IT - SCCOURTS - Information Systems Architect - Advanced - On-Prem Systems Engineer

Position Information

Position Type

Staff Augmentation

Hours/Week

40

Billing Type

Hourly

Shift

Day

Projected Start Date

11/30/2026

Start Time

8:00 AM

Projected End Date/Duration

12 Months from projected start date

End Time

5:00 PM

Bid Limit Per Vendor

2

Number of Positions

1

Desired Career Level

Experienced Non-manager

Minimum Education Level

Bachelor's Degree

Weekend

None

Position Location

Address

1201 Main Street Suite 600

City

Columbia

State

South Carolina

Zip

29201

Country

UNITED STATES

Requirements

Travel Required

No

Security Required

Yes

Onboarding Category

The following are required for bid submission

• Resume
• R2R
• Cover Letter
• Meets Work Location

Position Description

Please ensure you attach the SC Cover Sheet (attached), a valid Right to Represent, and the candidate's resume with full legal first name, and last name. Posting attachments should be named as AttachmentName_PostingID_LastName_FirstName.

Ex

Resume_1234_Last_First, RTR_1234_Last_First, Coversheet_1234_Last_First

Withdrawn candidates will not be permitted to be replaced. If you would like to use a sub vendor, only 1 level deep, please submit the Sub Vendor usage form.

The State of South Carolina is looking for an Information Systems Architect - Advanced (On-Prem Systems Engineer)

Why is this position open

New position. We are experiencing significant growth in our platform due to modernization efforts.

Will close to submissions on 11/3 at 5:00PM EST.

Interview Process

2 rounds, virtual

Duration of the Contract

12 months

Possibility for Extension

Yes

Work Location

Role is 100% remote

Candidate location

Candidate must currently reside in Eastern Time Zone.

Key Responsibilities

• Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.
• Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction. The Senior reviews and orchestrates; this role implements.
• Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.
• Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.

Manage the Windows Server lifecycle at enterprise scale

build, configuration, patching, upgrading, troubleshooting, and decommissioning.

• Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager's oversight.
• Log, update, and track all work items in Azure DevOps.
• Work service requests and change controls through the Service Management tool, following the team's change process.
• Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.
• Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.
• Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.

Required Skills & Experience

5+ years of experience with Active Directory

domain services, replication, delegation, permissions, and domain controller troubleshooting.

5+ years of experience with Group Policy

design, scoping, filtering, troubleshooting, and change control in a large environment.

5+ years of experience with PowerShell

modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.

• 3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.
• 5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning.

Experience with documenting while working

SOPs, runbooks, and change records kept current, with no after-the-fact write-ups.

• Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.

Preferred / Nice-to-Have

• Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms.
• Endpoint patch management experience, including third-party application and Windows OS patching.
• Third-party application packaging and deployment automation, including application bundles (such as PDQ).
• PKI and AD Certificate Services operations.

Success Metrics / Deliverables

• Success is assessed against metrics established with the Manager and tracked in Azure DevOps, including AD/GPO backlog reduction, CIS items implemented, and script and documentation coverage.
• AD/GPO backlog reduced and tracked in Azure DevOps.
• CIS items implemented per the Senior's direction, with before and after state recorded.
• Core administrative and remediation tasks covered by tested, documented PowerShell, with a baseline script library in Azure DevOps.
• All work product, including scripts, code, and documentation, stored in Azure DevOps as property of the branch, with no work held locally or in personal storage.
• Tested coverage on AD/GPO and PowerShell-based processes, so that more than one person can run and support them.
• SOPs for recurring AD/GPO and hardening tasks written and reviewed by the Senior.

Required Skills

Skill Type

Skill Name

5+ years of experience with Active Directory

domain services, replication, delegation, permissions, and domain controller troubleshooting.

5+ years of experience with Group Policy

design, scoping, filtering, troubleshooting, and change control in a large environment.

5+ years of experience with PowerShell

modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.

3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.

5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning.

Experience with documenting while working

SOPs, runbooks, and change records kept current, with no after-the-fact write-ups.

Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.

Preferred Skills

Skill Type

Skill Name

Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms.

Endpoint patch management experience, including third-party application and Windows OS patching.

Third-party application packaging and deployment automation, including application bundles (such as PDQ).

PKI and AD Certificate Services operations.

Attachment

Senior On-Prem Systems Engineer

Key Responsibilities

• Execute the Active Directory, Group Policy, and permissions work backlog: GPO creation, modification, testing, and retirement, plus delegation and access changes.
• Implement CIS baselines through GPO and scripted remediation, working from the Senior Server Administrator's analysis and direction. The Senior reviews and orchestrates; this role implements.
• Design, write, and maintain PowerShell for administration, automating, auditing, remediation, and reporting across endpoints and AD.
• Identify repetitive operational tasks and automate them, replacing manual procedures with tested, documented scripts.
• Manage the Windows Server lifecycle at enterprise scale: build, configuration, patching, upgrading, troubleshooting, and decommissioning.
• Receive work as assigned and prioritized by the Server Operations Team Manager, including work routed through the Senior Server Administrator or the Server Administrator under the Manager's oversight.
• Log, update, and track all work items in Azure DevOps.
• Work service requests and change controls through the Service Management tool, following the team's change process.
• Store all work product and documentation in Azure DevOps as work is performed, including scripts, code, GPO documentation, runbooks, and SOPs. All work products are the property of the branch.
• Cross-skill with the Senior Server Administrator so that AD/GPO and CIS knowledge is shared, not held by one person.
• Take on additional on-premises duties as team responsibilities are realigned, as directed by the Manager.

Required Skills & Experience

• 5+ years of experience with Active Directory: domain services, replication, delegation, permissions, and domain controller troubleshooting.
• 5+ years of experience with Group Policy: design, scoping, filtering, troubleshooting, and change control in a large environment.
• 5+ years of experience with PowerShell: modules, error handling, remote execution, scheduled and unattended scripts, and AD/GPO automation.
• 3+ years of experience with implementation of CIS benchmarks (or equivalent hardening baselines) on Windows endpoints via GPO and scripting.
• 5+ years of experience with Windows Server administration and lifecycle management across a large server estate, including build, patching, upgrading, and decommissioning.
• Experience with documenting while working: SOPs, runbooks, and change records kept current, with no after-the-fact write-ups.
• Experience working from a tracked work queue (such as Azure DevOps boards) and within formal service request and change control processes.

Preferred / Nice-to-Have

• Experience with task automation and orchestration beyond PowerShell, such as scheduled workflows and automation platforms.
• Endpoint patch management experience, including third-party application and Windows OS patching.
• Third-party application packaging and deployment automation, including application bundles (such as PDQ).
• PKI and AD Certificate Services operations.

Success Metrics / Deliverables

• Success is assessed against metrics established with the Manager and tracked in Azure DevOps, including AD/GPO backlog reduction, CIS items implemented, and script and documentation coverage.
• AD/GPO backlog reduced and tracked in Azure DevOps.
• CIS items implemented per the Senior's direction, with before and after state recorded.
• Core administrative and remediation tasks covered by tested, documented PowerShell, with a baseline script library in Azure DevOps.
• All work product, including scripts, code, and documentation, stored in Azure DevOps as property of the branch, with no work held locally or in personal storage.
• Tested coverage on AD/GPO and PowerShell-based processes, so that more than one person can run and support them.
• SOPs for recurring AD/GPO and hardening tasks written and reviewed by the Senior.