System Administrator
Posted Updated 1
view
NSCG is looking for a System Administrator to keep our IT environment secure, reliable, and running smoothly for approximately 300 on-premises and remote users. You will manage identities, devices, networks, and security tools across both our Microsoft GCC High and commercial (corporate) tenants. This is a hands-on role for someone who enjoys solving problems, automating repetitive work, and improving how things get done.
Responsibilities
End User and Device Support
• Provide technical support to approximately 300 users and their devices, both on premises and remote
• Troubleshoot and resolve hardware, software, device, and network issues
• Support and maintain on-premises printers and peripherals
• Manage device enrollment, configuration, compliance policies, and application deployment through Microsoft Intune
• Maintain accurate documentation of systems, configurations, and support procedures
Identity and Access Management
• Create, modify, and disable user accounts across the full employee lifecycle (onboarding, role changes, offboarding)
• Administer users, groups, licenses, and permissions in Microsoft Entra ID
• Enforce least privilege, multi-factor authentication, and conditional access policies
• Perform periodic access reviews and remove stale or unnecessary accounts
Microsoft 365 and Cloud Administration
• Administer and support both the GCC High and commercial Microsoft 365 tenants
• Maintain clear separation of data and configuration between tenants in line with compliance requirements
• Manage Exchange Online, SharePoint, Teams, and OneDrive settings and policies
Network and Infrastructure
• Maintain on-premises network infrastructure, including switches, wireless, and cabling
• Configure, monitor, and manage firewalls, including rules, VPN, and firmware updates
• Monitor network performance and availability, and resolve outages
• Apply patches and updates to servers, network devices, and endpoints
Security and Compliance
• Operate and tune intrusion detection and prevention systems (IDS/IPS)
• Monitor security alerts and logs, and respond to and escalate incidents
• Support compliance efforts such as CMMC and NIST SP 800-171, including evidence collection and audit preparation
• Support vulnerability scanning and remediation
• Maintain backup and recovery processes and test restores regularly
Automation and Continuous Improvement
• Write and maintain scripts (e.g., PowerShell) to automate routine administrative tasks
• Identify recurring issues and recommend or implement lasting fixes
• Evaluate new tools and processes that improve security, efficiency, or the user experience
Required Qualifications
Responsibilities
End User and Device Support
• Provide technical support to approximately 300 users and their devices, both on premises and remote
• Troubleshoot and resolve hardware, software, device, and network issues
• Support and maintain on-premises printers and peripherals
• Manage device enrollment, configuration, compliance policies, and application deployment through Microsoft Intune
• Maintain accurate documentation of systems, configurations, and support procedures
Identity and Access Management
• Create, modify, and disable user accounts across the full employee lifecycle (onboarding, role changes, offboarding)
• Administer users, groups, licenses, and permissions in Microsoft Entra ID
• Enforce least privilege, multi-factor authentication, and conditional access policies
• Perform periodic access reviews and remove stale or unnecessary accounts
Microsoft 365 and Cloud Administration
• Administer and support both the GCC High and commercial Microsoft 365 tenants
• Maintain clear separation of data and configuration between tenants in line with compliance requirements
• Manage Exchange Online, SharePoint, Teams, and OneDrive settings and policies
Network and Infrastructure
• Maintain on-premises network infrastructure, including switches, wireless, and cabling
• Configure, monitor, and manage firewalls, including rules, VPN, and firmware updates
• Monitor network performance and availability, and resolve outages
• Apply patches and updates to servers, network devices, and endpoints
Security and Compliance
• Operate and tune intrusion detection and prevention systems (IDS/IPS)
• Monitor security alerts and logs, and respond to and escalate incidents
• Support compliance efforts such as CMMC and NIST SP 800-171, including evidence collection and audit preparation
• Support vulnerability scanning and remediation
• Maintain backup and recovery processes and test restores regularly
Automation and Continuous Improvement
• Write and maintain scripts (e.g., PowerShell) to automate routine administrative tasks
• Identify recurring issues and recommend or implement lasting fixes
• Evaluate new tools and processes that improve security, efficiency, or the user experience
Required Qualifications
- 2+ years of experience in system administration, IT support, or a related role (paid or unpaid)
- US Citizen
- CompTIA Security+ or the ability to obtain it within 3 months of hire
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
- Certified CMMC Professional (CCP)
- Additional CompTIA certifications
- Microsoft security or Azure certifications
- Identity and access management (IAM)
- Automation scripting (e.g., PowerShell, Python, or Bash)
- Microsoft 365 administration
- Endpoint management with Microsoft Intune or similar tool
- Network fundamentals: TCP/IP, NCS, DHCP, VLANs, and VPN
- Firewall configuration and management
- Experience supporting a Microsoft GCC High environment
- Familiarity with CMMC, NIST SP 800-171, or DFARS compliance requirements
- Azure networking (virtual networks, network security groups, VPN gateways)
- Creating and managing virtual machines (VMs) in Azure or Hyper-V
- Azure Virtual Desktop (AVD) management
- Supporting software development teams, including CI/CD pipelines (e.g., Azure DevOps or GitHub Actions)
- Experience with SIEM or EDR tools such as Microsoft Sentinel or Microsoft Defender for Endpoint
Skills
- Authentication
- Automation
- Azure
- Azure DevOps
- Bash
- CI/CD
- Cloud
- Cmmc
- Cybersecurity
- DevOps
- Dfars
- DHCP
- EDR
- Entra ID
- Firewall
- Firmware
- GitHub
- GitHub Actions
- Hyper-V
- IAM
- Intrusion Detection
- Intune
- Microsoft Defender
- Microsoft Exchange
- Microsoft Sentinel
- Network Security
- Networking
- Nist
- Onedrive
- PowerShell
- Python
- SharePoint
- SIEM
- TCP/IP
- VLAN
- VPN
- Vulnerability Scanning