Windows Server Administrator – Active Security Clearance Required
About the role
Join us and make YOUR mark on the World! Lawrence Livermore National Laboratory (LLNL) has turned bold ideas into world-changing impact advancing science and technology to strengthen U.S. security and promote global stability. Our mission spans four critical national security areas nuclear deterrence, threat preparedness, energy security, and multi-domain defense empowering teams to take on the toughest challenges of today and tomorrow. With a culture built on innovation and operational excellence, LLNL is a place where your expertise can make a real impact.
Responsibilities
- Perform advanced troubleshooting and administration for Windows Server, Active Directory, DNS, Group Policy, authentication, and related system integrations.
- Install, configure, maintain, patch, harden, and secure Windows servers and supporting infrastructure services.
- Administer enterprise backup systems, including job monitoring, failure remediation, restore operations, retention management, and recovery validation.
- Analyze complex incidents, identify root causes, implement corrective actions, and document resolutions.
- Develop and maintain PowerShell scripts and utilities to automate administration, monitoring, reporting, and support processes.
- Support cybersecurity operations, including account management, access controls, vulnerability remediation, system monitoring, compliance activities, and preparation of technical artifacts for Assessment and Authorization and ATO activities.
- Provide technical guidance and escalation support to Tier 1 and Tier 2 staff, and maintain accurate SOPs, knowledge articles, and system documentation.
- Participate in infrastructure upgrades, migrations, disaster-recovery and business-continuity exercises, datacenter operations, and operational improvement projects across Corporate and Isolated Networks.
- Perform other duties as assigned.
- Diagnose, troubleshoot, and resolve highly complex Windows, system, network, backup, and integration problems, including driving problem resolution, working with vendors, and managing support cases as required.
- Serve as a technical leader and internal and external consultant, providing highly advanced technical assistance to the user community and collaborating with customers in the design and implementation of computing environments.
- Provide technical leadership for complex upgrades, migrations, disaster-recovery activities, cybersecurity remediation, and operational improvement projects.
- Mentor Tier 1 and Tier 2 staff and provide guidance on troubleshooting methods, system administration practices, and technical procedures.
- Lead root-cause investigations and develop corrective actions for recurring or highly complex incidents.
- Support the development, review, and maintenance of technical artifacts and evidence for ATO packages and other compliance activities.
Qualifications
- Active DOE Q clearance (or active Top Secret clearance) with the ability to obtain and maintain Sensitive Compartmented Information (SCI) access.
- Bachelor’s degree in a computer-related field, or an equivalent combination of education, technical training, and experience.
- Substantial experience administering Windows Server environments, including Active Directory, DNS, Group Policy, and related infrastructure.
- Extensive experience troubleshooting complex Windows infrastructure and enterprise services, or equivalent senior support role.
- Experience installing, configuring, maintaining, patching, Windows servers and supporting services.
- Ability to independently prioritize work, manage multiple assignments, and resolve complex technical problems.
- Strong interpersonal, verbal, and written communication skills, with the ability to work independently and collaborate with multidisciplinary teams.
- Ability to independently set priorities, manage multiple assignments, and resolve complex problems in a fast-paced environment.
Additional Qualifications (393.2 Level)
- Highly advanced knowledge of and substantial experience with Windows Server, Active Directory, DNS, Group Policy, authentication, and related infrastructure.
- Substantial experience providing technical leadership, mentoring technical staff, and resolving complex infrastructure problems.
- Substantial experience developing or modifying PowerShell scripts and utilities for administration, monitoring, reporting, and process automation.
- Substantial experience leading system upgrades, migrations, disaster-recovery exercises, root-cause investigations, and corrective-action activities.
Desired Qualifications
- Experience with cybersecurity tools, vulnerability remediation, access controls, security monitoring, and compliance activities.
- Experience administering enterprise backup and recovery platforms, including job monitoring, failure remediation, restore operations, retention management, and recovery validation.
- Experience with Windows hardening, security baselines, vulnerability remediation, access controls, and cybersecurity monitoring tools.
- Experience with enterprise management, patching, software distribution, virtualization, storage, and infrastructure-monitoring tools.
- Professional computer or network certification, such as Microsoft, CompTIA, Red Hat, or Cisco certifications.
- Experience supporting classified, regulated, isolated, or otherwise security-sensitive computing environments, including NIST-based security controls or comparable authorization activities.
- Experience serving as a technical team lead.
Benefits
- Included in 2026 Best Places to Work by Glassdoor!
- Flexible Benefits Package
- 401(k)
- Relocation Assistance
- Education Reimbursement Program
- Flexible schedules (*depending on project needs)
Pay
Pay Range $125,310 - $153,444 Yearly at the 393.1 level; $151,620 - $185,640 Yearly at the 393.2 level.
Schedule
This position requires full-time on-site presence due to the nature of the work.
We need to ensure we didn't include any boilerplate like EEO, scam warning, etc. We removed those. Check for any repeated content: we included responsibilities including the additional job responsibilities at 393.2 level. That's fine. We have separate sections for Qualifications, Additional Qualifications (393.2 Level), Desired Qualifications. Could we combine? The instruction says prefer a few substantive sections over many thin ones. But we have many sections. However we need to preserve all substantive information; we could combine qualifications and desired qualifications into one "Qualifications" section, but we risk losing distinction. However we could keep them as sub-sections under Qualifications using- but still one heading. The instruction: "Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It suggests we can have those headings; we can also have other headings? It says use h3 for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but we should follow the pattern. It says "Prefer a few substantive sections over many thin ones." So we should try to reduce number of sections.
We could have: About the role, Responsibilities, Qualifications (including all qualification details), Benefits, Pay, Schedule. Possibly Skills could be part of Qualifications. But we have "Skills" as a possible heading; we could put desired qualifications under Skills. But we need to preserve all info.
Let's think: we could have:
- About the role
- Responsibilities
- Qualifications (including required qualifications, additional qualifications for 393.2 level, desired qualifications)
- Benefits
- Pay
- Schedule
That's 6 sections.
We need to embed all qualification bullet points under one maybe grouped with headings inside? But we cannot have headings inside a section besides the h3? We could use to label subcategories, but that's okay.
We'll produce:
About the role
...
Responsibilities
... all responsibilities (including base and additional)
Qualifications
Required:
... required qualifications
Additional for 393.2 level:
... additional qualifications
Desired:
... desired qualifications
Benefits
...
Pay
...
Schedule
...
That seems good.
Now ensure we didn't include any boilerplate like "Equal Employment Opportunity", "Reasonable Accommodation", "California Privacy Notice", "How To Identify Fake Job Advertisements", "Security Clear
to label subcategories, but that's okay. We'll produce:
About the role
...
Responsibilities
- ... all responsibilities (including base and additional)
Qualifications
Required:
- ... required qualifications
Additional for 393.2 level:
- ... additional qualifications
Desired:
- ... desired qualifications
Benefits
- ...
Pay
...
Schedule
...
That seems good. Now ensure we didn't include any boilerplate like "Equal Employment Opportunity", "Reasonable Accommodation", "California Privacy Notice", "How To Identify Fake Job Advertisements", "Security Clear