Note: The job is a remote job and is open to candidates in USA. System One is a provider of outsourced services and workforce solutions across North America. The company is seeking a Senior Microsoft Infrastructure Administrator to support an enterprise federal environment by administering and engineering Microsoft cloud, identity, endpoint, messaging, collaboration, security, and compliance platforms. The role also requires resolving complex infrastructure issues, leading improvements, supporting security requirements, and mentoring junior administrators.
Responsibilities
- Administer and engineer Microsoft 365 services, including Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams
- Lead Microsoft 365 updates, feature rollouts, and configuration changes through established change-management practices
- Monitor Microsoft 365 service health, performance, and security posture
- Develop configuration standards, governance documentation, and technical procedures
- Support Microsoft 365 licensing and service optimization
- Evaluate Microsoft roadmap updates and recommend platform improvements
- Administer Azure Government and Microsoft Entra ID services
- Configure Conditional Access, multifactor authentication, single sign-on, identity governance, and Privileged Identity Management
- Support Zero Trust initiatives through identity-based security controls and least-privilege access
- Manage Azure subscriptions, resource groups, role-based access control, and policy enforcement
- Support identity assurance requirements, including IAL2
- Maintain Microsoft cloud services in alignment with FedRAMP and federal cybersecurity requirements
- Administer Microsoft Intune for device management, application deployment, configuration, and compliance enforcement
- Manage Microsoft Defender for Endpoint policies and support security incident response
- Develop endpoint security baselines aligned with NIST SP 800-53 requirements
- Support Windows endpoint patching and software deployment
- Troubleshoot complex endpoint enrollment, compliance, policy, and application issues
- Administer Exchange Online mail flow, transport rules, mailbox configurations, and email security policies
- Manage Microsoft Teams policies, governance, meetings, and service configurations
- Configure and maintain DMARC, DKIM, SPF, and Microsoft Defender for Office 365
- Support Microsoft Teams Rooms and audiovisual integrations
- Serve as the senior escalation point for messaging and collaboration incidents
- Maintain Microsoft platform configurations in accordance with FISMA, FedRAMP, NIST SP 800-53, and organizational security requirements
- Administer Microsoft Purview capabilities, including data loss prevention and information protection
- Support Zero Trust Architecture aligned with NIST SP 800-207 and OMB M-22-09
- Apply least-privilege and separation-of-duties principles
- Support security assessments, audit evidence collection, and remediation activities
- Serve as the senior escalation point for complex Microsoft infrastructure incidents
- Independently diagnose and resolve cross-domain Microsoft platform issues
- Maintain incident records, troubleshooting runbooks, technical procedures, and knowledge articles
- Coordinate with service desk, network, security, and infrastructure teams
- Mentor junior Microsoft infrastructure administrators
- Review technical work for accuracy, quality, and adherence to standards
Skills
- Ability to work without sponsorship and the ability to obtain a Public Trust
- 6 to 8 or more years of hands-on enterprise Microsoft infrastructure administration and engineering experience
- Experience administering Microsoft 365, Azure Government, and Microsoft Entra ID in a federal or comparably regulated enterprise environment
- Strong hands-on experience with Microsoft Intune and Microsoft Defender for Endpoint
- Experience implementing Zero Trust principles across Microsoft platforms
- Experience independently resolving complex Microsoft infrastructure issues
- Knowledge of FedRAMP-authorized Microsoft services and federal security requirements
- Strong PowerShell scripting skills for Microsoft 365 and Azure administration
- Familiarity with ITSM platforms such as ServiceNow
- Knowledge of ITIL change and incident management practices
- Microsoft 365 administration
- Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams
- Azure Government
- Microsoft Entra ID
- Conditional Access and Privileged Identity Management
- Identity governance and role-based access control
- Microsoft Intune
- Microsoft Defender for Endpoint
- Microsoft Defender for Office 365
- Microsoft Purview
- PowerShell
- Zero Trust Architecture
- FedRAMP, FISMA, and NIST SP 800-53
- Candidates must hold current, active versions of all three certifications:
- Microsoft Certified: Microsoft 365 Administrator Expert
- Microsoft Certified: Azure Administrator Associate, AZ-104
- Microsoft Certified: Identity and Access Administrator Associate, SC-300
- Microsoft Certified: Azure Solutions Architect Expert, AZ-305
- Microsoft Certified: Security Operations Analyst Associate, SC-200
- Microsoft Certified: Information Protection and Compliance Administrator Associate, SC-400
- CompTIA Security+ or an equivalent security certification
Benefits
- Remote work with occasional onsite support in Washington, DC
- Eligible employees have health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, and voluntary plans
- Participation in a 401(k) plan
Company Overview