills:
Expert-level proficiency in Windows workstation imaging, patch management, COTS and GOTS software deployment, encryption, and automation. Strong knowledge of Windows Desktop and Server operating systems and associated technologies. Advanced proficiency in PowerShell scripting for automation and administrative task management. Hands-on expertise with Group Policy management and troubleshooting. Strong understanding of security best practices, including implementing and maintaining security measures within Active Directory. In-depth knowledge of Active Directory architecture, design, backup, and recovery solutions. Proficiency in BIOS management, BitLocker and encryption-at-rest solutions, Microsoft Administrative tools, M365, and Azure management/reporting systems. Skilled in supporting Microsoft Enterprise management systems, Microsoft Endpoint Configuration Manager (MECM), and Intune/Entra AD.
Required Education:
- Bachelor's degree in Computer Science, Engineering, Information Systems, or a related discipline (preferred)
- Required Certifications
- CompTIA A+, Microsoft Certified Solutions Expert (MCSE), or equivalent certification.
- Seniority level
- Mid-Senior level
- Employment type
Full-time
Job function
OtherIndustriesIT Services and IT Consulting
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
More like this