What is the role? We are looking for a hands-on Senior IT Systems and Security Administrator to join our Denver, CO team. As the administrator, you will be the primary IT resource for our U.S. office, while ensuring the security, reliability, and compliance of our local and cloud-based technology environments. You will manage end-user support, infrastructure, cybersecurity, government cloud platforms, and compliance-related activities while working closely with US teams.
Some of your daily tasks will include: - Provide first- and second-line technical support for employees, resolving hardware, software, network, and security-related issues
- Install, configure, maintain, and troubleshoot workstations, laptops, servers, printers, mobile devices, and office IT equipment
- Administer and support local infrastructure, including servers, storage, switches, routers, firewalls, VPNs, wireless networks, and internet connectivity
- Manage Microsoft GCC High services, including Exchange Online, SharePoint Online, Teams, OneDrive, Intune, Entra ID (Azure Active Directory), Conditional Access, and related security controls
- Administer Azure Government resources, including identity services, virtual machines, networking, storage, monitoring, security services, and access management
- Support AWS GovCloud environments, including account administration, IAM, networking, security controls, monitoring, and cloud resource management
- Manage user identity and access across on-premises and cloud environments, including provisioning, deprovisioning, privileged access management, MFA, and role-based access controls
- Monitor, maintain, and improve cybersecurity controls across endpoints, infrastructure, cloud platforms, and user accounts
- Investigate, respond to, and document security incidents, vulnerabilities, threats, and suspicious activity in coordination with internal stakeholders
- Perform vulnerability management activities, including security patching, remediation tracking, configuration reviews, and system hardening
- Administer endpoint management and security solutions, including device enrollment, compliance policies, endpoint detection and response (EDR), disk encryption, and software deployment
- Conduct regular system backups, restore testing, disaster recovery exercises, and business continuity readiness activities
- Monitor system, network, and cloud performance, proactively identifying and resolving operational issues
- Support compliance initiatives by maintaining security documentation, system inventories, audit evidence, access reviews, logs, and control records
- Manage employee onboarding and offboarding processes, including account creation, permissions assignment, hardware deployment, and asset recovery
- Maintain accurate documentation for infrastructure, network diagrams, cloud environments, standard operating procedures, and security processes
- Coordinate with external vendors, managed service providers, cloud providers, and internal global teams to support infrastructure and security initiatives
- Evaluate and recommend improvements to infrastructure, security controls, cloud architecture, and operational processes
- Evaluate and make recommendations regarding modern encryption algorithms and protocols (e.g., AES, RSA, ECC, TLS/SSL) and their application to data-at-rest and data-in-transit, including disk encryption, key management, and certificate handling in line with FIPS 140-2/140-3 requirements.
What do we look for? - 5+ years of experience in systems administration, infrastructure engineering, IT operations, cybersecurity, or a similar role
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent practical experience
- Strong experience supporting Windows-based enterprise environments, including Windows Server and Microsoft 365
- Experience administering Microsoft GCC High environments and understanding of government-regulated cloud environments
- Experience managing Azure Government resources, networking, security, and identity services
- Experience supporting AWS GovCloud environments, including IAM, networking, logging, and security controls
- Strong knowledge of Microsoft Entra ID (Azure AD), Active Directory, Group Policy, DNS, DHCP, and identity lifecycle management
- Solid networking expertise including TCP/IP, VLANs, routing, VPNs, wireless networking, firewalls, and network troubleshooting
- Experience implementing and managing endpoint security technologies, including EDR, device management, encryption, patch management, and vulnerability remediation
- Understanding of security frameworks, compliance requirements, and best practices applicable to government or regulated environments
- Experience with system monitoring, logging, incident response, and security event investigation
- Experience with Microsoft Intune, Microsoft Defender, Sentinel, Security Center, or comparable security platforms
- Experience supporting CMMC, NIST 800-171, FedRAMP, ITAR, DFARS, or similar compliance frameworks
- Demonstrated ability to detect, investigate, contain, and remediate security incidents, including documentation, root-cause analysis, and coordination with internal stakeholders
- Strong troubleshooting, analytical, and documentation skills
- Excellent communication skills with a customer-service-oriented mindset
What do we offer?- Health insurance coverage
- Matching 401k plan
- Generous team performance-based bonus
- Aggressive, uncapped commission structure
- Full autonomy over your territory-no micromanagement; direct line to leadership for fast decisions
- Travel budget, conference attendance, and the tools to win
- Collaboration with the EnduroSat offices with occasional international travel
Salary range 100.000- 130.000 $. The salary will likely be within this range although it may differ based on experience level or other factors.
