Reports to Head of Cyber & ITThis is a Hybrid remote role requiring 3 days / week in office from Arlington, VAMust be a U.S. Citizen eligible for security clearanceThe Role:We're looking for a mid-level IT Engineer to own the day-to-day IT operations that keep our people productive and our environment secure. This includes onboarding and offboarding, access requests, password and MFA resets, endpoint management, and SaaS administration.
You'll have enough hands-on experience to work these queues on your own, without close supervision, while following the security and compliance guardrails a defense contractor needs. You'll join a small, high-trust IT and cyber team. As you master the work, we expect you to automate it, and the role can grow into an IT automation path. If you're tired of doing the same manual task twice and want a role where you're expected to script it away, you'll fit right in.
Core Responsibilities:User Lifecycle & Service Desk- Run onboarding and offboarding end-to-end: account provisioning, hardware setup, role changes, same-day deprovisioning, and device wipe and recovery. This includes no-notice terminations.
- Work the IT service desk queue in Jira Service Management. Handle password and MFA resets, access requests, department and admin requests, and troubleshooting within defined SLAs.
- Write and maintain SOPs, runbooks, and knowledge-base articles so common requests can be self-served or handled consistently.
- Escalate security-relevant issues, such as suspected phishing, data spills, or anomalous access, to the cyber team using established procedures.
Endpoint & Device Management- Administer macOS and Windows endpoints in Rippling MDM: enrollment, configuration profiles, and policy enforcement. Help finish migrating the remaining devices off JumpCloud.
- Enforce OS and application patching, and report on device compliance across the fleet.
- Deploy and maintain endpoint security agents (EDR) and DLP controls, such as restricting unmanaged cloud storage.
- Track hardware inventory, assignment, and retirement.
Systems & SaaS Administration- Administer Google Workspace: users, groups, organizational units, shared drives, and email authentication. Support the Google Drive migration.
- Administer Atlassian, GitHub organization access, Slack, and other core SaaS platforms.
- Maintain SSO and MFA integrations between our identity provider and downstream applications.
- Maintain the tool and license inventory. Track renewals and expirations, reclaim inactive licenses (90+ days), and flag shadow IT found through our SaaS management platform.
Access Governance & Compliance Support- Run monthly user access reviews (Google, GitHub, AWS, and others) and keep the evidence audit-ready.
- Apply least-privilege access and our admin-access guardrails consistently across environments.
- Support CMMC Level 2 and NIST 800-171 compliance with evidence collection and accurate documentation of IT controls.
Automation (Growth Path)- Script repetitive tasks (Python, Bash, PowerShell, Google Apps Script, or similar). Examples include onboarding checklists, access-review exports, license-expiry alerts, and ticket routing.
- Partner with cyber and infrastructure engineers on IT automation and tooling-as-code initiatives as the role matures.
Qualifications:Required- 4-6 years of experience in IT support, systems administration, or IT engineering, including at least 2 years beyond tier-one help desk.
- Hands-on administration of an IDaaS/MDM platform (Rippling, JumpCloud, Okta, Azure AD/Entra, Jamf, Intune, or similar). This includes SSO, MFA, and device policy management.
- Experience supporting both macOS and Windows endpoints, including patching and device compliance.
- Google Workspace administration across user lifecycle, groups, and shared drives.
- Experience working a ticket queue in Jira or a similar ITSM tool, and meeting response SLAs.
- Working scripting ability in at least one language (Python, Bash, PowerShell, or similar), with interest in automating repetitive work.
- Clear written communication: you document what you do so others can repeat it.
- Sound judgment on when to resolve, when to escalate, and when a request needs security review.
- U.S. Citizenship.
- At least one certification aligned to the DoD Cyber Workforce Framework (DoDM 8140.03), or the ability to earn one within 6 months of hire, such as:
- CompTIA A+, Network+, or Security+
- ISC2 SSCP
- Microsoft, Google Workspace, or Jamf administrator certifications
Preferred- Experience in a CMMC, ITAR, FedRAMP, or other regulated environment. Candidates from adjacent regulated industries are encouraged to apply.
- Administration of Atlassian, GitHub organizations, or Slack Enterprise.
- Familiarity with SaaS management or IT asset management platforms
- Exposure to AWS IAM, EDR tooling (e.g., CrowdStrike), or vulnerability scanners (e.g., Nessus).
- Experience building automations or workflows that remove manual steps from an IT process.
- Familiarity with NIST 800-171 or NIST 800-53 controls and audit evidence collection.
$104,000 - $194,000 a year
The anticipated compensation range for this position may vary based on experience, skills, qualifications, location, and business needs. In addition to base salary, this role may be eligible for bonuses, equity, and a comprehensive benefits package.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
