Systems Administrator

We are seeking a
* Systems Administrator
* to support and maintain a modern, cloud-managed IT environment built around
* Windows laptops administered through Microsoft 365*. This role focuses on
* endpoint management, identity and access control, security monitoring, and compliance support
* in a regulated environment.

The ideal candidate has strong experience with
* Microsoft 365, Intune, and endpoint security*, is comfortable operating in a
* zero-trust, cloud-native model*, and produces clear, audit-ready documentation.
* Senior-level candidates
* will take a leading role in CMMC 2.0 compliance activities, while
* mid-level candidates
* should have foundational familiarity and the ability to grow into deeper compliance ownership.

• Administer and support
  * Windows 11 laptops
  * managed through Microsoft 365 and Microsoft Intune.
• Configure and maintain Intune policies for device compliance, configuration profiles, security baselines, platform scripts, and update management.
• Manage the full
  * device lifecycle*: provisioning, enrollment, maintenance, troubleshooting, and secure decommissioning.
• Support secure remote workforce operations with cloud-managed endpoints.

• Administer Microsoft 365 services including
  * Entra  (Azure AD), Exchange Online, Teams, SharePoint, and One Drive*.
• Manage user identities, access controls, conditional access policies, and role‑based access.
• Support
  * Cisco Duo
  * as a third‑party MFA provider integrated with external cloud services such as Entra.

• Utilize
  * Microsoft Defender* (e.g., Defender for Endpoint) to monitor endpoint health, investigate alerts, and support remediation activities.
• Leverage
  * Microsoft Purview
  * for data protection, sensitivity labeling, and compliance‑related controls.
• Review logs and security signals in
  * Microsoft Sentinel*, escalating or coordinating response actions as appropriate.
• Apply security best practices including least privilege, device hardening, and zero‑trust access principles.

• Support secure network access using
  * SASE
  * for VPN and remote connectivity.
• Coordinate with networking teams on
  * Fortinet firewalls, switches, and wireless infrastructure
  * as it relates to endpoint access and security controls.
• Assist with access segmentation, secure connectivity policies, and network‑related incident response.

• Create and maintain
  * clear, accurate technical documentation*, including system configurations, procedures, diagrams, and standard operating guides.
• Support organizational
  * CMMC 2.0 (NIST 800‑171 Rev
  2)
  * compliance efforts, including control implementation, evidence gathering, and audit preparation (scope varies by seniority).
• Ensure operational practices align with internal security policies and compliance requirements.

• Troubleshoot endpoint, identity, access, and security issues across the Microsoft 365 ecosystem.
• Perform root‑cause analysis and implement preventative improvements.
• Participate in system enhancements, security improvements, and process optimization initiatives.
• Collaborate with IT support, security, and compliance stakeholders to ensure a stable and secure environment.

• Experience supporting
  * Windows endpoints in a cloud‑managed, Microsoft 365–centric environment*.
• Hands‑on administration of
  * Microsoft 365
  * services including Entra  Intune.
• Practical experience with endpoint security and compliance tooling (e.g., defender and device compliance policies).
• Strong technical documentation skills with attention to…