About this Role:We are seeking a versatile DevOps Engineer / Systems Administrator to bridge the gap between modern DevOps practices and traditional IT infrastructure management. In this hybrid role, you will drive automation and CI/CD pipelines while also owning day-to-day sysadmin responsibilities - OS patching, certificate lifecycle management, and administration of Windows Server and IIS environments. The ideal candidate is equally comfortable writing infrastructure-as-code and troubleshooting a complex Group Policy configuration.
Key Responsibilities:DevOps & Automation- Design, build, and maintain CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI, or equivalent)
- Manage container platforms and orchestration (Docker, Kubernetes, or similar)
- Develop and maintain infrastructure-as-code using Terraform, Ansible, or PowerShell DSC
- Automate repetitive operational tasks to reduce manual toil and improve reliability
- Monitor system health, performance, and availability; configure alerting and on-call runbooks
- Collaborate with development teams on deployment strategies, release management, and rollback procedures
Systems Administration - Windows & IIS- Administer Windows Server environments (2016/2019/2022), including Active Directory, Group Policy, DNS, and DHCP
- Install, configure, and maintain IIS web servers; manage application pools, bindings, and site configurations
- Administer VMware vSphere environments (ESXi, vCenter): VM provisioning, snapshots, vMotion, and cluster management
- Perform routine OS patching and hotfix deployment across Windows and Linux servers on a defined cadence
- Manage SSL/TLS certificate lifecycle: procurement, installation, renewal, and monitoring expiration dates across all services
- Perform basic troubleshooting by reviewing IIS access/error logs and Windows application/system event logs to diagnose service failures, configuration errors, and performance issues
- Troubleshoot server, application, and network issues in both on-premises and cloud environments
- Maintain system documentation, runbooks, and change management records
Security & Compliance- Apply security hardening standards (CIS benchmarks, STIGs) to servers and infrastructure
- Respond to vulnerability scan findings and remediate within defined SLA windows
- Support audit and compliance activities (SOC 2, PCI, HIPAA, or as applicable)
- Manage secrets and credential rotation for service accounts, certificates, and API keys
Qualifications/Requirements:- 3+ years of experience in a DevOps, Site Reliability Engineering, or Systems Administration role
- Hands-on experience administering Windows Server (2016 or later), Active Directory, and Group Policy
- Proven experience configuring and troubleshooting IIS (application pools, SSL bindings, request filtering, logging)
- Solid understanding of SSL/TLS certificate management, including procurement from public CAs, Let's Encrypt/ACME automation, installation, and proactive renewal workflows
- Hands-on experience with VMware vSphere (ESXi 7+/8, vCenter) and/or Azure VMware Solution (AVS)
- Experience with OS patching workflows for both Windows (WSUS, SCCM, or equivalent) and Linux (yum/apt)
- Familiarity with at least one CI/CD platform (GitHub Actions, Jenkins, GitLab CI, Azure DevOps, or similar)
- Scripting proficiency in PowerShell and at least one of: Bash, Python, or Go
- Working knowledge of networking fundamentals: TCP/IP, DNS, HTTP/S, load balancers, firewalls
- Experience deploying or managing workloads in a public cloud (AWS, Azure, or GCP)
- Strong written communication skills for runbooks, change requests, and postmortems
Preferred:
- Familiarity with NSX-T or VMware HCX for network virtualization and workload migration
- Experience planning or executing on-premises VMware workload migrations to AVS
- Experience with Kubernetes (EKS, AKS, GKE, or self-hosted) and Helm chart management
- Proficiency with infrastructure-as-code tools: Terraform and/or Ansible
- Familiarity with HashiCorp Vault or equivalent for secrets management and certificate automation
- Experience with observability stacks: Prometheus, Grafana, Datadog, Splunk, or ELK
- Exposure to Windows Admin Center, System Center, or Microsoft Endpoint Configuration Manager (MECM/SCCM)
- Knowledge of certificate automation via ACME protocol, ADCS, or a managed PKI solution
- Relevant certifications: Microsoft (AZ-104, AZ-400, MCSA), AWS (SAA, DevOps Pro), RHCE/RHCSA, or CompTIA (Linux+, Security+)
- Experience in a regulated environment (SOC 2, HIPAA, PCI-DSS, FedRAMP)
Additional Requirements / Skills / Working Hours / Compensation Range- Must be able to pass a background check in accordance with client and project requirements
What's In It For You:- Comprehensive core benefits (medical, dental, vision)
- Employer-paid life and disability coverage
- A wide range of voluntary benefits, including pet insurance, pre-paid legal, hospitalization, critical illness, and accident insurance
- 401(k) with day-one eligibility, including a 100% company match on the first 3% of eligible compensation and a 50% match on contributions between 3% and 5%
- Generous time off, including 10 paid holidays, and a PTO plan that starts at 15 days annually, growing up to 25 days with tenure
- Access to Consertus Academy for continuous learning and development
