IT Systems Administrator

Infrastructure and Cybersecurity Responsibilities (70-80%)

• Monitor, administer, maintain, and troubleshoot on-prem environment, including Active Directory, GPOs, File and Print services (PaperCut), Active Directory Certificate Services (AD CS), NPS/RADIUS, Windows Server 2016-2025, Hyper-V cluster, and Veeam backups
• Monitor, administer, maintain, and troubleshoot cloud environment, including Azure Government IaaS, Entra ID, SharePoint, and other Microsoft 365 GCC High applications
• Administer and optimize workloads hosted in Azure Government, including Azure Virtual Desktop, virtual networking, and site-to-site VPN connectivity
• Assist efforts to migrate local file storage to SharePoint
• Responsible for local and cloud Server and Application performance
• Manage endpoints through Intune, including Settings Catalog configuration, compliance policies, and remediation scripts for hybrid-joined devices
• Use NinjaOne RMM for patch management, scripting, and remote support
• Administer endpoint security, including CrowdStrike Falcon EDR and BitLocker encryption
• Support engineering and lab applications, including MATLAB, Zemax OpticStudio, OceanView, SolidWorks, and IBM DOORS, along with their license servers
• Analyze, diagnose, isolate, and identify system problems. Create short-term solutions to alleviate problem symptoms. Identify root causes and create and/or execute long term remediation plans
• Conduct implementations that include configuring, installing, and updating servers and applications based on standards
• Participate in systems planning and help develop Systems roadmap
• Contribute to systems maintenance efforts and perform system hardening
• Plan and perform Windows Server lifecycle work, including in-place upgrades and post-upgrade validation
• Responsible for monitoring and maintaining NetApp storage, Dell servers (including iDRAC out-of-band management), UPS/power systems, and other appliances at the data center
• Work closely with MSSP to continually monitor and analyze system activity to identify malicious activity
• Triage and respond to security alerts from CrowdStrike Falcon, the MSSP, and Microsoft 365/Entra ID. Take containment actions such as isolating hosts, disabling accounts, and revoking sessions, following the incident response plan
• Document and escalate incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate environmental impact
• Implement and maintain DISA STIG baselines and validate them with SCAP scans. Maintain the System Security Plan (SSP) and Plan of Action and Milestones (POA&M) for vulnerabilities identified during risk assessments, audits, and inspections
• Collect and maintain evidence for CMMC Level 2 assessments, including in Vanta
• Document security implementations and support ongoing compliance with IT security policies and configuration guidelines

Helpdesk Support Tier II & III (20-30%)

• Serve as Tier II/III support for helpdesk tickets, stepping into Tier I when needed.
• Work closely with Tier I to resolve issues and train in new technologies
• Follow and maintain technical documentation, procedures, and policies, and suggest improvements.
• Mentor junior members of the team
• Perform other tasks as assigned by management

We are seeking a self-motivated, experienced IT Systems Engineer to support and secure our hybrid Microsoft environment, including Azure Government and Microsoft 365 GCC High. This person will split their time between infrastructure and cybersecurity work and Tier II/III support and will be flexible enough to shift focus as business needs change., * 5+ years of progressive experience administering enterprise Windows Server and Microsoft Azure environments

• Skilled in Active Directory, GPO, Windows Servers, PowerShell Scripting, DNS, and Veeam
• Experience with Entra ID, Conditional Access, Intune, SharePoint, Exchange Online, Microsoft 365, general storage, Veeam and Server technologies
• Microsoft certifications such as AZ-104, AZ-500, SC-300, or MD-102, or CompTIA Security+, a plus
• Cybersecurity such as SIEM, Intune, Entra Conditional Access, and MFA experience a plus
• Experience with Linux (Ubuntu), an ITSM ticketing platform, and documenting procedures in a shared knowledge base such as Notion a plus
• Experience administering and governing enterprise AI tools a plus
• Team player, proactive, reliable, and self-motivated individual who is always striving to optimize and automate
• Available for planned support and/or emergencies 24x7
• Working knowledge of NIST SP 800-171, CMMC Level 2, and CUI handling requirements under DFARS 252.204-7012 (NIST SP 800-53 familiarity a plus)
• Experience with Azure Government or Microsoft GCC High environments preferred
• This position requires U.S. citizenship and the ability to obtain and maintain a U.S. Government security clearance

Compensation: $99,000 - $129,000 (Base salary for this position will vary based on your skills, qualifications, and experience), * 4 Weeks PTO a year (including 40 hours of PTO your first day)

• 10 paid holidays
• 401(k) with 100% employer matching up to 5% of salary (no vesting period)
• Multiple options for Medical, Vision, Dental Insurance plans
• Health Savings Accounts
• Flexible Spending Accounts
• Tuition Assistance (30% of Tuition with a minimum qualifying grade)
• 100% Paid Employee Assistance Program (EAP)
• 100% Paid Basic Life and AD&D Insurance
• 100% Paid Workers Compensation Insurance
• Voluntary Life Insurance

The unique culture at Intellisense offers the entrepreneurial spirit of a smaller company with the support and expertise of a larger organization. We are looking for individuals that have a wide breadth of experience while also being subject matter experts in their respective field., Invitation for Job Applicants to Self-Identify as a U.S. Veteran

• A “disabled veteran” is one of the following:
• a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
• a person who was discharged or released from active duty because of a service-connected disability.
• A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran’s discharge or release from active duty in the U.S. military, ground, naval, or air service.
• An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
• An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.