Sr. IT Engineer
Listed on 2026-07-15
-
IT/Tech
Cybersecurity, Cloud Computing: Infrastructure & Operations
Reports to: IT Manager
Location:
Hybrid / Washington DC Metro Area
Clearance Requirement:
Must be a U.S. Citizen eligible for security clearance
About Istari Digital
Istari Digital is a government and commercial contracting company that partners with leading defense organizations on classified and ITAR-regulated data projects. We operate in a fast-paced, security-first environment where reliability, compliance, and innovation go hand in hand.
The Role
We're looking for a Sr. IT Engineer to take ownership of our enterprise device management, SaaS ecosystem, systems integrations, and security tooling. This is a senior individual contributor role with high visibility — you'll be the go‑to person for keeping our identity, endpoint, and automation infrastructure running smoothly while supporting our Dev Ops and cybersecurity compliance posture. If you like building things that scale and hate doing the same manual task twice, you'll fit right in.
CoreResponsibilities
Endpoint & MDM Management
- Own end-to-end device lifecycle management across macOS and Windows using Jump Cloud MDM, including enrollment, configuration profiles, and policy enforcement
- Maintain STIG-hardened endpoint configurations and ensure continuous compliance across the device fleet
- Manage hardware provisioning, and offboarding/wipe procedures for both hardware and software accounts
- Configure and enforce patching at the OS level and application level
- Implement and maintain least privileged access across our ecosystem and conditional / geolocation based access to sensitive resources
Identity, Access & SaaS Integrations
- Administer Jump Cloud directory services including SSO, SCIM provisioning, LDAP, and MFA policy enforcement
- Build and maintain integrations between Jump Cloud and downstream SaaS platforms (Google Workspace, Git Hub Enterprise, Atlassian, AI tooling, and others)
- Own user lifecycle automation — provisioning, role changes, and offboarding — across many enterprise platforms
- Manage Google Workspace administration including shared drives, email authentication (SPF/DKIM/DMARC), group policies, and organizational units
- Build scripts and workflows (Python, Bash, Power Shell, Google Apps Script, or similar) to automate repetitive IT tasks
Dev Ops & Cloud Infrastructure
- Assist in build and implementation of CI/CD pipelines with integrated security tooling (example tooling: Sonar Qube, Github Copilot, Crowd Strike Falcon Cloud Security, Snyk, Jfrog)
- Manage AWS infrastructure including EC2, IAM policies, networking, and Gov Cloud environments to ensure continuous compliance with government NIST 800-171 requirements.
- Administer Git Hub Enterprise including repository management, branch protection policies, and access controls
Cybersecurity Tooling & Compliance
- Administer and tune SEIM / EDR tooling for endpoint detection, cloud security, and logging operations
- Support CMMC Level 2, NIST 800-171, and FedRAMP compliance efforts including evidence collection and control documentation
- 7+ years of experience in IT engineering, systems administration, or a related discipline — with a track record of owning complex technical initiatives end-to-end
- Deep hands‑on experience with Jump Cloud or a comparable IDaaS/MDM platform (Okta, Azure AD, Jamf, or similar), including SSO, SCIM, and endpoint policy management
- Strong experience managing macOS and Windows endpoints at scale, including hardened configurations in regulated environments
- Proficiency with Google Workspace administration across user lifecycle, shared drives, and email authentication
- Solid scripting skills in at least one language (Python, Bash, Power Shell, or similar) with the ability to translate manual processes into repeatable automation
- Exceptional documentation skills — you write SOPs, runbooks, and technical guides that people actually use, and you treat documentation as a deliverable, not an afterthought
- Proven ability to work autonomously in a fast‑paced environment, self‑prioritize across competing demands, and drive projects to completion with minimal hand‑holding
- A demonstrated appetite for picking up new tooling quickly — you're comfortable being handed something…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).