5+ years of experience in enterprise Windows Server and Microsoft Azure environments
Proficient in Active Directory, GPO, Windows Servers, PowerShell, DNS, and Veeam
Familiarity with Entra ID, Conditional Access, Intune, SharePoint, and Microsoft 365
Microsoft certifications (AZ-104, AZ-500, SC-300, MD-102) or CompTIA Security+ preferred
Knowledge of NIST SP 800-171, CMMC Level 2, and DFARS requirements
Experience with Azure Government or Microsoft GCC High environments is a plus
U.S. citizenship and ability to obtain a government security clearance required
Responsibilities
Monitor and troubleshoot on-prem and cloud environments, including Active Directory and Azure Government
Administer and optimize Azure workloads and assist in migrating local storage to SharePoint
Manage endpoints through Intune and ensure compliance with security policies
Analyze and resolve system issues, implementing short-term and long-term solutions
Conduct system implementations and maintain server performance
Collaborate with MSSP to monitor for security threats and respond to incidents
Provide Tier II/III helpdesk support and mentor junior team members
Benefits
4 Weeks PTO per year, including 40 hours on the first day
10 paid holidays
401(k) with 100% employer matching up to 5% (no vesting period)
Multiple Medical, Vision, and Dental Insurance options
Health Savings and Flexible Spending Accounts
Tuition Assistance covering 30% of tuition with qualifying grades
100% Paid Employee Assistance Program (EAP)
100% Paid Basic Life and AD&D Insurance
100% Paid Workers Compensation Insurance
Voluntary Life Insurance options
Full Job Description
We are seeking a self-motivated, experienced IT Systems Engineer to support and secure our hybrid Microsoft environment, including Azure Government and Microsoft 365 GCC High. This person will split their time between infrastructure and cybersecurity work and Tier II/III support and will be flexible enough to shift focus as business needs change.
Location: Torrance, CA (Onsite)
Responsibilities:
Infrastructure and Cybersecurity Responsibilities (70-80%)
Monitor, administer, maintain, and troubleshoot on-prem environment, including Active Directory, GPOs, File and Print services (PaperCut), Active Directory Certificate Services (AD CS), NPS/RADIUS, Windows Server 2016-2025, Hyper-V cluster, and Veeam backups
Monitor, administer, maintain, and troubleshoot cloud environment, including Azure Government IaaS, Entra ID, SharePoint, and other Microsoft 365 GCC High applications
Administer and optimize workloads hosted in Azure Government, including Azure Virtual Desktop, virtual networking, and site-to-site VPN connectivity
Assist efforts to migrate local file storage to SharePoint
Responsible for local and cloud Server and Application performance
Manage endpoints through Intune, including Settings Catalog configuration, compliance policies, and remediation scripts for hybrid-joined devices
Use NinjaOne RMM for patch management, scripting, and remote support
Administer endpoint security, including CrowdStrike Falcon EDR and BitLocker encryption
Support engineering and lab applications, including MATLAB, Zemax OpticStudio, OceanView, SolidWorks, and IBM DOORS, along with their license servers
Analyze, diagnose, isolate, and identify system problems. Create short-term solutions to alleviate problem symptoms. Identify root causes and create and/or execute long term remediation plans
Conduct implementations that include configuring, installing, and updating servers and applications based on standards
Participate in systems planning and help develop Systems roadmap
Contribute to systems maintenance efforts and perform system hardening
Plan and perform Windows Server lifecycle work, including in-place upgrades and post-upgrade validation
Responsible for monitoring and maintaining NetApp storage, Dell servers (including iDRAC out-of-band management), UPS/power systems, and other appliances at the data center
Work closely with MSSP to continually monitor and analyze system activity to identify malicious activity
Triage and respond to security alerts from CrowdStrike Falcon, the MSSP, and Microsoft 365/Entra ID. Take containment actions such as isolating hosts, disabling accounts, and revoking sessions, following the incident response plan
Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate environmental impact
Implement and maintain DISA STIG baselines and validate them with SCAP scans. Maintain the System Security Plan (SSP) and Plan of Action and Milestones (POA&M) for vulnerabilities identified during risk assessments, audits, and inspections
Collect and maintain evidence for CMMC Level 2 assessments, including in Vanta
Document security implementations and support ongoing compliance with IT security policies and configuration guidelines
Helpdesk Support Tier II & III (20-30%)
Serve as Tier II/III support for helpdesk tickets, stepping into Tier I when needed.
Work closely with Tier I to resolve issues and train in new technologies
Follow and maintain technical documentation, procedures, and policies, and suggest improvements.
Mentor junior members of the team
Perform other tasks as assigned by management
Requirements:
5+ years of progressive experience administering enterprise Windows Server and Microsoft Azure environments
Skilled in Active Directory, GPO, Windows Servers, PowerShell Scripting, DNS, and Veeam
Experience with Entra ID, Conditional Access, Intune, SharePoint, Exchange Online, Microsoft 365, general storage, Veeam and Server technologies
Microsoft certifications such as AZ-104, AZ-500, SC-300, or MD-102, or CompTIA Security+, a plus
Cybersecurity such as SIEM, Intune, Entra Conditional Access, and MFA experience a plus
Experience with Linux (Ubuntu), an ITSM ticketing platform, and documenting procedures in a shared knowledge base such as Notion a plus
Experience administering and governing enterprise AI tools a plus
Team player, proactive, reliable, and self-motivated individual who is always striving to optimize and automate
Available for planned support and/or emergencies 24x7
Working knowledge of NIST SP 800-171, CMMC Level 2, and CUI handling requirements under DFARS 252.204-7012 (NIST SP 800-53 familiarity a plus)
Experience with Azure Government or Microsoft GCC High environments preferred
This position requires U.S. citizenship and the ability to obtain and maintain a U.S. Government security clearance
Compensation: $99,000 - $129,000 (Base salary for this position will vary based on your skills, qualifications, and experience)
REQ. #26053
Benefits:
4 Weeks PTO a year (including 40 hours of PTO your first day)
10 paid holidays
401(k) with 100% employer matching up to 5% of salary (no vesting period)
Multiple options for Medical, Vision, Dental Insurance plans
Health Savings Accounts
Flexible Spending Accounts
Tuition Assistance (30% of Tuition with a minimum qualifying grade)
