Windows Server System Administrator

Welcome to Ovation Healthcare!

At Ovation Healthcare, we’ve been making local healthcare better for more than 40 years. Our mission is to strengthen independent community healthcare. We provide independent hospitals and health systems with the support, guidance and tech-enabled shared services needed to remain strong and viable. With a strong sense of purpose and commitment to operating excellence, we help rural healthcare providers fulfill their missions. 

The Ovation Healthcare difference is the extraordinary combination of operations experience and consulting guidance that fulfills our mission of creating a sustainable future for healthcare organizations. Ovation Healthcare’s vision is to be a dynamic, integrated professional services company delivering innovative and executable solutions through experience and thought leadership, while valuing trust, respect, and customer focused behavior. 

We’re looking for talented, motivated professionals with a desire to help independent hospitals thrive. Working with Ovation Healthcare, you will have the opportunity to collaborate with highly skilled subject matter specialists and operations executives, in a collegial atmosphere of professionalism and teamwork. 

Ovation Healthcare’s corporate headquarters is located in Brentwood, TN. For more information, visit www.ovationhc.com. 

Summary

Performs hands-on vulnerability remediation, patch deployment, and secure configuration hardening for Windows Server environments. Ensures remediation is executed within formal change control, validated through Qualys Vulnerability Management, and reported against service level agreement requirements.

Essential functions

• Review Qualys Vulnerability Management findings for Windows servers and define remediation plans including patch sets, sequencing, and change window alignment.

• Test and deploy patches using Microsoft System Center Configuration Manager or Microsoft Endpoint Configuration Manager where applicable, and manual methods where required.

• Create new Software Update Groups (SUGs) each month for workstations and servers, segregated by OS and environment if needed (e.g., prod, dev, test).

• Schedule and configure deployments for new SUGs, defining appropriate maintenance windows, user notifications, and reboot behavior.

• Implement Windows Server hardening baselines including security configuration standards, legacy protocol reduction, secure remote management posture, and audit logging alignment.

• Validate remediation closure through health checks and Qualys rescans; document exceptions and compensating controls when required.

• Troubleshoot patch failures and service impacts; support restoration and root cause analysis.

• Maintain operational metrics for patch compliance, remediation success rate, vulnerability aging, and repeat findings; support service level agreement reporting.

Required Qualifications:

• Three or more years of direct, hands-on Windows Server administration and patching in production environments.

• Experience executing changes under formal change control with rollback planning and post-change validation.

• Hands-on experience using Qualys Vulnerability Management for validation and remediation closure.

Preferred Qualifications:

• Hospital information technology experience strongly preferred; broader healthcare experience preferred.

• Certifications highly desirable: Microsoft Windows Server certifications, CompTIA Security+, ITIL Foundation, or equivalent.

Work Schedule Expectations:

• Participation in scheduled after-hours maintenance windows as required.

Education:

• Batchelor's degree, preferably in a technical field and or equivalent experience.

WORKING CONDITIONS AND PHYSICAL REQUIREMENTS:

• Reliable high-speed internet connection is required for all remote/hybrid positions. 

• Must have access to stable Wi-Fi with sufficient bandwidth to support video conferencing, cloud-based tools, and other online work-related activities. 

• A HIPAA-compliant work environment is required, including a secure workspace free from unauthorized access or interruptions, no use of public Wi-Fi unless connected through a secure company-provided VPN, and compliance with all applicable HIPAA privacy and security regulations.