Windows Systems Architect

ESSENTIAL JOB DUTIES:

• IT Function Responsibilities: Serves as a subject matter expert (SME) in Active Directory / Windows environment, Microsoft cloud environments (M365, Azure Cloud Services, MS Teams, SharePoint, etc.), and non-Windows systems including configuration, integration, management, performance tuning, and security. Implements and maintains enterprise systems related to application load balancing, authentication and security applications. Acts as SME for hybrid environments involving on-premise and cloud platforms. Functions as a technical resource and integrator regarding Active Directory and Microsoft L3 issues to administrators, programmers, web developers, network security engineers, database analysts, network managers, and implementation teams. Participates in the identification of vulnerabilities and their mitigation and collaborate with security teams to conduct regular vulnerability assessments and implement necessary security measures. Participates in the analysis and design of new or existing infrastructure systems and services. Performs capacity planning, upgrades, and expansion of the environment.

• Problem Solving: Troubleshoots and develops technical solutions related to incidents escalated from Tier 1 and Tier 2, addressing new or previously unknown issues. Provides oversight on daily activities to set priorities, function as mentor, helps with problem escalation, and communicates significant problems or issues to management.

• Processes and Documentation: Creates and maintains comprehensive system documentation, including architecture diagrams, configurations, and operational procedures.

• Project Management: Maintains effective communications with vendors, peers, and clients in support of assigned projects.

• Research and Assessment: Researches, evaluates, recommends, and implements new technologies.

• Confidentiality: Maintains confidentiality. Handles secure, privileged, sensitive, or confidential information with discretion and in accordance with organizational policies and procedures. Maintains strict confidence to prevent disclosure. Accesses such information strictly for work-related purposes, and ensures that it is securely stored, transmitted, and disposed of in compliance with organization guidelines.

NONESSENTIAL JOB DUTIES
* Related duties and special project as assigned.

Requirements

Required Knowledge, Skills, and Abilities:

Familiar with standard operating procedures and best practices in the listed technology areas, and rely on experience and judgment to plan and accomplish goals:

• Windows Server and Active Directory
• Windows Server and Active Directory Security
• Windows DFS-N/DFS-R Active Directory integrated applications (includes single sign-on)
• Active Directory Group Policy to implement security standards on Domain Controllers, Domain Member Servers, and Domain Member Workstations
• Microsoft Azure Active Directory (AAD) and ADFS in hybrid environments
• Microsoft Azure Active Directory (AAD) Conditional Access Policies, AAD Connect
• DNS services * DHCP services * NTP services
• File and Print services
• Auditing technologies and tools, and provide reports as needed
• Implement security policies and procedures
• SCCM and WSUS, for both servers and desktops
• Virtualization
• High Availability / Disaster Recovery
• M365, MS Teams and MS Intune deployment, administration, and integrations
• MS Exchange Hybrid - L3 Management
• MS SharePoint - L3 Management (cloud and on-prem)
• Microsoft CA - PKI
• Experience using Microsoft PowerShell across the different Microsoft ecosystem.
• Familiarity of the following third-party technologies: F5 LTM/GTM, RSA SecurID, CyberArk, Carbon Black App Control, and Ivanti RADIUS. Cloud Service Knowledge: Familiarity with related Microsoft Cloud services, including Azure services, Microsoft Entra ID, and GraphAPI integrations.
• Microsoft Power Platform Proficiency: Understanding of Power Apps, Power Automate, Power BI, Power Virtual Agents, and Dataverse.
• Ability to solve intellectual problems of substantial variety and complexity using originality and ingenuity.
• Ability to serve as a resource to others in the resolution of complex problems.
• Ability to use substantial latitude for independent decision making and action.
• Experience working in complex environments with a high degree of organizational effectiveness. Ability to successfully work in a team environment.
• Ability to develop relationships with co-workers and employees in other National Academies' departments.
• Excellent communication skills with a proven ability to effectively interact with all levels of employees.

Minimum Education/Training Requirements: Bachelor's Degree in Computer Science or related field, or equivalent knowledge.

Minimum Experience: Eight years of related professional experience. Experience of Windows architecture in a multi-site company and project management is preferred.

Required Licenses, Certification or Registration: : Advanced IT Industry certifications including, but not limited to, Microsoft technologies (cloud and on-prem), CompTIA, etc., are preferred.

Any qualification to be considered equivalent, in lieu of stated minimum, requires the prior approval of the Office of Human Resources.

Other Details

Supervisory Responsibilities/Controls

Reports to Manager, Systems Architecture. General direction is provided.

Mental and Physical Capabilities:

Ability to be visible on camera for meetings when remote.

Ability to use a computer and applicable hardware/software to perform responsibilities.

Ability to use multiple technology collaboration platforms, including collaboration tools. Examples: Microsoft Teams, Asana.

Ability to Focus/concentrate on tasks and multi-task, when needed.

Begin work at the required time, per approved schedule.

Ability to lift/carry laptop and other mobile devices between work and home.

Ability to commute to work.

Ability to travel between National Academies' facilities and offsite sponsor/partner locations.

Ability to work in different time zones, when travel is outside of current location, e.g., when traveling internationally.

Ability to perform work responsibilities onsite, where required.

Ability to interact in-person with multiple people and large groups.

Ability to work in a fast-paced environment and meet deadlines.

Ability to use a computer and applicable hardware/software to perform responsibilities.

Work Environment

This role has been approved for 100% remote status, with occasional travel between National Academies' facilities and to off-site meeting/sponsor locations. Please note that any remote work arrangement will need to be reviewed and approved.

Compensation & Benefits: An estimated compensation range for this position is $101,130 - $176,980. Compensation offered to the selected candidate will be based on the candidate's relevant knowledge, skills, and work experience, commensurate with compensation of current employees in comparable positions with similar knowledge, skills, and work experience, and subject to budget parameters. Note it is not typical for a candidate to be hired at the higher end of the range. This is a benefits-eligible position. Our Benefits Plan offers competitive and comprehensive benefit options, including medical, dental and vision insurance, life insurance, disability coverage, retirement and savings benefits, leave benefits such as paid holidays and paid personal leave, transportation subsidies, and education assistance. For more information, please clickhere.

Equal Opportunity Employer

It is the policy of the National Academies to recruit, hire, transfer, compensate, and promote people in all job categories and to administer all other personnel actions, terms and conditions of employment in a manner that does not discriminate on the basis of race, color, national origin, sex, age, religion, disability, veteran status, or any other characteristic protected by applicable laws. It is also the institution's policy to recruit, hire, promote, and provide reasonable accommodation to qualified individuals with disabilities and covered veterans who are otherwise qualified.

Disclaimer

The above information is intended to describe the general nature and level of work performed by employees assigned to this job. It is not intended to be an exhaustive list of all responsibilities, duties, and skills required. Some functions in this description may be specific to a particular unit of the National Academies and not applicable to other units.

Job Family: