Essential Responsibilities****Azure IaaS – Windows Server VM administration

Provision, configure, and maintain Windows Server VMs in Azure, including sizing, performance tuning, disk/storage management, and availability planning
Perform daily operational health checks (OS integrity, service availability, CPU/memory/disk trends, scheduled task/job success, and event log review)
Troubleshoot Windows platform issues (services, certificates, networking, DNS, authentication, resource constraints) and coordinate resolution with stakeholders

Patch management & updates (Azure Update Manager)

Own VM patching operations using Azure Update Manager (maintenance windows, classification-based patching, phased rollouts, restart coordination)
Monitor patch compliance and remediate failed deployments and “no update data” scenarios
Communicate scheduled maintenance to stakeholders and execute updates in a controlled, auditable manner

Backup & recovery (Azure Backup)

Implement and operate Azure Backup for Azure VMs (policy configuration, monitoring, retention governance)
Perform and document periodic restore tests and recovery procedures to ensure operational readiness

Identity & directory services (AD DS + Azure AD Connect)

Administer AD DS hosted on Azure VMs (domain controllers): users/groups, OUs, Group Policy (GPO), security groups, and delegated access
Maintain domain controller health and dependencies (DNS, replication health, time synchronization, patching coordination, operational runbooks)
Operate and maintain Azure AD Connect (hosted on a Windows VM in Azure): monitor sync health, troubleshoot sync failures, manage scope/filtering, and support upgrades/maintenance
Maintain documentation/runbooks for configuration, troubleshooting, and recovery procedures

Web and file services (IIS + File Servers)

Administer and troubleshoot IIS (site/app configuration, bindings/certs, app pools, logging, performance troubleshooting)
Administer and support Windows File Servers (SMB shares, NTFS/share permissions, access controls, troubleshooting access/performance issues)

Security posture & vulnerability management (Defender for Cloud)

Use Microsoft Defender for Cloud to monitor security posture, address recommendations, and remediate vulnerabilities
Contribute to baseline hardening and security improvements aligned to organizational standards

Monitoring, incident response & continuous improvement

Participate in an on-call rotation; support incident response, service restoration, root cause analysis, and preventative improvements
Automate repeatable administrative work using PowerShell and Azure-native tooling
Create and maintain operational documentation (runbooks/SOPs/diagrams/inventories)

Qualifications (Must have)

3+ years administering Windows Server in production, including Windows Server VMs in Azure
Hands-on experience with Azure VM operations (provisioning, troubleshooting, performance tuning, lifecycle management)
Hands-on experience with Azure Update Manager (maintenance windows, phased patching, compliance tracking)
Hands-on experience with Azure Backup (policy setup, monitoring, restores, retention)
Hands-on experience with Microsoft Defender for Cloud (recommendations, vulnerability remediation, posture management)
Hands-on experience administering AD DS (users/groups/OUs, GPO, permissions) on domain controllers running on Azure VMs
Hands-on experience with Azure AD Connect (monitoring, troubleshooting sync issues, scope/filtering, maintenance/upgrades)
Hands-on experience administering and troubleshooting IIS
Hands-on experience administering Windows File Servers (SMB shares + permissions)
Strong documentation and communication skills; ability to collaborate across IT, engineering, and security teams

Nice to have

Load balancing experience (design/support/troubleshooting)
Microsoft Failover Clustering experience (design/support/troubleshooting)
Azure PaaS experience (e.g., App Services, Functions, Storage, Key Vault, managed databases, etc.)
Infrastructure as Code experience (Terraform/Bicep/ARM)
CI/CD operational support experience
Endpoint/device management tooling experience (Intune / ConfigMgr)
Certificate lifecycle management and secrets management practices
Relevant certifications (optional): AZ‑104, Windows/Identity certifications, security-focused certifications

How We Will Take Care of You

Robust benefit package that includes medical, dental, and vision that start on date of hire.
Paid Time Off, to include vacation, sick, holidays, and floating holidays.
401(k) plan with employer match.
Company-funded “lifestyle account” upon date of hire for you to apply toward your physical and mental well-being (i.e., ski passes, retreats, gym memberships).
Tuition Reimbursement Program.
Voluntary benefits, to include but not limited to Legal and Pet Discounts.
Employee Assistance Program (available at no cost to you).
Company-sponsored and funded “Culture Team” that focuses on the Physical, Mental, and Professional well-being of employees.
Community Give-Back initiatives.
Culture that focuses on employee development initiatives.

Azure Systems Administrator

Key skills