Cloud Systems Administrator

Thornton Tomasetti applies engineering and scientific principles to solve the world's challenges. An independent organization of creative thinkers and innovative doers collaborating from offices worldwide, our mission is to bring our clients' ideas to life and, in the process, lay the groundwork for a better, more resilient future. We provide support and opportunities to our employees to achieve their full potential and cultivate a rewarding career. Thornton Tomasetti provides engineering design, investigation, and analysis services to clients worldwide on projects of every size and level of complexity. We are a 100% employee-held organization of 1,700 engineers, architects, and sustainability and support professionals collaborating from about 43 offices across the United States and globally. We focus on providing a diverse suite of integrated services and leading innovation in our industry to ensure the continued success of our clients. The Role Thornton Tomasetti is seeking a Cloud Systems Administrator with two areas of responsibility: the Windows infrastructure in Azure and our Virtual Desktop Infrastructure platform. You will administer Windows Servers, Active Directory and Group Policy, Microsoft Entra ID, and Azure infrastructure services. On the VDI side, you will administer Citrix DaaS platforms and supporting services. Both areas span commercial and U.S. Government environments. What You'll Do Collaborate with IT leadership, end-users, and the network, security, and endpoint teams to continually improve our government and commercial cloud environments. Identify opportunities for automation for server, identity, cloud, and VDI operations to reduce manual effort, and improve performance and reliability. Contribute to platform modernization projects to keep our infrastructure secure, reliable, and efficient. Assist with the deployment of Azure and Citrix DaaS Government services, Windows Server workloads, and other supporting cloud services using best practices. Utilize automation (PowerShell, Bicep, Azure Automation) to standardize and accelerate deployment and configuration. Coordinate with endpoint delivery teams to ensure applications are deployed consistently across both VDI environments. Administer Windows Server systems including patching, hardening, roles and features, certificates, and monitoring. Administer Active Directory and maintain Group Policy for servers and VDA policy, keeping virtual desktop policy deliberately aligned with the corresponding Microsoft Intune policies applied to laptop endpoints. Administer and optimize Citrix DaaS platforms, with a special focus on optimizing the user experience. Manage Azure VMs, Azure Storage accounts, and Azure File Sync. Assist with identity and access management for applications and staff across Active Directory and Microsoft Entra ID. Maintain automated backup, restore, and high availability across VDI, server, storage, and cloud systems. Perform work in our government environment in accordance with applicable security and compliance requirements, support the controls and evidence those requirements depend on, and protect the integrity and security of enterprise data across all platforms. Provide 3rd level support to our helpdesk and staff for Azure, Windows Server, Citrix DaaS, and identity issues, track work in ServiceNow, and use automation and documentation to proactively mitigate recurring problems. Maintain detailed documentation of configurations, automation scripts, and processes, to accelerate code and documentation work where appropriate. Maintain the Citrix NetScaler high-availability pair and Citrix StoreFront, including TLS certificate renewals, firmware updates, and routine troubleshooting of connectivity and authentication issues. What You'll Bring Required Because this role includes working with systems that handle U.S. Government Controlled Unclassified Information (CUI) and export-controlled information, candidates must be a U.S. citizen and b