Windows Systems Administrator

Innovatus Technology Consulting is seeking a Windows Systems Administrator to support and secure our corporate IT environment and Microsoft GCC High tenant. This role is hands-on and operations-focused, centered around Windows endpoint and identity administration, standardization, patching, policy enforcement, and troubleshooting across a security-first, compliance-driven environment.

You will be responsible for maintaining secure, reliable Windows systems for local and remote employees, supporting compliance activities (CMMC/NIST-aligned), and improving operational efficiency through automation and documentation., * Administer and troubleshoot Windows 10/11 endpoints and related enterprise services in a secure environment.

• Build and maintain standard Windows images / configuration baselines, including OS hardening and required software packages.
• Manage Group Policy / configuration policies and ensure consistent enforcement of security settings across endpoints.
• Perform patching and update management, ensuring endpoints remain current, stable, and compliant.
• Manage device access and enforcement controls (local admin restrictions, device encryption posture, secure configuration requirements).
• Monitor endpoint health and compliance and remediate drift from approved baselines.

Identity, Access, and Account Lifecycle

• Provision/deprovision users and devices; apply security groups and validate access changes are fully completed.
• Support authentication and access troubleshooting, including sign-in failures, conditional access behaviors, and device registration issues.
• Maintain accurate account, device, and asset status records to support audit readiness.

Microsoft 365 GCC High Administration (Supporting Role)

• Administer and troubleshoot the Innovatus Microsoft GCC High environment, including:
• User accounts, licensing, and device access
• Exchange Online / email configuration and issues
• Microsoft Teams support
• SharePoint Online and OneDrive access/configuration troubleshooting
• Maintain secure configuration posture and contribute to tenant hardening initiatives.

CMMC / Compliance Support (Operational Enforcement)

• Enforce secure endpoint configurations aligned to Innovatus security policies and compliance expectations.
• Maintain and validate asset inventory records, including ownership, configuration state, and disposition status.
• Support evidence collection by documenting configurations, change history, and endpoint compliance status.
• Ensure users and devices follow approved policies (baseline configuration adherence, encryption, access constraints, etc.).

Help Desk & Escalations (Tier 2 / Tier 1.5)

• Provide daily technical support to local and remote employees:
• Windows troubleshooting (hardware/software/OS issues)
• Peripheral support (printers, docks, scanners)
• Conference room/AV systems (cameras, speakers, microphones)
• Mobile device access support
• Resolve tickets independently; escalate when necessary with complete troubleshooting notes and logs.

Innovation Lab / Infrastructure Support

• Assist with setup, configuration, and troubleshooting of lab solutions:
• Windows servers, storage systems, lab endpoints
• Networking equipment and demo environments
• Support customer/internal demos by maintaining stable and secure lab configurations.

Automation & Process Improvement

• Use Microsoft Power Platform (Power Automate / Power Apps) to automate repetitive IT and compliance tasks in GCC High-compatible ways.
• Document repeatable IT processes, troubleshooting steps, standard builds, and compliance procedures., * Independently resolve common Windows endpoint issues and handle escalations cleanly.
• Improve endpoint compliance by reducing configuration drift and tightening baseline enforcement.
• Streamline onboarding/offboarding with consistent procedures and documented checklists.
• Deliver at least one automation improvement (workflow, app, or ticketing/process enhancement).

Work Environment

• Hybrid environment (Liberty Station on-site support + remote support).
• Collaborative team supporting corporate IT, innovation lab infrastructure, and compliance requirements.

• 2+ years of experience in Windows administration, desktop/endpoint support, or systems administration (or equivalent practical experience).
• Strong knowledge of:
• Windows 10/11 administration and troubleshooting
• System configuration, patching, and baseline management
• User/device lifecycle workflows (onboarding/offboarding, access control)
• Strong problem-solving skills and customer support mindset.
• Ability to work in a security- and compliance-driven environment., * Experience with one or more of the following:
• Microsoft Intune / endpoint management profiles
• Group Policy design and administration
• Microsoft 365 administration (GCC High or Government environments a plus)
• Security frameworks: CMMC / NIST 800-171 familiarity
• Scripting/automation (PowerShell preferred)
• Certifications such as CompTIA A+, Network+, Security+, or Microsoft certs (helpful, not required).