IT Systems Engineer — Microsoft 365 & Innovations Lab

cy Daptiv Solutions is hiring an IT Systems Engineer to support our Microsoft 365 environment and our Innovations Lab.

This is a hands-on, collaborative engineering role - not a help desk position. A managed service provider handles day-to-day support and routine Microsoft 365 administration, and a remote lab administrator leads our cloud and lab infrastructure. You are the onsite engineer who partners with both: engineering advanced tenant configuration, providing hands-on lab support, and using AI tools to automate and document the work.

Expect roughly 60% lab and infrastructure support and 40% Microsoft 365 engineering, automation, and compliance.

Innovations Lab - in partnership with our remote lab administrator (~60%)

• Serve as the onsite hands for the lab: racking, cabling, imaging, hardware installation, network segmentation, and out-of-band management.

• Build and maintain on-premises virtualization (vSphere, Hyper-V, or Proxmox), physical servers, switching, and firewalls.

• Stand up and tear down cyber range, demonstration, and proof-of-concept environments for capability development, customer demos, and proposal efforts.

• Support cloud infrastructure (AWS and Azure) alongside the lab administrator - networking, identity, and cost governance.

• Contribute to repeatable, version-controlled environments using infrastructure as code (Terraform, Bicep, or Ansible).

• Keep the lab isolated from production and free of CUI; maintain asset inventory, lifecycle, and secure disposal.

Microsoft 365 - alongside our managed service provider (~40%)

• Serve as internal technical authority for our Microsoft 365 tenant (E5 with Enterprise Mobility + Security), working alongside - not replacing - our MSP.

• Engineer configurations outside the MSP's scope:
  Entra l Access, phishing-resistant MFA, PIM, app registrations, and SSO integrations.

• Design and maintain Intune configuration and compliance policies, Autopilot enrollment, app deployment, and update rings.

• Tune Microsoft Defender and Purview (sensitivity labels, DLP, retention); govern SharePoint, Teams, and external sharing for a CUI environment.

• Coordinate escalations with the MSP and Microsoft support on tenant-level issues.

• Use AI tools daily - Claude (including Claude Cowork and Claude Code), Google Gemini, and NotebookLM - to accelerate scripting, troubleshooting, runbook generation, and documentation synthesis.

• Build reusable AI-assisted workflows for the team: prompt libraries, knowledge bases, and repeatable analysis patterns.

• Apply responsible AI practices - data handling rules for CUI and proposal-sensitive information, appropriate tool selection, and human review of generated output.

• Automate administration and evidence collection with Power Shell and Microsoft Graph; maintain SOPs, diagrams, and runbooks.

• Implement and evidence NIST SP 800-171 controls supporting CMMC Level 2 readiness; support the ISMS and ISO 27001 audits.

• U.S. citizenship - required for handling Controlled Unclassified Information under DFARS .

• 4+ years in enterprise IT infrastructure or systems engineering.

• Hands-on on-premises virtualization (vSphere, Hyper-V, or Proxmox) and comfort with physical hardware, racking, and out-of-band management.

• Networking fundamentals: VLANs, routing, DNS, DHCP, VPN, and firewall rule sets.

• Microsoft 365 administration:
  Entra , Exchange Online, SharePoint Online, Teams, and Intune.

• Public cloud experience (AWS or Azure): accounts and subscriptions, networking, and cost management.

• Power Shell scripting for administration and automation.

• Practical, daily use of AI tools for scripting, troubleshooting, or documentation - and the judgment to know when not to trust the output.

• Experience supporting a formal compliance program (CMMC, NIST SP 800-171, ISO 27001, or RMF).

• Proven ability to collaborate with remote teammates and outside vendors with limited direction.

• Bachelor's in IT, Computer Science, or a related field - or an equivalent combination of certifications and hands-on experience.

• Cyber range, red/blue team lab, or training environment buildout.

• Experience building AI-assisted or agentic workflows for an internal team.

• Prior small business or defense contractor experience wearing several hats.

• Certifications (none required):
  Security+, AZ-104, MD-102, MS-102, AWS Solutions Architect Associate, VCP-DCV, Network+ or CCNA.

• $55,000 - $120,000 annually, commensurate with experience. Full-time, FLSA exempt. Good-faith range per the Maryland Wage Range Transparency Act.

• Hybrid: 2-4 days per week onsite in North Bethesda, MD, driven by lab work. Periodic local travel.

• Medical, dental, and vision; 401(k) with company contribution; PTO and federal holidays. [CONFIRM]

• Company-funded certifications and training, with lab time to pursue them.

• Must be able to lift up to 50 lbs and work in and around equipment racks.

cy Daptiv Solutions, Inc. specializes in Systems Engineering,…