4376 Tier III Systems Engineer

OVERVIEW:

We are seeking a highly skilled Tier 3 Systems Engineer to serve as a senior technical authority across our Microsoft 365, Azure, and secure enterprise infrastructure environments. This is a hands-on engineering role for someone who thrives operating across the full technology stack-from identity and endpoint security through virtualization, networking, and cloud infrastructure. You will play a critical role in designing, securing, and operating environments that support both commercial and DoD / Intelligence Community customers, with a strong emphasis on security, compliance, and operational excellence. This position is ideal for an engineer who enjoys solving hard problems, hardening systems, and owning outcomes in highly regulated environments.

GENERAL DUTIES:

• Microsoft 365 & Azure Engineering
  • Administer and harden Microsoft 365 environments end-to-end (Entra ID, Exchange, SharePoint, Teams, Intune, Defender).
  • Design, implement, and maintain secure Azure environments supporting both commercial and government workloads.
  • Lead identity, access, and conditional access strategy aligned to Zero Trust principles.
  • Implement and maintain M365 security baselines and continuous hardening.
• Endpoint & VDI
  • Design and maintain Intune-managed endpoint baselines for Windows systems.
  • Deploy, operate, and troubleshoot Virtual Desktop Infrastructure (VDI) solutions (e.g., Azure Virtual Desktop or comparable).
  • Ensure endpoint and VDI environments meet NIST, DISA STIG, and customer security requirements.
• Security & Compliance
  • Engineer systems in compliance with NIST 800-53 / 800-171, DISA STIGs, and CMMC-aligned requirements.
  • Support audits, assessments, and continuous compliance efforts across corporate and customer environments.
  • Partner with security and leadership teams to implement secure-by-design solutions.
• Infrastructure & Networking
  • Support and maintain VMware-based hypervisor environments.
  • Work with enterprise networking components, including firewalls and segmentation.
  • Hands-on experience with Palo Alto firewalls is a strong plus.

REQUIRED QUALIFICATIONS:

• 8+ years of experience in enterprise IT infrastructure or systems engineering roles.
• Deep, hands-on experience administering Microsoft 365 and Azure environments.
• Strong experience with Intune, endpoint security baselines, and device compliance.
• Proven experience designing or supporting VDI environments.
• Experience working in DoD or Intelligence Community environments, or other highly regulated enterprises.
• Strong understanding of NIST security frameworks and STIG-based hardening.
• Ability to operate independently, troubleshoot complex issues, and own technical outcomes.

DESIRED QUALIFICATIONS:

• Experience with VMware ESXi / vSphere.
• Experience with Palo Alto Networks firewalls.
• Familiarity with GCC High or other government cloud environments.
• Prior support of FedRAMP, FISMA, or CMMC-aligned systems.

CLEARANCE:

• U.S. Citizenship with the eligibility to obtain a Top Secret security clearance