Example · Systems Administrator
Copilot can write your scripts. A cloud migration decides who owns the environment.
28 of your 40 hours still need you
- 18 stay yours
- 10 faster with AI
- 12 tools could take
A typical week at the middle pace. Your plan uses your own tasks.
Is sysadmin a dying career?
By our task-by-task count, 28 of a typical 40-hour week as a systems administrator still need a person. Tools could already take about 12 hours. A model does well whatever part of your job it can do, and if you have watched Copilot write your PowerShell you know it. That is about 31% of your week.
Read more
It cannot do the part your company actually pays you for. That includes being the named person when a business-critical system stops at 6 a.m., knowing which Group Policy breaks which line, and being able to bring the ERP, the core business system, back from a backup.
For many sysadmins the bigger force this year is the move to the cloud, often pushed by a virtualization licensing bill. Moving most of your workloads into Azure or another cloud removes or reshapes a large part of what you do today, whether or not anyone ever gives an agent your credentials. That is both the main risk and the main opening, because a migration resets who knows the environment. Whoever builds the new one knows it. This report helps you become that person, instead of the reseller or consultancy doing the design.
The hard truth
The platform you know best can be repriced overnight.
Your deepest skills may sit on one vendor's platform. After Broadcom bought VMware, costs rose and most surveyed IT leaders said they are shrinking their footprint.
Sources (2)
- 86% of surveyed North American IT decision-makers are actively reducing their VMware footprint. CloudBolt survey of 302 IT leaders, via CIO Dive, 2026-02
- Among those planning migrations, almost three-quarters are moving to public cloud. CloudBolt survey, via CIO Dive, 2026-02
What stays yours
The 6 a.m. outage page, the file server down, the "everything is slow" call from a site
A model can propose causes, but it cannot decide to fail over the ERP during a production shift and own the consequence, and it does not know which switch stack reboots on its own every third Sunday. Someone with an ID badge and a rollback plan is answerable. When you are on call, that is you.
Knowing where the bodies are buried in Group Policy (GPO), shared file folders (DFS) and print
Years of Group Policy is undocumented history. A model reading your GPOs sees what they do, but it cannot tell which ones were a workaround for a scanner driver years ago. This knowledge has a shelf life. A cloud migration and Intune will retire a lot of it.
Being the person who can restore the ERP
A restore is the hardest task on your list to check. You find out it was wrong when the company cannot ship. The person named in the DR plan is doing protected work. If you are the only one, it is also single-point-of-failure work.
Access provisioning under a compliance regime (for example CMMC, the Defense Department's security rules)
Under the DFARS CMMC rule (effective November 10, 2025) a named affirming official affirms continuous compliance annually. The access-control and identification-and-authentication families under NIST SP 800-171 are what an assessor tests. The affirmation is signed above you, but the evidence is yours, and an assessor asks a person for it.
Maintenance-window and vendor coordination with operations
Which line or team can lose a system for 40 minutes, and whose weekend that ruins, is not written anywhere.
What's next for a systems administrator?
Plan A is your best move inside the work you do now. Most sessions in the 13-week plan build toward it.
- A
Own the new environment
Why it fits
Why you. You may be the only internal person with both the on-prem context the migration needs and its failure history. The vendor and the security analyst have neither, and senior colleagues leave.
The gap. You have no cloud credential, no infrastructure-as-code in production and no written designation. Your manager may see you as the person who patches, because that is what you have asked to do.
The trade-off. You are volunteering for the work that replaces the work you are good at, and you will spend a year as the least experienced cloud person in the room. If the vendor's contract already names them operator of record, this is a fight over a contract you did not sign, and the incident-owner hedge matters more.
Other moves that fit
These are also good bets in this field. Read them if Plan A doesn't suit you.
Own identity and access governance, end to end
Why it fits
Why you. The access-review spreadsheet lands on you because you are the AD (Active Directory) person. The control lands on someone by name in the security plan. Make it yours.
The gap. The process is manual and undocumented, Entra ID Governance may not be licensed (a budget question, Week 3), and the security analyst may reasonably consider this theirs.
The trade-off. It takes the chasing off you, because a deadline chases managers and you own the control instead of the spreadsheet. But it is desk work, it makes you a compliance name, and if the security analyst wants it, combine rather than compete.
