Systems Administrator

Knight Federal Solutions Inc•University, FL

18d

About The Position

Knight Federal Solutions is hiring a Systems Administrator to own day-to-day IT operations and support for approximately 170 staff. Over a planned 18 to 24 months, the role is intended to grow into an engineer who co-owns the company’s security and compliance environment and serves as alternate Information System Security Manager (ISSM). The position begins with responsibility for the service queue and onboarding pipeline and is expected to develop toward operating the environment and supporting CMMC assessment activities. This is a hands-on role on a two-person team, spanning end-user devices, Azure networking, and Sentinel. The environment includes a Microsoft 365 GCC tenant, Azure, and an on-premises enclave in Orlando, operated to CMMC Level 2 and NIST SP 800-171 requirements for Controlled Unclassified Information. The role also contributes to automation and AI-agent workflows that reduce repetitive work.

Requirements

3 to 5 years administering Windows environments in a business setting, including Microsoft 365 and Entra ID (Azure AD).
Hands-on experience with Intune or an equivalent MDM, Windows Server and Active Directory, and a ticketing system.
Working knowledge of networking fundamentals, including IP addressing, DNS, DHCP, VLANs, VPN, and firewall rule logic.
PowerShell administration skills, including the ability to write and read scripts rather than only run them.
Clear written communication skills for tickets, runbooks, and change records that others can follow.
U.S. citizenship and eligibility for a DoD security clearance.
Ability to lift and rack equipment up to 40 pounds and work occasionally outside business hours for maintenance windows.

Nice To Haves

Experience in a Microsoft 365 GCC or GCC High tenant, or another regulated environment such as DoD, federal, healthcare, or finance.
Familiarity with CMMC, NIST SP 800-171, or a comparable control framework, and with collecting audit evidence.
Azure fundamentals, including virtual networks, VPN gateways, virtual machines, and Log Analytics; any AWS exposure is a plus.
Experience with Microsoft Defender for Endpoint, Microsoft Sentinel, or another SIEM/EDR pair.
Experience with Hyper-V, Veeam or similar backup, Cisco switching and wireless, WatchGuard or comparable firewalls, and Duo or another MFA platform.
Jira Service Management administration experience and exposure to n8n, Power Automate, or similar workflow tools.
One or more of AZ-104, SC-200, AZ-500, MS-102, or CompTIA Security+. Security+ or equivalent will be required within 12 months for the alternate ISSM designation.

Responsibilities

Own Tier 1 and Tier 2 support in Jira Service Management, including triage, resolution, documentation, and closure, with same-business-day first response as the standard.
Manage employee onboarding and offboarding end to end, including accounts, licences, groups, devices, MFA enrolment, and access removal, coordinating with HR and the FSO.
Administer Microsoft 365 GCC services, including Exchange Online, SharePoint, Teams, Entra ID, Intune, and Defender for Endpoint.
Perform first-line triage of security alerts from Defender and Sentinel, follow runbooks, and escalate significant matters.
Patch and maintain Windows Server, domain controllers, Hyper-V hosts, and the backup platform; verify backups and restores on schedule.
Manage endpoint lifecycle activities, including imaging, Autopilot, hardware inventory, repairs, and vendor RMAs.
Support the on-premises enclave, including firewall rule requests, switch ports, Wi-Fi, VPN client issues, printers and MFPs, and Duo MFA enrolment and troubleshooting.
Maintain documentation and collect compliance evidence as part of routine work.
Automate repetitive tasks with PowerShell and, as platform knowledge develops, n8n agent workflows.
Become the named owner for Intune, Defender and vulnerability management, backup, Jira Service Management, and enclave hardware.
Operate Microsoft Sentinel, including analytics rules, incident handling, log-source health, and monthly reporting.
Maintain the System Security Plan and control evidence for assigned areas; participate in and then lead assessor evidence sessions.
Act as alternate ISSM, supporting change control, access reviews, incident response coordination, and POA&M tracking.
Back up the IT Manager on vendor and licensing relationships, including Microsoft CSP, managed security services, and telecom, and on Azure and AWS GovCloud operations.
Mentor department champions on the shared agent platform and own the agents that run its work.