Note: The job is a remote job and is open to candidates in USA. Saroe Inc is seeking an experienced Microsoft Server & Azure IaaS Administrator to support their client in the public sector on a remote engagement. This role involves managing Windows Server, Active Directory, and Azure IaaS resources, ensuring reliable service delivery and continuous improvement.
Responsibilities
- Configure and maintain Windows Server (2016–2025); manage roles/features (AD DS, DNS, DHCP, DFS, File Services), patching, performance tuning, and capacity planning
- Configure and support IIS websites and applications, including application pools, bindings, SSL/TLS certificates, URL Rewrite/ARR, security hardening, and log analysis; optimize availability and performance
- Manage Azure VMs, VM Scale Sets, disks/storage, Azure Files, VNETs, subnets, NSGs/ASGs, Load Balancer/App Gateway, and Bastion; implement backup (Azure Backup), DR (Azure Site Recovery), monitoring/alerts (Azure Monitor), and cost governance
- Maintain domain health and replication; manage OU structure, users, groups, GMSAs, service accounts, and delegated permissions; troubleshoot authentication/Kerberos/NTLM issues
- Use native tools and platforms (Event Viewer, PerfMon, Azure Monitor, Log Analytics) to proactively detect and resolve issues impacting availability, performance, or security
- Design, implement, and maintain GPOs for security baselines, server configurations, and compliance; perform impact testing and change control
- Apply CIS/Microsoft security baselines, TLS configurations, vulnerability remediation, endpoint hardening, and log review; partner with security teams for audits and incident response
- Build PowerShell scripts/modules to automate routine tasks (provisioning, patching, reporting) and use Infrastructure-as-Code (e.g., Bicep/ARM/Terraform) for repeatable deployments
- Produce and maintain SOPs, diagrams, inventories, and runbooks; follow ITIL change/incident processes; contribute to a knowledge base
- Serve as an escalation point for server/web platform issues; coordinate with application owners on deployments, certificates, and integration
- Lead or support upgrades, migrations, re-platforming, and cloud adoption initiatives; drive standardization and modernization
- Provide answers and documentation, and implement changes required as part of compliance audit findings (e.g., IRS 1075)
Skills
- 5–7+ years administering Windows Server, AD, GPO, and IIS in mid-to-large enterprise environments
- Strong hands-on experience with Windows Server (2016–2025), AD DS, DNS, and restores
- Group Policy design and troubleshooting (RSOP, GPMC, GPResult)
- IIS configuration, SSL/TLS, bindings, app pools, URL Rewrite/ARR, and logging
- Azure IaaS experience (VMs, VNETs, NSGs, Load Balancer/App Gateway, Azure Backup/ASR, Azure Monitor, Log Analytics)
- PowerShell scripting (automation, modules, REST/Graph, CLI)
- Strong documentation, change control, and incident/problem management (ITIL) practices
- Clear communicator, collaborative, organized, and able to prioritize across multiple stakeholders and deadlines
- Microsoft Certified: Azure Administrator Associate (AZ-104), Windows Server Hybrid Administrator Associate (AZ-800/AZ-801)
- Azure Network Engineer certification (AZ-700)
- Experience with MCM/ConfigMgr, WSUS, Defender for Cloud, Sentinel, Splunk/ELK, ServiceNow/Jira
- Solid understanding of TCP/IP, DNS, routing, VPN, firewall rules, load balancing, and private endpoints
- Familiarity with .NET application hosting, SSO (SAML/OIDC), App Gateway/WAF, certificate pinning, and mutual TLS
- Experience with Bicep/ARM/Terraform, DSC, or Ansible; Azure Policy/Blueprints
- Experience with Azure DevOps for server-side configurations
Benefits
- Competitive contract rates
- Consistent placement opportunities
- Support our consultants throughout the engagement lifecycle
- Providing pathways for continued contracts
- Skill growth
- Long-term career development
Company Overview