<p>We are looking for a Senior Systems Administrator to oversee the management and security of all end user endpoints within a CMMC 2.0-compliant environment. The ideal candidate will have deep expertise in Microsoft SCCM, Intune, and Entra ID (Azure Active Directory), with a strong understanding of endpoint compliance, access controls, and secure configuration management in support of CMMC Level 2 or Level 3 practices.</p> <p>This is a mission-critical role that ensures our endpoint infrastructure supports operational efficiency while meeting strict DoD cybersecurity standards.</p> <p>Key Responsibilities:</p> <ul> <li> <p>Lead the administration and lifecycle management of end user endpoints (desktops, laptops, mobile devices, virtual machines) across the enterprise.</p> </li><li> <p>Design and implement secure baseline configurations and compliance policies in alignment with CMMC 2.0 requirements.</p> </li><li> <p>Manage endpoint deployment, patching, and application delivery using SCCM (System Center Configuration Manager) and Microsoft Intune.</p> </li><li> <p>Administer and secure Microsoft Entra ID including device join processes, Conditional Access, identity governance, and role-based access controls (RBAC).</p> </li><li> <p>Ensure compliance with CMMC 2.0 by maintaining system documentation, audit logs, and configuration management records.</p> </li><li> <p>Develop and enforce Group Policy Objects (GPOs) to meet both operational and compliance needs.</p> </li><li> <p>Collaborate with cybersecurity, compliance, and DevSecOps teams to align endpoint configurations with overall security posture.</p> </li><li> <p>Conduct vulnerability mitigation efforts and system hardening in line with DoD STIGs and NIST 800-171 guidelines.</p> </li><li> <p>Assist with assessments, audits, and evidence collection related to CMMC certification and sustainment.</p> </li><li> <p>Monitor system health and proactively resolve performance or compliance issues across the endpoint fleet.</p> </li><li> <p>Maintain documentation and standard operating procedures for endpoint management and incident response.</p> </li></ul> <p>Required Qualifications:</p> <ul> <li> <p>7+ years of experience in systems administration with a strong focus on endpoint management.</p> </li><li> <p>Expertise with Microsoft SCCM, Microsoft Intune, and Entra ID (Azure Active Directory).</p> </li><li> <p>Hands-on experience managing systems in a CMMC 2.0, NIST 800-171, or other federal compliance framework.</p> </li><li> <p>Proficient in PowerShell scripting and automation for systems administration and configuration management.</p> </li><li> <p>Strong understanding of Windows 10/11 client OS, endpoint security, and vulnerability management practices.</p> </li><li> <p>Familiarity with GPOs, Conditional Access, Zero Trust principles, and MFA enforcement.</p> </li><li> <p>Ability to analyze compliance requirements and translate them into technical configurations and controls.</p> </li><li> <p>Experience with patching, application packaging, and hardware lifecycle management.</p> </li></ul> <p>Preferred Qualifications:</p> <ul> <li> <p>Experience supporting a CMMC Level 2+ environment.</p> </li><li> <p>Knowledge of DoD STIGs, DFARS, and FedRAMP practices.</p> </li><li> <p>Microsoft or cybersecurity certifications such as:</p> </li><li> <p>Microsoft Certified: Endpoint Administrator Associate</p> </li><li> <p>Microsoft Certified: Security, Compliance, and Identity Fundamentals</p> </li><li> <p>CompTIA Security+</p> </li><li> <p>Certified Information Systems Security Professional (CISSP)</p> </li></ul> <p>Key Traits:</p> <ul> <li> <p>Strong attention to detail and security-minded.</p> </li><li> <p>Excellent documentation and communication skills.</p> </li><li> <p>Ability to work independently and collaborate across departments.</p> </li><li> <p>Comfortable in fast-paced, regulated environments.</p> </li></ul>