Auria is looking to hire an Systems Administrator III - M365 to support the company. This role is ONSITE in either Warrenton or Reston, VA.
WHAT YOU CAN EXPECT TO DO:
• Identity and access: Administer Microsoft Entra ID users, groups, devices, enterprise applications, application registrations, and service principals. Manage account lifecycles, role-based access control, least privilege, multifactor authentication, Conditional Access, and privileged access capabilities where licensed and supported.
• Hybrid identity: Support Active Directory Domain Services, Group Policy, and approved Microsoft Entra synchronization services. Diagnose synchronization, authentication, authorization, token, device registration, and application integration issues; maintain application credentials and certificates.
• Endpoint management: Administer Microsoft Intune enrollment, application deployment, compliance policies, configuration profiles, encryption, security baselines, and supported update controls. Standardize Windows provisioning, including Autopilot device preparation where supported; support macOS and Linux within platform and government-cloud capabilities. • Microsoft 365 services: Administer Exchange Online mailboxes, permissions, groups, and mail flow; Teams policies; and SharePoint Online and OneDrive access and sharing. Manage licenses, tenant settings, service health, and client connectivity; implement approved collaboration and data-protection settings.
• Azure Virtual Desktop: Maintain host pools, session hosts, workspaces, application groups, user assignments, images, RemoteApps, and FSLogix profiles where deployed. Coordinate patching, capacity, scaling, and compute, storage, and network dependencies; troubleshoot connectivity, authentication, applications, and performance using supported management methods.
• Security and compliance: Maintain Microsoft Defender for Endpoint and Defender for Office 365 configurations and implement cybersecurity-approved hardening and remediation. Assist with alert investigation, containment, and recovery under cybersecurity direction; preserve logs and provide evidence supporting access, configuration, and protection requirements. Support implementation, maintenance, and documentation of assigned technical controls under company policies, contractual requirements, and applicable NIST SP 800-171 and CMMC requirements. Coordinate with Cybersecurity on assessments, remediation, incident response, and evidence collection; promptly escalate security risks and control deficiencies.
• Service operations: Resolve escalated incidents and requests within service targets; document root causes and reduce recurring issues. Coordinate with Microsoft and vendors, communicate service impacts, maintain operational metrics, and validate backup, restoration, and recovery procedures for assigned services. Maintain current operational procedures and configuration records to support continuity and knowledge transfer; prioritize concurrent incidents and requests, communicate status and escalation needs, and recommend sustainable corrective actions. Participate in documented restoration and recovery validation for assigned services.
• Automation and change: Develop and maintain tested PowerShell scripts and Microsoft Graph automation using government-cloud endpoints, appropriate permissions, and secure credential handling. Maintain configuration records and runbooks; test changes, document rollback plans, follow change approval processes, and share knowledge with the service desk.
WHAT THE TEAM REQUIRES:
• Mission-Driven Professional: Collaborative contributor motivated by the opportunity to develop cutting-edge solutions that protect and serve both the nation and the world.
• Intermediate hands-on proficiency in Microsoft Entra ID, Intune, Windows endpoint administration, Conditional Access, authentication methods, hybrid identity, and Microsoft 365 tenant administration.
• Working proficiency in Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft Defender, and Azure Virtual Desktop administration, including profile management and infrastructure dependencies.
• Ability to interpret logs, diagnose problems across identity, devices, applications, and services, and implement tested solutions independently while recognizing escalation thresholds.
• Practical PowerShell and Microsoft Graph skills; working knowledge of networking, Domain Name System (DNS), certificates, modern authentication, endpoint security, and recovery practices.
• Understanding of GCC High service differences, licensing dependencies, Zero Trust principles, least privilege, change management, and secure handling of Controlled Unclassified Information (CUI) and export-controlled data.
• Clear communication, accurate documentation, customer focus, sound judgment, integrity, initiative, and effective coordination with technical and business stakeholders. Required Qualifications (Education, Experience & Certifications):
• Bachelor's degree in information technology, computer science, cybersecurity, or a related discipline;
• 5-10years of relevant experience of progressively responsible systems administration experience, including administering Microsoft 365, Microsoft Entra ID, and Microsoft Intune in a production enterprise environment; or an equivalent combination of education, training and experience
• Technical capability: Demonstrated experience managing identity and endpoint policies, troubleshooting Microsoft cloud services, and maintaining PowerShell automation. Practical exposure to hybrid identity and virtual desktops; ability to assume assigned Azure Virtual Desktop responsibilities. Demonstrated ability to independently prioritize competing operational requirements and resolve complex technical issues with limited supervision.
• Certifications: Microsoft 365 Certified: Endpoint Administrator Associate or Microsoft Certified: Identity and Access Administrator Associate preferred. Other relevant current Microsoft certifications and CompTIA Security+ are advantageous; equivalent demonstrated proficiency is acceptable.
WHAT THE TEAM PREFERS:
• Preferred environment experience: GCC High or Azure Government; aerospace, defense, or another regulated sector; and supporting technical controls and assessment evidence for Cybersecurity Maturity Model Certification (CMMC) Level 2 and National Institute of Standards and Technology (NIST) SP 800-171. Direct GCC High administration experience is strongly preferred, but comparable government-cloud or regulated-environment experience may be considered.
PAY TRANSPARENCY: The salary offered will be based on the selected candidate's qualifications - skills, education & experience - and the position level. $105,000 - $130,000
APPLICATION DEADLINE: December 31st, 2026
Pay Range: $105,000 - $130,000 per year
