Systems Administrator (Secure IT Infrastructure)

About the role

We are seeking a Systems Administrator to operate and maintain internal IT infrastructure supporting regulated Space and DoD programs. The role focuses on secure system administration, endpoint management, cloud workload support, and compliance within a CMMC Level 2‑scoped environment.

Key responsibilities

• Administer and maintain Windows workstations and servers in a regulated environment.
• Support on‑prem virtualized infrastructure, including VMware vSphere, ESXi and vCenter.
• Support cloud‑based workloads, such as AWS instances, following internal security standards.
• Apply patches, updates and configuration changes via approved change processes while ensuring system availability.
• Provision, modify and decommission user accounts using least‑privilege principles; manage Active Directory, Group Policy and endpoint configurations.
• Assist with Microsoft 365 GCC High administration (Entra ID/Azure AD, Intune, Microsoft Defender, Purview) and Sentinel alert triage.
• Image, configure and deploy new‑hire systems using approved baselines.
• Implement and sustain technical controls required for CMMC Level 2 (NIST SP 800‑171) compliance, generate evidence artifacts and remediate findings.

Required profile

• Bachelor’s degree in IT, Computer Science, Cybersecurity or related field (or equivalent experience).
• Active Secret security clearance (Top Secret preferred).
• Security+ certification or ability to maintain DoD 8570/8140 compliance.
• Experience administering systems in a secure or regulated environment.
• Familiarity with CMMC Level 2 and NIST SP 800‑171 requirements.
• Strong documentation skills and attention to detail.
• Ability to work independently while following defined security processes.

Required skills

• Windows system administration.
• Active Directory and Group Policy management.
• Endpoint provisioning and support.
• Cloud platforms – AWS (EC2, security groups, IAM) and/or Azure.
• VMware virtualization (vSphere, ESXi, vCenter).
• Microsoft 365 GCC High administration (Entra ID, Intune, Microsoft Defender, Purview, Sentinel).
• Patch management and configuration control.
• Implementation of CMMC Level 2 / NIST SP 800‑171 technical controls.