System administrator

NSCG is looking for a System Administrator to keep our IT environment secure, reliable, and running smoothly for approximately 300 on-premises and remote users. You will manage identities, devices, networks, and security tools across both our Microsoft GCC High and commercial (corporate) tenants. This is a hands-on role for someone who enjoys solving problems, automating repetitive work, and improving how things get done.

Responsibilities

End User and Device Support

• Provide technical support to approximately 300 users and their devices, both on premises and remote
• Troubleshoot and resolve hardware, software, device, and network issues
• Support and maintain on-premises printers and peripherals
• Manage device enrollment, configuration, compliance policies, and application deployment through Microsoft Intune
• Maintain accurate documentation of systems, configurations, and support procedures

Identity and Access Management

• Create, modify, and disable user accounts across the full employee lifecycle (onboarding, role changes, offboarding)
• Administer users, groups, licenses, and permissions in Microsoft Entra ID
• Enforce least privilege, multi-factor authentication, and conditional access policies
• Perform periodic access reviews and remove stale or unnecessary accounts

Microsoft 365 and Cloud Administration

• Administer and support both the GCC High and commercial Microsoft 365 tenants
• Maintain clear separation of data and configuration between tenants in line with compliance requirements
• Manage Exchange Online, SharePoint, Teams, and OneDrive settings and policies

Network and Infrastructure

• Maintain on-premises network infrastructure, including switches, wireless, and cabling
• Configure, monitor, and manage firewalls, including rules, VPN, and firmware updates
• Monitor network performance and availability, and resolve outages
• Apply patches and updates to servers, network devices, and endpoints

Security and Compliance

• Operate and tune intrusion detection and prevention systems (IDS/IPS)
• Monitor security alerts and logs, and respond to and escalate incidents
• Support compliance efforts such as CMMC and NIST SP 800-171, including evidence collection and audit preparation
• Support vulnerability scanning and remediation
• Maintain backup and recovery processes and test restores regularly

Automation and Continuous Improvement

• Write and maintain scripts (e.g., PowerShell) to automate routine administrative tasks
• Identify recurring issues and recommend or implement lasting fixes
• Evaluate new tools and processes that improve security, efficiency, or the user experience

Required Qualifications

• 2+ years of experience in system administration, IT support, or a related role (paid or unpaid)
• US Citizen
• CompTIA Security+ or the ability to obtain it within 3 months of hire

Desired Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Certified CMMC Professional (CCP)
• Additional CompTIA certifications
• Microsoft security or Azure certifications
• Identity and access management (IAM)
• Automation scripting (e.g., PowerShell, Python, or Bash)
• Microsoft 365 administration
• Endpoint management with Microsoft Intune or similar tool
• Network fundamentals: TCP/IP, NCS, DHCP, VLANs, and VPN
• Firewall configuration and management
• Experience supporting a Microsoft GCC High environment
• Familiarity with CMMC, NIST SP 800-171, or DFARS compliance requirements
• Azure networking (virtual networks, network security groups, VPN gateways)
• Creating and managing virtual machines (VMs) in Azure or Hyper-V
• Azure Virtual Desktop (AVD) management
• Supporting software development teams, including CI/CD pipelines (e.g., Azure DevOps or GitHub Actions)
• Experience with SIEM or EDR tools such as Microsoft Sentinel or Microsoft Defender for Endpoint