Senior Microsoft Infrastructure Administrator; REMOTE

Applications for this position will be accepted through 11/9/26

Koniag IT Systems, LLC a Koniag Government Services company, is seeking a Senior Microsoft Infrastructure Administrator to support KITS and our government customer Washington, DC. The position is remote. This position requires the candidate to be able to obtain a Public Trust.

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement.

• Provide expert-level administration, configuration, and engineering support for CLIENT's Microsoft 365 environment, including Exchange Online, SharePoint Online, One Drive, Microsoft Teams, and associated services
• Lead planning and execution of Microsoft 365 service updates, feature rollouts, and configuration changes in accordance with ITIL 4 change management practices
• Monitor Microsoft 365 service health, performance, and security posture, taking proactive action to address issues before they impact end users
• Develop and maintain Microsoft 365 configuration standards, policies, and governance documentation
• Support Microsoft 365 license management and optimization in coordination with the Asset/Financial Management team
• Stay current on Microsoft 365 roadmap updates and recommend improvements aligned with CLIENT's mission and security requirements

• Administer and engineer CLIENT's Microsoft Azure Government environment, including Azure Active Directory (Entra ), conditional access policies, identity governance, and privileged identity management
• Lead integration and administration of Microsoft Entra identity services, including IAL2 identity assurance, multi-factor authentication, and single sign-on configurations
• Support Zero Trust Architecture implementation through proper configuration of Entra identity, conditional access, and least-privilege access controls
• Manage Azure Government resource administration, including subscriptions, resource groups, role-based access control (RBAC), and policy enforcement
• Coordinate with the Infrastructure and Platform Operations team on Azure-hosted workloads and cloud infrastructure management
• Support FedRAMP compliance for Azure Government services in alignment with CLIENT cybersecurity policies

• Lead administration and engineering of Microsoft Endpoint Manager (Intune) for device management, compliance policy enforcement, and application deployment across CLIENT's endpoint fleet
• Manage Microsoft Defender for Endpoint configuration, policy management, and incident response coordination
• Develop and maintain endpoint configuration baselines, compliance policies, and security standards aligned with NIST SP 800-53 and CLIENT cybersecurity requirements
• Support patch management and software deployment processes for Windows endpoints through Intune and related tooling
• Coordinate with the NOC and Service Desk teams on endpoint-related incidents and escalations

• Administer and engineer Exchange Online, including mail flow, transport rules, anti-spam/anti-phishing policies, and mailbox management
• Support Microsoft Teams administration, including Teams policies, governance, meeting configurations, and integration with A/V systems
• Manage email security configurations, including DMARC, DKIM, SPF, and Microsoft Defender for Office 365
• Coordinate with the A/V Lead Systems Integrator on Microsoft Teams Rooms integration and support
• Troubleshoot and resolve complex Exchange Online and Teams incidents, serving as the senior escalation point for Microsoft messaging and collaboration issues

• Ensure all Microsoft infrastructure configurations comply with FISMA, NIST SP 800-53, FedRAMP, and CLIENT cybersecurity policies
• Administer Microsoft Purview compliance solutions, including data loss prevention, information protection, and compliance management
• Support implementation and maintenance of Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09) across Microsoft platforms
• Apply least-privilege and separation-of-duties principles to all Microsoft infrastructure configurations and access management
• Support security assessment activities, audit evidence collection, and remediation of Microsoft-related findings
• Promptly report suspected or confirmed security…