Note: The job is a remote job and is open to candidates in USA. Koniag Government Services supports federal government agencies through enterprise solutions, professional services, and operational management. The Senior Microsoft Infrastructure Administrator will administer, secure, and sustain the enterprise Microsoft infrastructure environment across Microsoft 365, Azure Government, Microsoft Entra, Exchange Online, Teams, endpoint management, compliance, and security platforms. The role also serves as the senior escalation point, leads infrastructure initiatives, and mentors junior administrators.
Responsibilities
- Provide expert-level administration, configuration, and engineering support for CLIENT's Microsoft 365 environment, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and associated services
- Lead planning and execution of Microsoft 365 service updates, feature rollouts, and configuration changes in accordance with ITIL 4 change management practices
- Monitor Microsoft 365 service health, performance, and security posture, taking proactive action to address issues before they impact end users
- Develop and maintain Microsoft 365 configuration standards, policies, and governance documentation
- Support Microsoft 365 license management and optimization in coordination with the Asset/Financial Management team
- Stay current on Microsoft 365 roadmap updates and recommend improvements aligned with CLIENT's mission and security requirements
- Administer and engineer CLIENT's Microsoft Azure Government environment, including Azure Active Directory (Entra ID), conditional access policies, identity governance, and privileged identity management
- Lead integration and administration of Microsoft Entra identity services, including IAL2 identity assurance, multi-factor authentication, and single sign-on configurations
- Support Zero Trust Architecture implementation through proper configuration of Entra identity, conditional access, and least-privilege access controls
- Manage Azure Government resource administration, including subscriptions, resource groups, role-based access control (RBAC), and policy enforcement
- Coordinate with the Infrastructure and Platform Operations team on Azure-hosted workloads and cloud infrastructure management
- Support FedRAMP compliance for Azure Government services in alignment with CLIENT cybersecurity policies
- Lead administration and engineering of Microsoft Endpoint Manager (Intune) for device management, compliance policy enforcement, and application deployment across CLIENT's endpoint fleet
- Manage Microsoft Defender for Endpoint configuration, policy management, and incident response coordination
- Develop and maintain endpoint configuration baselines, compliance policies, and security standards aligned with NIST SP 800-53 and CLIENT cybersecurity requirements
- Support patch management and software deployment processes for Windows endpoints through Intune and related tooling
- Coordinate with the NOC and Service Desk teams on endpoint-related incidents and escalations
- Administer and engineer Exchange Online, including mail flow, transport rules, anti-spam/anti-phishing policies, and mailbox management
- Support Microsoft Teams administration, including Teams policies, governance, meeting configurations, and integration with A/V systems
- Manage email security configurations, including DMARC, DKIM, SPF, and Microsoft Defender for Office 365
- Coordinate with the A/V Lead Systems Integrator on Microsoft Teams Rooms integration and support
- Troubleshoot and resolve complex Exchange Online and Teams incidents, serving as the senior escalation point for Microsoft messaging and collaboration issues
- Ensure all Microsoft infrastructure configurations comply with FISMA, NIST SP 800-53, FedRAMP, and CLIENT cybersecurity policies
- Administer Microsoft Purview compliance solutions, including data loss prevention, information protection, and compliance management
- Support implementation and maintenance of Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09) across Microsoft platforms
- Apply least-privilege and separation-of-duties principles to all Microsoft infrastructure configurations and access management
- Support security assessment activities, audit evidence collection, and remediation of Microsoft-related findings
- Promptly report suspected or confirmed security incidents involving Microsoft infrastructure per CLIENT procedures
- Serve as the senior escalation point for complex Microsoft infrastructure incidents and problems
- Independently diagnose and resolve complex, cross-domain Microsoft infrastructure issues without escalation to government personnel for subject-matter knowledge
- Manage the Microsoft infrastructure incident lifecycle in the Government ITSM platform, ensuring accurate and complete records
- Coordinate with the NOC, Service Desk, network, and infrastructure teams to resolve cross-functional Microsoft incidents
- Develop and maintain Microsoft infrastructure troubleshooting runbooks, escalation procedures, and knowledge base articles
- Provide senior technical guidance and mentoring to junior Microsoft Infrastructure Administrators
- Assign and prioritize Microsoft infrastructure work items in alignment with Sprint commitments and operational priorities
- Ensure team members are cross-trained and capable of supporting all Microsoft infrastructure functions
- Conduct quality reviews of team members' work to ensure accuracy, completeness, and adherence to standards
- Support recruitment, onboarding, and professional development of Microsoft infrastructure team personnel
Skills
- The position is remote
- This position requires the candidate to be able to obtain a Public Trust
- • Minimum 6–8 years of hands-on enterprise Microsoft infrastructure administration and engineering experience
- • Demonstrated experience administering and engineering Microsoft 365, Azure Government, and Microsoft Entra in a Federal or comparable enterprise environment
- • Proven experience with Microsoft endpoint management using Microsoft Intune and Microsoft Defender for Endpoint
- • Experience implementing and maintaining Zero Trust Architecture principles across Microsoft platforms
- • Demonstrated experience in a Federal or private-sector enterprise environment of comparable scale, complexity, and security posture
- • Proven ability to independently resolve complex, cross-domain Microsoft infrastructure problems at the enterprise level
- • Experience with FedRAMP-authorized Microsoft services and Federal security compliance requirements
- • Expert-level proficiency in:
- • Microsoft 365 administration (Exchange Online, SharePoint, OneDrive, Teams)
- • Microsoft Azure Government and Azure Active Directory (Entra ID)
- • Microsoft Entra identity governance, conditional access, and privileged identity management
- • Microsoft Endpoint Manager (Intune) — device management and compliance
- • Microsoft Defender for Endpoint and Defender for Office 365
- • Microsoft Purview compliance solutions
- • Exchange Online mail flow, security, and administration
- • Role-based access control (RBAC) and least-privilege access management
- • Strong working knowledge of:
- • Zero Trust Architecture and OMB M-22-09 implementation
- • NIST SP 800-53 security controls as applied to Microsoft platforms
- • FedRAMP requirements for Microsoft GCC High or Azure Government
- • PowerShell scripting for Microsoft 365 and Azure administration
- • ITSM platforms (e.g., ServiceNow)
- • ITIL 4 change and incident management practices
- • Enterprise network fundamentals relevant to Microsoft infrastructure
- • Microsoft Certified: Microsoft 365 Administrator Expert (MS-102) (required)
- • Microsoft Certified: Azure Administrator Associate (AZ-104) (required)
- • Microsoft Certified: Identity and Access Administrator Associate (SC-300) (required)
- • Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
- • Microsoft Certified: Security Operations Analyst Associate (SC-200)
- • Microsoft Certified: Information Protection Administrator Associate (SC-400)
- • CompTIA Security+ or equivalent
Benefits
- Health insurance
- Dental insurance
- Vision insurance
- 401K with company matching
- Flexible spending accounts
- Paid holidays
- Three weeks paid time off
- Remote work
Company Overview
Company H1B Sponsorship