SYSTEM ADMINISTRATOR

Aero Simulation•Tampa, FL

About The Position

THE COMPANY For over 40 years, Aero Simulation, Inc. (ASI) has provided quality flight training devices to the US Military. ASI has successfully built numerous training systems with a primary focus on aircrew and maintenance training systems. Our current programs include, but are not limited to, the B-1 Training Systems (Air Force), E-2D Training Systems (Navy), CH-53E Training Devices (USMC), IMOMS (Coast Guard), Navigation, Seamanship, Shiphandling Trainer - NSST (Navy). Programs — Aero Simulation, Inc. ASI is a 100% employee-owned engineering and manufacturing company committed to supporting the nation's warfighters. Being 100% employee-owned directly impacts our culture: it drives our decision-making, motivates our teams, increases our productivity, improves retention and contributes to the future success of our company. Our culture is one where we work hard for our clients and for each other - and we have fun collaborating, sharing experience and expertise, and learning along the way. We strive to deliver exceptional quality, elevate client relationships, and enrich the careers and lives of our employee-owners. As Employee-Owners, we are invested in the success and continued development of each other and the company. In addition to the Employee Stock Ownership Plan (ESOP), we offer a flexible work environment, generous paid time off, professional development opportunities, industry competitive compensation, and superior benefits to include medical, dental, 401k and more! ASI is a great place to build a career and grow with a company that is dedicated to quality, service and to fostering a community of support for each and every member of the team. To learn more about this opportunity, keep reading! POSITION SUMMARY The System Administrator supports, secures, and modernizes the company's IT infrastructure in a regulated U.S. Defense Industrial Base (DIB) environment. This role is part of a small, collaborative IT team and is expected to take ownership of one or more defined technical domains while also contributing to general systems administration and organizational end-user support. The ideal candidate brings strong hands-on experience in at least one of the following areas: Microsoft 365 GCC High security and compliance, enterprise networking and firewall management, or endpoint management and automation. Experience in all areas is not required; depth in one area combined with the ability to operate effectively with compliance-driven environments is strongly preferred.

Requirements

Seven (7) or more years of progressively responsible experience in systems administration or related IT roles.
Strong understanding of Windows-based enterprise environments.
Demonstrated experience operating in a regulated or compliance-driven environment (Defense Industrial Base strongly preferred).
Familiarity with NIST SP 800-171, CMMC, or similar security frameworks.
Strong written and verbal communication skills, with the ability to clearly convey quality requirements, findings, and corrective actions to technical and non-technical audiences.
Highly organized and detail-oriented, with the ability to manage multiple priorities while maintaining accuracy and compliance.
Self-directed with the ability to work independently, while also collaborating effectively across departments and organizational levels.
Demonstrated ability to build and maintain productive working relationships with internal stakeholders.
Strong analytical, critical-thinking, and problem-solving skills, including the ability to assess systems and processes, identify gaps or risks, and implement effective solutions.
Ability to perform effectively in a fast-paced, deadline-driven environment and manage competing demands with professionalism.
Ability to handle pressure and ambiguity while maintaining focus, sound judgment, and adherence to quality standards.
Bachelor's degree in a technical discipline (e.g., Information Technology, Computer Science, Cybersecurity), or equivalent experience.
CompTIA Security+ required or must be obtained within six (6) months of hire.
U.S. Citizenship Required: As a federal contractor supporting the U.S. warfighter, it is required that all employees in this role be United States citizens in compliance with government contract and security requirements.
Background Check: Must be able to successfully pass an initial background screening.
Security Clearance: Must be able to obtain and maintain an active Department of Defense (DoD) security clearance. The selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information, as required by the position.
Work Schedule Flexibility: Occasional overtime and alternate shifts may be required to meet customer schedules, critical deadlines, or program milestones.
Travel Requirements: Must be able and willing to travel domestically and, on occasion, internationally to customer sites, partner locations, or project meetings in support of contract objectives.
Drug-Free Workplace: ASI maintains a Drug-Free Workplace. Applicants and employees are subject to pre-employment and random drug testing in accordance with company policy.
Employment Contingency: All employment offers are contingent upon the successful completion of all background checks, security clearance requirements, and drug-screening results.

Nice To Haves

Hands-on experience administering Microsoft 365 GCC High.
Experience with Microsoft Purview, Intune, and/or Sentinel in a compliance-focused environment.
Networking and firewall experience with Cisco, Aruba, and/or Palo Alto platforms.
Scripting or automation experience (PowerShell strongly preferred).
Prior experience supporting audits, assessments, or compliance evidence collection.
Relevant certifications preferred (e.g. Microsoft, Cisco, Palo Alto, or similar)

Responsibilities

Administer on-premises and hybrid infrastructure, including: Microsoft Azure and Microsoft 365 Active Directory Hyper-V virtualized environments Windows Server systems
Monitor system health, performance, and capacity; participate in lifecycle planning and upgrades.
Support backup, recovery, and disaster recovery processes in alignment with business and compliance requirements.
Create and maintain technical and procedural documentation to support operational continuity and audit readiness.
Participate in change management routines to ensure controlled and documented system changes.
Provide support for internal users as needed, including issue escalation from the helpdesk.
Work closely with IT management, security/compliance personnel, and HR on access provisioning, policy enforcement, and onboarding/offboarding.
Document systems, procedures, and configurations in accordance with compliance and audit requirements.
Administer and support Microsoft 365 GCC High tenants in compliance with DoD, CMMC, and contractual requirements.
Configure and manage security, compliance, and governance capabilities, including: Microsoft Purview (eDiscovery, Information Protection, DLP, retention) Microsoft Intune (endpoint compliance, configuration profiles, conditional access support) Microsoft Sentinel (log ingestion, alerting, and basic security operations support)
Support identity and access management using Entra ID (Azure AD), including role-based access control, MFA, and conditional access policies.
Assist with audit preparation, evidence collection, and continuous compliance monitoring activities.
Support and maintain TCP/IP networking and security infrastructure, including: Firewalls and network devices from Cisco, Aruba, and Palo Alto VLANs, routing, VPNs, and access control policies
Assist with firewall rule reviews, documentation, and change management.
Collaborate with security and compliance stakeholders to ensure network configurations align with CMMC and NIST SP 800-171 requirements.
Support endpoint lifecycle management for Windows systems, including provisioning, configuration, patching, and decommissioning.
Develop and maintain scripts and automation (e.g., PowerShell) to improve operational efficiency and consistency.
Assist with configuration baselines and secure system hardening in alignment with compliance requirements.