SYSTEM Administrator Security Clearance

Position: SYSTEM ADMINISTRATOR with Security Clearance
THE COMPANY For over 40 years, Aero Simulation, Inc. (ASI) has provided quality flight training devices to the US Military. ASI has successfully built numerous training systems with a primary focus on aircrew and maintenance training systems. Our current programs include, but are not limited to, the B-1 Training Systems (Air Force), E-2D Training Systems (Navy), CH-53E Training Devices (USMC), IMOMS (Coast Guard), Navigation, Seamanship, Shiphandling Trainer - NSST (Navy).

To learn more about ASI visit Programs - Aero Simulation, Inc. ASI is a 100% employee-owned engineering and manufacturing company committed to supporting the nation's warfighters. Being 100% employee-owned directly impacts our culture: it drives our decision-making, motivates our teams, increases our productivity, improves retention and contributes to the future success of our company. Our culture is one where we work hard for our clients and for each other - and we have fun collaborating, sharing experience and expertise, and learning along the way.

We strive to deliver exceptional quality, elevate client relationships, and enrich the careers and lives of our employee-owners. As Employee-Owners, we are invested in the success and continued development of each other and the company. In addition to the Employee Stock Ownership Plan (ESOP), we offer a flexible work environment, generous paid time off, professional development opportunities, industry competitive compensation, and superior benefits to include medical, dental, 401k and more!

ASI is a great place to build a career and grow with a company that is dedicated to quality, service and to fostering a community of support for each and every member of the team. To learn more about this opportunity, keep reading! POSITION SUMMARY The System Administrator supports, secures, and modernizes the company's IT infrastructure in a regulated U.S. Defense Industrial Base (DIB) environment.

This role is part of a small, collaborative IT team and is expected to take ownership of one or more defined technical domains while also contributing to general systems administration and organizational end-user support. The ideal candidate brings strong hands-on experience in at least one of the following areas:
Microsoft 365 GCC High security and compliance, enterprise networking and firewall management, or endpoint management and automation. Experience in all areas is not required; depth in one area combined with the ability to operate effectively with compliance-driven environments is strongly preferred.

ESSENTIAL DUTIES AND RESPONSIBILITIES Infrastructure and Systems Administration
* Administer on-premises and hybrid infrastructure, including:

* Microsoft Azure and Microsoft 365

* Active Directory

* Hyper-V virtualized environments

* Windows Server systems

* Monitor system health, performance, and capacity; participate in lifecycle planning and upgrades.

* Support backup, recovery, and disaster recovery processes in alignment with business and compliance requirements.

* Create and maintain technical and procedural documentation to support operational continuity and audit readiness.
* Participate in change management routines to ensure controlled and documented system changes. User Support and Collaboration
* Provide support for internal users as needed, including issue escalation from the helpdesk.

* Work closely with IT management, security/compliance personnel, and HR on access provisioning, policy enforcement, and onboarding/offboarding.

* Document systems, procedures, and configurations in accordance with compliance and audit requirements.

* Microsoft 365 GCC High (Primary Focus Area - Strongly Preferred)

* Administer and support Microsoft 365 GCC High tenants in compliance with DoD, CMMC, and contractual requirements.

* Configure and manage security, compliance, and governance capabilities, including:

* Microsoft Purview (eDiscovery, Information Protection, DLP, retention)

* Microsoft Intune (endpoint compliance, configuration profiles, conditional access support)

* Microsoft Sentinel (log ingestion, alerting, and basic security operations support)

* Support identity and access management using Entra  (Azure AD), including role-based access control, MFA, and conditional access policies.

* Assist with audit preparation, evidence collection, and continuous compliance monitoring activities. Networking and Security (Secondary Focus Area - Desired)
* Support and maintain TCP/IP networking and security infrastructure, including:

* Firewalls and network devices from Cisco, Aruba, and Palo Alto

* VLANs, routing, VPNs, and access control policies

* Assist with firewall rule reviews, documentation, and change management.

* Collaborate with security and compliance stakeholders to ensure network configurations align with CMMC and NIST SP 800-171 requirements. Endpoint Management and Automation (Secondary Focus Area - Desired)
* Support endpoint lifecycle management for Windows systems, including provisioning, configuration,…