> Markdown version of [/jobs/ext/3463839-systems-engineer](https://www.wearedevelopers.com/jobs/ext/3463839-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Systems Engineer

- **Company:** nuvioIT LLC
- **Location:** Chesapeake, VA, United States
- **Experience:** Experienced
- **Salary:** $75,000.0 - $95,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Android Software Development, Apple IOS, Apple Mac Systems, Systems Engineering, Backup Devices, Computer Networks, Dynamic Host Configuration Protocol, Domain Name System (DNS), Hyper-V, Virtual Private Networks (VPN), Microsoft Office, Windows Servers, Windows PowerShell, Kusto Query Language, Virtual Local Area Networks, EndPointSecurity, Wi-Fi Technology, Firewalls (Computer Science), Microsoft InTune, Deployment Automation, Fortinet, Vmware
- **Published:** September 7, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=f116a3130c59aadc

## About the Role

* 4+ years hands-on in Microsoft 365 administration and security, with direct Intune, Defender, and Entra experience
 * Working experience with Purview.
 * Solid Windows Server and Active Directory administration, plus enough networking to troubleshoot a firewall, VLAN, or VPN issue without escalating
 * Solid PowerShell. You reach for a script before you reach for the portal when the task repeats
 * MSP or small-team background where you were the engineer, not one of twenty
 * Comfortable walking a client through a change and explaining what you did and why
 * Ability to take a loosely defined project and drive it to done without daily check-ins

Nice to have

 * Sentinel deployment or KQL experience
 * GCC High tenant experience
 * CMMC Level 2 or NIST SP 800-171 project work
 * Microsoft certs: MS-102, SC-400, SC-200, SC-300
 * FortiGate certification or deep experience
 * Familiarity with NinjaOne or a comparable RMM, * Microsoft 365: 4 years (Required)
 * Microsoft Defender: 2 years (Required)
 * Microsoft Intune: 4 years (Required)

Ability to Commute:

 * Chesapeake, VA 23320 (Required)

## Description

You will own client projects in the Microsoft 365 stack from scoping through delivery. Expect to spend your first week learning our RMM and PSA. After that you are running projects on your own, managing the timeline, communicating with the client, and getting it done.

This is a hands-on engineering role. You will be in the tenant doing the work, not writing plans for someone else to execute. If you need daily direction to keep moving, this is not the right fit. If you would rather own something and be trusted to finish it, it probably is.

What you will do

 * Deploy and support Intune for Windows, macOS, iOS, and Android, including Autopilot, Apple Business Manager, Android Enterprise enrollment, compliance and configuration policies, and app deployment
 * Configure and tune Defender for Endpoint, Defender for Office 365, and Defender for Identity across client tenants
 * Deploy and operate Purview: sensitivity labels, DLP, retention, and eDiscovery, with an eye toward CUI handling requirements
 * Administer existing Sentinel workspaces: triage incidents, maintain connectors, adjust analytics rules, run KQL queries.
 * Configure Conditional Access and Entra ID
 * Automate recurring work with PowerShell and Microsoft Graph
 * Administer Windows Server and Hyper-V or VMware environments: Active Directory, Group Policy, DNS, DHCP, file services, patching, and backups
 * Support client networks: firewalls, switching, VLANs, VPN, and Wi-Fi
 * Handle hardware refreshes, server builds, and site work when a client needs hands on site
 * Handle escalated tickets our Service Desk cannot close
 * Document work in a way that supports CMMC evidence and SSP requirements
 * Follow change management. Plan the change, communicate it, execute it, confirm it