Senior IT Systems Engineer – Arlington, VA

About the role

The Senior IT Systems Engineer will lead Tier 3 troubleshooting, systems administration, and infrastructure improvements for Chinook's managed IT services. This on‑site position at the Arlington headquarters requires hands‑on technical execution, documentation, and support for AI enablement and security initiatives.

Key responsibilities

• Implement, administer, and test data loss prevention (DLP) and information rights management (IRM/DRM) solutions, including classification, encryption, and sharing restrictions.
• Administer on‑premises and virtualized infrastructure, FortiGate firewalls, Microsoft 365 GCC, Azure, Entra ID, Intune, SharePoint, and Teams.
• Author and maintain technical white papers, SOPs, architecture diagrams, runbooks, and implementation guides in version‑controlled repositories.
• Execute formal change management processes, including design, testing, approvals, rollout, and post‑change validation.
• Resolve complex Tier 3 issues across identity, endpoints, servers, networks, cloud services, and business applications.
• Coordinate patching, vulnerability remediation, upgrades, and backup/recovery testing with the managed service provider.
• Design and maintain IT service‑management and electronic‑signature workflows using Adobe Sign or equivalent platforms.
• Configure and validate Microsoft Sentinel and other security‑platform integrations, and support SOC incident response.
• Support audits, security assessments, and compliance with NIST SP 800‑171/172 and CMMC safeguards.
• Assist with AI enablement projects through configuration, testing, documentation, and user support.

Required profile

• Minimum 7 years of hands‑on systems administration, infrastructure engineering, or Tier 3 troubleshooting experience.
• Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field (or 12 years experience with a high school diploma).
• Experience implementing and testing DLP and IRM/DRM solutions.
• Proven ability to produce detailed technical documentation and manage formal change processes.
• Strong Microsoft 365, Azure, Entra ID, and Intune administration skills.
• U.S. citizenship and ability to obtain a Secret security clearance.

Required skills

• FortiGate firewall administration
• Microsoft 365 GCC, Azure, Entra ID, Intune, SharePoint, Teams
• PowerShell scripting and API integration
• Workflow automation with IT service‑management platforms and Adobe Sign
• Microsoft Sentinel, Qualys, Microsoft Purview, Fortra information‑protection tools
• Security certifications such as Security+ or GICSP
• Experience with CrowdStrike SOC integrations