> Markdown version of [/jobs/ext/4487979-systems-engineer-ii](https://www.wearedevelopers.com/jobs/ext/4487979-systems-engineer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Systems Engineer II

- **Company:** By Light Professional IT Services
- **Location:** Tysons, VA, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Software System Penetration Testing, Systems Engineering, Microsoft Azure, Cloud Computing, Configuration Management Databases, CompTIA Security+, Dynamic Host Configuration Protocol, Domain Name System (DNS), GNU Compiler Collection, Identity and Access Management, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Windows Servers, Virtual Desktops, Network Architecture, Network Installation Services, Routing, Azure Active Directory, Stemming, Systems Integration, Transmission Control Protocol (TCP), Virtualization Technology, Software Vulnerability Management, HybridCloud, Firewalls (Computer Science), Microsoft InTune, Information Technology, Patch Management, Fortinet, Vulnerability Analysis
- **Published:** October 31, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/88756148/1

## About the Role

* Analytical Problem Solving: Strong root-cause diagnostic mindset for resolving complex, multi-layered IT infrastructure incidents.
 * Cross-Functional Collaboration: Ability to work effectively across IT, cybersecurity teams, executive stakeholders, and third-party vendors.
 * Technical Communication: Clear verbal and written articulation of technical concepts for both technical teams and non-technical end users., * 3-5+ years in systems and network engineering.
 * Proficiency in M365, GCC High, Azure, Entra ID, and Intune.
 * Hands-on experience with Fortinet Firewalls and Aruba Wireless / Central.
 * Solid TCP/IP networking, VPN, DNS, DHCP, and switching knowledge.
 * Proven technical documentation and troubleshooting skills.

Preferred Experience/Qualifications

 * Bachelor's degree in Computer Science, IT, or equivalent experience.
 * Experience supporting defense contractors or government regulated environments (NIST 800-171 / CMMC).
 * Microsoft AZ-104, CompTIA Security+, Fortinet NSE 4/5, or Aruba ACMA/ACMP.

## Description

The Systems Engineer II is responsible for the design, implementation, maintenance, security, and ongoing support of enterprise infrastructure systems across multiple business locations.

This role oversees hybrid cloud and on-premises environments, including Microsoft 365, Azure, GCC High, network infrastructure, endpoint management platforms, security controls, and compliance initiatives. The engineer serves as a key technical authority for infrastructure modernization, incident escalation, system integrations, and cybersecurity efforts.

Work Environment & Schedule
Hybrid Location: Combination of remote work and scheduled on-site support across regional facilities and offices.

 * Maintenance Windows: Participation in scheduled after-hours maintenance, system upgrades, and critical incident response duties.
 * Compliance Culture: Strict adherence to corporate security baselines, audit controls, and federal regulatory compliance workflows.

Responsibilities

Cloud & Microsoft 365 Architecture

 * Tenant & Identity Management: Administer Microsoft 365 commercial and GCC High environments. Support Microsoft Entra ID (Azure Active Directory) and configure granular Conditional Access policies.
 * Infrastructure & Virtualization: Support Azure cloud infrastructure administration, migration projects, and manage Azure Virtual Desktop (AVD) host pools and session hosts.
 * Endpoint Compliance: Implement and maintain Microsoft Intune device management policies, compliance baselines, app deployments, and troubleshoot enrollment issues.

Network Infrastructure & Security

 * Wireless & Switching: Administer enterprise wireless infrastructure utilizing Aruba technologies and manage the Aruba Central cloud management platform.
 * Firewall & Perimeter Defense: Maintain Fortinet firewall infrastructure, security policies, IPSec VPN tunnels, and Azure networking integrations.
 * Network Modernization: Support enterprise routing, switching, DNS/DHCP, ISP migrations, facility relocations, and new site network deployments.

Security, Compliance & Risk Remediation

 * Compliance Controls: Participate in cybersecurity compliance initiatives, directly implementing technical controls supporting CMMC Level 2 audit and accreditation requirements.
 * Vulnerability Management: Monitor CVE announcements, conduct patch management cycles, and coordinate remediation activities stemming from third-party penetration testing and vulnerability scans.

Systems Administration & Project Delivery

 * Server & Directory Services: Support Windows Server environments, Active Directory optimization, GPO policies, asset inventory, and CMDB record accuracy.
 * Project Execution: Lead or assist with office buildouts, organizational acquisitions, tenant-to-tenant migrations, and vendor coordination.
 * Operational Support: Perform Tier 2/3 root-cause analysis, provide scheduled after-hours support for critical maintenance windows, and author comprehensive Standard Operating Procedures (SOPs).