Description

Systems Administrator: Vulnerability Management (US- Hybrid)

Position summary

Surge support, through January 15, 2027. (possible extension)

This is a surge support position through January 15, 2027. Extension is possible but not guaranteed. The role is hybrid, with on-site work in Washington, DC, supporting a federal client and requires an active public trust or higher clearance.

Sikich is seeking a Systems Administrator to support endpoint management, software deployment, and vulnerability remediation at a federal client. This role will handle day-to-day triage and research around failed deployments, patch and update troubleshooting, end-user coordination, and escalation of recurring technical issues. The ideal candidate is an entry-to-mid level administrator with strong hands-on troubleshooting skills, is comfortable working directly with users, and has the aptitude to grow into broader SCCM, Intune, Azure, and vulnerability management responsibilities. Prior experience with every listed tool is not required; demonstrated technical curiosity, sound judgment, and willingness to learn are highly valued.

What will you do in this role?

This role supports a federal client environment and requires professionalism and empathy when coordinating with end users, documenting troubleshooting steps, and following established change, security, and escalation procedures.

Activities include, but are not limited to, the following:

• Research vendor vulnerability fixes, release notes, knowledge base articles, and remediation guidance across multiple software products to support testing, packaging, and deployment.

• Triage failed software installs and deployments by reviewing deployment status, client logs, device health, network connectivity, and user-reported symptoms.

• Conduct end-user outreach, coordinate remote troubleshooting sessions, and communicate next steps clearly while minimizing disruption to the user's workday.

• Perform manual software installation, repair, or reinstallation when automated deployment fails, and document the resolution path for future automation or escalation.

• Review logs such as Splunk Windows Event Viewer, Defender, Purview and endpoint management logs to identify root cause, distinguish user-specific issues from device-wide issues, and recommend the next troubleshooting or escalation step.

Document troubleshooting steps, findings, resolutions, and escalation details in the ticketing system so recurring issues can be tracked and knowledge can be reused by the team.

Track remediation progress for assigned devices or software titles, follow up on failed or incomplete deployments, and help maintain visibility into patch compliance status.

What do you need to succeed in this role?

• Must possess an active public trust or higher government issued clearance.
• 4-year degree or 4 years of relevant experience in lieu of degree
• Must be willing to work onsite 2-3 days a week.
• Empathy, patience and professionalism when working directly with end users, including the ability to explain technical steps clearly over remote sessions.
• Sound judgment to ask for help, appropriate escalation of issues, and the ability to provide enough technical detail for senior administrators to act quickly.
• Basic Excel proficiency for tracking device lists, remediation status, deployment results, and issue trends.
• Ticketing system literacy, with ServiceNow and/or JIRA experience helpful but trainable on the job.

Core Technical Requirements

• Familiarity with SCCM, Intune, with willingness to deepen skills across endpoint management and cloud administration tools such as Azure Update Manager.

• Basic Active Directory and EntraID experience, including user and computer object lookup, group membership review, permissions awareness, and access request support.

• General networking troubleshooting, including DNS lookups, traceroute, connectivity checks, VPN-related issues, and WSUS or update source troubleshooting.

• Experience with Qualys, Tenable, NinjaOne, or similar vulnerability scanning, endpoint monitoring, or remote management tools is a strong plus.

• Azure Update Manager familiarity a plus

• Microsoft certifications in Windows client administration, endpoint management, Microsoft Defender, Purview, Azure fundamentals, or related Microsoft cloud technologies are a plus.

• Experience interpreting vulnerability scan results and translating scan findings into remediation actions.

Desired Qualifications

• Experience using remote support tools to troubleshoot endpoints, coordinate with users, and resolve software or configuration issues without requiring deskside access.
• Experience supporting Windows 10, Windows 11, and Windows Server environments, including software installation, update troubleshooting, device health checks, and basic administrative tasks.

In compliance with this state's pay transparency laws, the salary range for this role is $135,000- $140,000 - $145,000. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location.

In addition, specific skills/experience required are as follows:

• Servant Leader - You are hyper focused on engaging employees, fostering their development, and building a positive culture.
• Solutions Focused - You see opportunities in every business problem and can develop, articulate, and implement solutions.
• Collaboration - You are a relationship builder across all levels of the organization and across all business units.
• Instills Trust - You do what you say, and you follow through on commitments, you act with integrity, you are consistent and are perceived as credible.
• Impact & Influence Thinking - You gain support for ideas, proposals, and solutions, and get others to act, with or without formal authority, to advance initiatives/objectives.