Windows Systems Administrator

Company As one of the world's leading manufacturers of slewing bearings, thyssenkrupp rothe erde leads the way. We develop solutions for the most diverse applications which all have something in common: They transcend the ordinary. From exploring the universe, the sourcing of raw material in the open sea, through to mine or tunnel excavations deep under the earth - our products help turn visions into reality and ensure projects around the world are successful under the most difficult conditions. Rothe Erde consists of around 6,000 employees who represent different lifestyles and cultures. Despite this diversity, we are united by a common identity: we are one team. We strengthen each other through close collaboration, continuous learning and joint development. We believe in fairness. We respect each other and maintain open communication. We keep our word and put our promises into practice. This framework of values unites us and makes us successful. Your responsibilities POSITION SUMMARY: Seeking a mid-level Windows Systems Administrator to maintain and support the company's Windows Server and Active Directory environment. Performs daily administration, escalated troubleshooting, patching, backup and recovery, security, documentation, and infrastructure project work. Resolve routine issues and coordinate complex work with internal teams, vendors, and service providers. KEY RESPONSIBILITIES:Windows Server and Infrastructure - Administer, monitor, patch, upgrade, troubleshoot, and lifecycle-manage physical and virtual Windows Server systems, including domain controllers and Windows-based application servers. - Monitor availability, performance, capacity, services, scheduled tasks, event logs, and system health; investigate outages and recurring issues and coordinate maintenance windows and service-impact communications. - Support DNS, DHCP, file and print services, NTFS and share permissions, certificates, service accounts, scheduled tasks, and other core Windows infrastructure services. Active Directory and Access Management - Administer Active Directory users, computers, groups, organizational units, service accounts, domain controllers, and Group Policy Objects. - Troubleshoot authentication, account lockouts, permissions, replication, DNS, time synchronization, domain trust, and Group Policy processing issues. - Apply least-privilege and role-based access practices; review inactive, privileged, expired, and service accounts and maintain appropriate group-based access. - Test and deploy approved Group Policy and centralized configuration changes, documenting scope, results, and rollback requirements. Security, CMMC and Compliance - Implement and maintain assigned CMMC and NIST SP 800-171 controls for access, authentication, audit logging, configuration management, system hardening, patching, and account management. - Maintain approved security baselines; reduce unnecessary services, legacy protocols, excessive permissions, and administrative access, particularly on systems that process, store, or transmit Controlled Unclassified Information. - Support account and access reviews, corrective actions, Plans of Action and Milestones, security-event escalation, and implementation of approved compensating controls. - Collect and maintain assessment evidence, including procedures, inventories, diagrams, configuration records, logs, reports, screenshots, review records, and change documentation. Vulnerability Report Review and Remediation Planning Review existing vulnerability reports supplied by authorized internal or external sources; identify affected servers, operating systems, applications, services, and infrastructure components. Determine whether findings apply to the environmen