Incident owner, and the portable version of it
Why it fits
Why you. You have on-call experience, at a company that has probably never written down what it does at 3 a.m.
The gap. You have no runbooks beyond your head, no postmortem process, and alert noise nobody has tuned.
The trade-off. Writing down what only you know gives up some hold on your job. That kind of hold mostly keeps you on the pager forever. This is also the hedge: if the cloud and identity moves are blocked, these artifacts are what you take to a larger employer.
What's a plan B for sysadmins?
Plan B is a job AI is creating that these skills already fit. One session a week in the plan trains you for it, so it is ready if your job shrinks or you want a change.
BPlan B, picked for this role
AI workflow builder
You already script away repeat admin work in PowerShell, so building AI-driven automations is a short step with a small portfolio.
Other options
AI governance analyst
Running identity and access reviews gives you the control mindset that AI governance needs, plus some compliance training and the AIGP.
AI auditor
Your access logs and change records are what auditors check, and a CISA turns that into a path toward auditing AI systems.
In your own plan you can switch to any of the 47 roles.
The first two weeks
The first 2 of 13 weeks. Three sessions a week of 30 to 90 minutes, about 2 to 3.5 hours in all, plus one 40-minute Plan B session (45 minutes in weeks 2 and 4). Most of it fits inside work hours, and if a real incident lands, the incident is that week's plan. By week 13 you'll have an ERP restore runbook two people have tested, a dated Server 2016 plan, five on-call runbooks, and a memo asking to own identity, backup and DR.
- Week 1: Measure your starting point
What you do
- ALog your time for one week. Match each block to a task in this report's task list.
- AList every VM (virtual machine) with its OS, owner, application and whether it will migrate, upgrade or retire. Count the Server 2016 machines, since support ends January 13, 2027.
- ARead the migration statement of work to see who is named operator after the vendor hands over.
- BTake Anthropic's free course AI Capabilities and Limitations. Note where AI might hand you a wrong or risky PowerShell command.
- Week 2: Ask to own the cloud
What you do
- AAsk your manager: "Who owns identity, backup and DR in the cloud after the vendor leaves? I'd like it to be me. What would you need to see?" Write the answer down word for word.
- AStart the Microsoft Learn path for AZ-104, the Azure Administrator exam.
- AIn a sandbox subscription, write one Bicep template (Azure's infrastructure-as-code language) that builds your standard VM to your hardening baseline.
- BWork through Microsoft Learn's path Prepare your organization for Microsoft 365 Copilot.
Three courses from the plan
Checked 2026-09-22.
- Microsoft Certified: Azure Administrator Associate (AZ-104)Microsoft · $165 USD in the United States (priced by country)
Yes, if your migration is on Azure. Sit it after Week 13.
- Windows Server Hybrid Administrator Associate via AZ-800 + AZ-801Microsoft · Regional
Don't buy this. It is being replaced.
- Exam AZ-802: Administering Windows ServerMicrosoft · $165 in the US (varies by country)
Maybe in 2027, if your remaining on-prem estate is large. Take AZ-104 first.
Risks beyond AI: moderateMigration risk
Cloud moves this number more than AI does. If your employer is moving workloads to the cloud, a large share of your week ends or changes hands in the migration before any AI is involved, and it is the work the AI score treats as safe because it needs your site knowledge or you on site: patching, builds, backup checks, vendor coordination, the rack. Afterwards, whoever designed the landing zone knows the environment. If that is a vendor, an MSP retainer can take the escalations. Headcount also tracks your industry's budget cycle.
Where this could be wrong
- We may be over-weighting the migration's reach. If core plant or business systems stay on-prem for latency or data-boundary reasons, your context keeps its value longer. Ask in Week 1 what the migration actually contains.
- Incident response may be less protected than we scored. The score assumes a person must decide to fail over. A mature cloud estate with automated failover and an MSP on retainer moves that decision to a runbook and a contract. The need to be there in person ends the day the last rack is empty.
- Compliance accountability may protect the security analyst more than you. The affirmation is the affirming official's; the program is the analyst's. If they want access-control ownership, the plan names them and the identity move becomes a support role.
- The shares are guesses until Week 1. If your log shows much more provisioning and escalation work, the share of your week AI can do rises into the mid-40s and the identity move stops being optional.
Also matched: sysadmin, systems administrator, system administrator. Research checked 2026-09-22. Page updated .