Microsoft 365 / SharePoint Administrator

Empower AI•Quantico, VA

8d•Hybrid

About The Position

Empower AI is seeking a Microsoft 365 / SharePoint Administrator to administer and sustain the enterprise collaboration environment of a Department of War agency, serving more than 13,000 users across NIPRNet, SIPRNet, and planned JWICS enclaves. The administrator manages the Microsoft 365 tenant and services (SharePoint Online, Teams, Exchange Online, OneDrive), site provisioning, permissions, retention and governance settings, and Zoom.gov and Adobe Connect accounts in compliance with DISA and DoD guidelines; proactively monitors service health; provides Tier II/III resolution for complex platform issues; and coordinates Microsoft escalations. As a privileged administrator the role also supports Power Platform environment governance and RMF evidence for the collaboration environment. This is a salaried, FLSA-exempt position in which you will independently analyze situations, determine the appropriate course of action, and exercise discretion and independent judgment on matters of significance to the program and its customers. THIS IS A HYBRID ROLE BASED IN QUANTICO, VA (RKB) WITH REMOTE WORK ELIGIBILITY AND UP TO 10% OF TRAVEL INVOLVED.

Requirements

Bachelor's degree and a minimum of 4 years of related experience (an additional 4 years of related experience may be substituted for the degree).
Must be a U.S. Citizen.
Must have an Active Secret Clearance (favorably adjudicated T3/T3R) to start.
Must be willing and able to obtain TS/SCI eligibility after start , if required by mission needs.
Must be within investigation scope and/or currently enrolled in Continuous Evaluation / Continuous Vetting.
Must possess and maintain a current DoD 8570/8140 IAT Level II baseline certification (e.g., CompTIA Security+ CE, CySA +, GSEC, SSCP, or CCNA-Security).
Demonstrated ability to work independently, analyze problems, determine the appropriate course of action, and exercise discretion and independent judgment with limited day-to-day supervision.
Minimum of 3 years of experience administering Windows endpoint environments in an enterprise of 5,000+ devices.
Hands-on experience with Microsoft Endpoint Configuration Manager (MECM/SCCM) and/or Intune for patching, software deployment, imaging/task sequences, and compliance reporting.
Strong knowledge of Windows 10/11, Active Directory, Group Policy, PowerShell scripting, and Windows Server fundamentals.
Experience building and maintaining STIG-compliant OS images and applying DISA STIGs using STIG Viewer and SCAP tools.
Experience with vulnerability management tools (e.g., ACAS/Nessus) and remediation tracking through POA&Ms.
Experience executing changes through a formal Change Management process and working in scheduled maintenance windows; ability to participate in an after- hours on-call rotation.
Strong analytical, documentation, and communication skills.

Nice To Haves

Microsoft 365 Certified: Administrator Expert, Teams Administrator Associate, or SharePoint/Collaboration certifications; experience with Microsoft 365 GCC High and PowerShell for Microsoft 365.
Microsoft 365 Certified: Endpoint Administrator Associate; CompTIA Security+ CE, CySA +, or CASP+ CE.
Experience supporting Department of War ( DoW ), DoD, or Intelligence Community environments across NIPRNet, SIPRNet, and JWICS enclaves.
Experience with Virtual Desktop Infrastructure (e.g., VMware Horizon, Citrix, Azure Virtual Desktop) and BitLocker/encryption management.
Experience with eMASS and RMF control evidence for endpoint environments.
Experience with digital twin, lab, or pre-production environments for change validation.
Experience using ServiceNow (incident, request, knowledge, CMDB, Service Catalog, Virtual Agent) or a comparable enterprise ITSM platform.
Experience with automation and scripting (PowerShell, Power Automate) to reduce manual endpoint management effort.

Responsibilities

Administer the Microsoft 365 tenant and services (SharePoint Online site provisioning, permissions, hub/site architecture; Teams policies and governance; Exchange Online; OneDrive; Purview retention and compliance settings) in compliance with DISA STIGs and DoD guidelines.
Proactively monitor collaboration service health and performance, implement preventive maintenance, analyze and resolve Tier II/III platform incidents to root cause, and coordinate escalated technical issues with Microsoft and other vendors.
Administer Zoom.gov and Adobe Connect accounts, security settings, and integrations, and govern Power Platform environments, connectors, and data loss prevention policies for developed solutions.
Execute tenant changes and Microsoft 365 roadmap feature rollouts through formal Change Management, maintain configuration documentation, and provide RMF control evidence and availability data for the collaboration environment.
Operate and maintain the enterprise endpoint management platform (e.g., MECM/SCCM, Intune) including site health, distribution points, collections, boundaries, client health, and reporting across multiple security enclaves.
Package, test, and deploy operating system and third-party security patches and updates in strict adherence to CAT I, II, and III timeframes and compliance AQLs, and track and report patch compliance for the Customer Support Metrics Dashboard.
Package and deploy new applications and software removals, maintain the application catalog, and automate provisioning (e.g., PXE, task sequences) for image deployment across the enterprise.
Build, test, and maintain hardened operating system images that are 100% compliant with the latest applicable DISA STIGs and validated against agency cybersecurity requirements prior to deployment.