IT Infrastructure & Systems Administrator

About Elveo

Elveo is what happens when two pioneers in direct-to-device (D2D) communications join forces. Elveo brings together a combined 20 years of expertise to close the coverage gap for more than 50 mobile network operators (MNOs) and major distribution partners operating in 60+ countries worldwide.

That heritage and our technology powers what we call 'elevated intelligence' - a new approach that processes and adapts on orbit, delivering voice and data services straight to mobile users, IoT devices and machines across enterprise, government and humanitarian sectors worldwide.

As a team, we're on a mission to deliver powerful compute and connectivity directly to individuals and objects everywhere on Earth.

Join us, and become part of a globally inclusive company that is transforming satellite communications from a niche service to an essential global infrastructure, and democratizing connectivity for billions worldwide.

Ready to take the next step? Join us.

The IT Infrastructure & Systems Administrator will support and maintain Elveo's core IT infrastructure, with a particular focus on Microsoft identity, endpoint management, device security, and compliance across our Chevy Chase, MD and Chantilly, VA locations. This role will administer Microsoft Entra , Intune, Defender, Microsoft 365, and MDM tooling; monitor endpoint compliance and configuration drift; and help ensure systems remain aligned with Elveo's security and CMMC requirements.

The role will also support general systems and network administration, including firewalls, VPNs, DNS/DHCP, wireless infrastructure, and other corporate IT systems. While this is not primarily an end-user support position, the administrator will serve as an escalation point for technical issues and assist with device provisioning, onboarding/offboarding, and other hands-on IT needs when required.

• Administer and harden core infrastructure:
  Microsoft Entra  (Azure AD), Conditional Access, DNS/DHCP, Office 365, and endpoint security (ESET, Microsoft Defender) at the systems-administration level
• Manage endpoint and device compliance through Microsoft Intune and MDM platforms (e.g., Ninja One), including policy design, patch management, and fleet-wide enforcement
• Implement and maintain infrastructure security controls (firewalls, MFA, network segmentation, endpoint protection) in line with ITAR and export-control obligations
• Support Lynk's CMMC Level 2 compliance program - maintain endpoint compliance (patching, configuration baselines, encryption, access control) across the device fleet and evidence controls for audits
• Monitor and remediate endpoint compliance drift via Intune/Ninja One and Microsoft Defender to keep the environment aligned with NIST SP 800-171 control requirements
• Design, deploy, and maintain LAN/WAN, wireless, VPN, and firewall infrastructure across Lynk office and lab locations
• Own network architecture decisions - segmentation, routing, VLANs, redundancy, and capacity planning as the company scales
• Deploy, monitor, and maintain security posture via Microsoft Defender (Endpoint/365) - threat detection, alerting, and remediation
• Manage server infrastructure (physical and virtual), including provisioning, patching, backup, and lifecycle management
• Monitor network and infrastructure health; lead incident response and root-cause analysis for outages and performance issues
• Partner with security/compliance stakeholders on System Security Plans (SSPs), POA&Ms, and audit readiness for CMMC assessments
• Document network topology, infrastructure architecture, and disaster recovery/business continuity procedures

• Serve as a secondary/escalation point of contact for basic end-user technical issues (hardware, software, connectivity, account access)
• Provision and configure end-user hardware (laptops, peripherals) in line with security and compliance baselines
• Troubleshoot common Windows/macOS and Office 365 issues for staff as needed
• Support onboarding/offboarding from an infrastructure and access-management perspective (accounts, device enrollment, permissions)

• 4+ years of experience in network engineering, systems administration, or infrastructure management
• Hands-on experience designing and maintaining LAN/WAN, VPN, firewall, and wireless network infrastructure
• Strong Windows Server and macOS environment administration experience
• Experience managing Microsoft Entra  (Azure AD), Conditional Access, and Office 365 at an administrative/architectural level
• Hands-on experience with Microsoft Intune for device/endpoint management and compliance policy
• Experience with MDM platforms such as Ninja One, Manage Engine, or similar
• Experience deploying and managing Microsoft Defender (Endpoint/365) or comparable endpoint security/EDR tooling
• Understanding of network security fundamentals: firewalls, segmentation, and endpoint protection
• Familiarity with CMMC Level 2 / NIST SP 800-171 control requirements and experience maintaining…