L2 Technical Support Engineer – CMMC Service Delivery

SugarShot

1d•$80,000 - $95,000•Remote

About The Position

SugarShot is a managed services provider (MSP) and part of Treeline, a technology services organization spanning managed IT, cybersecurity, compliance, and advisory services. As Treeline expands its compliance business, SugarShot is building a dedicated Technical Services pod to support clients with CMMC and other regulated technology requirements. The L2 Technical Support Engineer – CMMC Service Delivery is a hands-on technical role within this dedicated pod, responsible for resolving technical issues across endpoint, identity, cloud, networking, and security environments while operating within established security and compliance requirements. This role requires strong technical troubleshooting skills, disciplined documentation, and the ability to work within defined security controls, access requirements, and change management processes. In regulated environments, how technical work is performed and documented is as important as resolving the issue itself. The ideal candidate brings MSP experience, strong Microsoft and/or Google administration skills, experience supporting modern identity and endpoint environments, and an understanding of the security practices required when supporting regulated organizations.

Requirements

3+ years of experience in IT support, managed services, systems administration, or a similar technical support environment.
Experience working within an MSP or other fast-paced, multi-client service environment.
Strong hands-on experience supporting Microsoft 365 and/or Google Workspace.
Experience with identity and access management platforms such as Entra ID and Okta.
Experience supporting Windows and macOS endpoints.
Experience with endpoint management platforms such as Intune and other MDM/RMM solutions.
Working knowledge of networking, endpoint security, EDR/MDR, vulnerability management, MFA, SSO, and secure remote access.
Strong troubleshooting skills across endpoint, identity, cloud, networking, and application environments.
Strong documentation and ticket management practices.
Ability to follow defined technical, security, access, and change management procedures consistently.
Strong written and verbal communication skills.
U.S.-based and able to meet client-specific personnel, access, or data-handling requirements associated with regulated environments.

Nice To Haves

Experience supporting organizations operating under CMMC, NIST SP 800-171, DFARS, or comparable regulated security frameworks.
Experience supporting Department of Defense contractors or organizations handling CUI.
Experience working within CMMC Level 2 environments.
Familiarity with Microsoft GCC/GCC High and/or Google Workspace environments used by regulated organizations.
Experience with Entra ID, Okta, Intune, and enterprise identity and endpoint management platforms.
Experience with SIEM/MDR, EDR, SASE, vulnerability management, application control, and privileged access technologies.
Microsoft, Google, Okta, CompTIA, security, networking, or CMMC-related certifications.
Experience with ConnectWise or similar PSA platforms and modern RMM tooling.

Responsibilities

Provide Level 2 technical support across assigned clients within the CMMC Service Delivery pod.
Troubleshoot and resolve technical issues across Microsoft 365 and/or Google Workspace, Windows and macOS endpoints, identity and access management, networking, cloud services, and security platforms.
Manage assigned tickets through resolution while meeting established response, resolution, communication, and SLA expectations.
Escalate complex, high-impact, or security-sensitive issues to the Technical Services Manager, L3, Engineering, or Security teams as appropriate.
Perform user administration, device configuration, application support, access changes, troubleshooting, and other day-to-day managed services activities.
Maintain clear, complete, and accurate ticket documentation, including troubleshooting performed, technical changes, approvals, and resolution details.
Follow established escalation, change management, and client communication procedures.
Identify recurring technical issues and contribute to root cause analysis and proactive remediation.
Collaborate with L1 technicians and provide technical guidance and escalation support when needed.
Deliver technical support in accordance with client-specific CMMC, NIST SP 800-171, and other applicable security requirements.
Follow established procedures for handling Controlled Unclassified Information (CUI) and other sensitive information.
Adhere to client-specific access controls, authentication requirements, approved administrative tools, and secure support workflows.
Follow least-privilege and privileged-access requirements when performing administrative activities.
Ensure remote support, administrative access, technical changes, and troubleshooting activities are performed only through approved systems and processes.
Maintain ticket and technical documentation capable of supporting compliance evidence and assessment requirements.
Support remediation of vulnerabilities, technical findings, configuration issues, and control gaps as directed by the Technical Services Manager, Security, or Compliance teams.
Assist with technical validation and evidence collection activities related to CMMC readiness and assessments.
Immediately escalate activity, configurations, or service delivery practices that may introduce security or compliance risk.
Administer and support Microsoft 365 and/or Google Workspace environments.
Support identity and access management platforms including Entra ID and Okta.
Support endpoint management platforms including Intune and other MDM/RMM solutions across Windows and macOS environments.
Troubleshoot authentication, MFA, SSO, conditional access, permissions, and user access issues.
Support endpoint security, EDR/MDR, vulnerability management, application control, and secure remote access technologies.
Troubleshoot LAN/WAN, VPN, DNS, DHCP, wireless, and other common networking issues.
Perform approved software deployment, patching, endpoint configuration, and remediation activities.
Support onboarding, offboarding, access changes, and device lifecycle activities in accordance with documented security requirements.
Execute approved technical changes while following required testing, authorization, documentation, and change control procedures.
Participate in continuous improvement, standardization, automation, and proactive remediation initiatives.