JOB DESCRIPTION/DUTIES:The Senior IT Systems Engineer is responsible for the design, implementation, maintenance, and continuous improvement of enterprise IT systems and infrastructure. This role operates with minimal supervision and requires strong expertise in systems engineering, cloud and on-premises environments, and federal compliance frameworks. The engineer ensures system reliability, security, and performance while supporting organizational objectives and aligning with NIST, FISMA, and cybersecurity directives.
Systems Engineering & Administration- Perform systems engineering, integration, and maintenance activities in accordance with established standards and best practices.
- Administer and support on-premises and cloud-based environments, including Microsoft 365 and Azure.
- Install, configure, test, and maintain servers, storage systems, and networking equipment.
- Conduct day-to-day systems administration to ensure availability, performance, and reliability of IT services.
Architecture & Continuous Improvement- Evaluate existing IT systems architecture and configurations; provide well-researched, documented recommendations for improvements.
- Identify system dependencies and provide guidance to System Owners on operational priorities.
- Participate in project planning and integration efforts to ensure alignment with enterprise IT operations.
Networking & Infrastructure- Apply expertise in LAN, wireless, and cloud networking technologies to implement and troubleshoot solutions.
- Maintain and optimize connectivity, performance, and resilience across infrastructure components.
Identity & Access Management- Manage the Microsoft Entra ID (Azure AD) environment, including:
- Conditional access policies
- Multi-factor authentication (MFA)
- Identity auditing and monitoring
- Ensure secure identity and access controls aligned with organizational policies.
Security & Compliance- Apply knowledge of NIST guidelines, FISMA requirements, and federal directives to systems management.
- Identify gaps in FISMA compliance and develop actionable remediation plans.
- Implement and maintain STIG baseline configurations for servers and systems.
- Support security initiatives such as:
- Endpoint Detection and Response (EDR) policies
- SCuBA compliance baselines
- Maintain system hardening, vulnerability mitigation, and configuration hygiene.
Patch Management & System Security- Develop and execute patch management strategies to ensure systems are up to date and secure.
- Install firmware updates and security patches across servers, printers, and network devices.
- Protect data through secure configuration and adherence to established procedures.
Monitoring & Incident Prevention- Configure proactive system monitoring and alerting for critical IT resources.
- Support detection of performance issues, vulnerabilities, and potential security incidents.
Disaster Recovery & Resilience- Develop and support disaster recovery (DR) strategies for critical systems and data.
- Ensure backup, recovery, and continuity capabilities meet organizational requirements.
Documentation & Process Development- Develop and maintain comprehensive systems operations documentation, including:
- Standard Operating Procedures (SOPs)
Configuration baselines- Maintenance and support processes
- Ensure documentation supports repeatable, auditable, and compliant operations.
EDUCATION/EXPERIENCE/EXPERTISE REQUIREMENT:- Bachelor's degree in Information Technology, Systems Engineering, or related field (or equivalent experience).
- 6+ years of experience in systems engineering, administration, or infrastructure support.
- Strong knowledge of:
- NIST frameworks and FISMA requirements
- Systems administration in Windows and cloud environments
- Hands-on experience with:
- Microsoft 365 and Azure environments
- Server and storage management
- Networking technologies (LAN, wireless, cloud networking)
- Strong analytical and problem-solving skills.
- U.S. Citizenship.
PREFERRED EDUCATION/EXPERIENCE/EXPERTISE:- Relevant certifications (e.g., Microsoft Certified: Azure Administrator/Engineer, Security+, CISSP, MCSE).
- Experience with STIG implementation and federal compliance environments.
- Familiarity with SCuBA baselines and CDM programs.
- Experience supporting CUI (Controlled Unclassified Information) environments.
- Knowledge of automation and scripting (PowerShell, etc.).
LOCATION: 
