Systems Engineer II

By Light Professional IT Services LLC•Remote,
•Hybrid

About The Position

The Systems Engineer II designs, implements, maintains, secures, and supports enterprise infrastructure systems across multiple business locations. The role oversees hybrid cloud and on-premises environments, including Microsoft 365, Azure, GCC High, network infrastructure, endpoint management platforms, security controls, and compliance initiatives. The engineer serves as a technical authority for infrastructure modernization, incident escalation, system integrations, and cybersecurity efforts. The position combines remote work with scheduled on-site support at regional facilities and offices. It includes participation in scheduled after-hours maintenance, system upgrades, and critical incident response, with strict adherence to corporate security baselines, audit controls, and federal regulatory compliance workflows.

Requirements

  • 3–5+ years in systems and network engineering.
  • Proficiency in Microsoft 365, GCC High, Azure, Entra ID, and Intune.
  • Hands-on experience with Fortinet firewalls and Aruba wireless/Aruba Central.
  • Solid knowledge of TCP/IP networking, VPN, DNS, DHCP, and switching.
  • Proven technical documentation and troubleshooting skills.
  • Strong root-cause diagnostic mindset for complex, multi-layered IT infrastructure incidents.
  • Ability to communicate technical concepts clearly to technical teams and non-technical end users.

Nice To Haves

  • Bachelor's degree in Computer Science, IT, or equivalent experience.
  • Experience supporting defense contractors or government-regulated environments, including NIST 800-171/CMMC.
  • Microsoft AZ-104, CompTIA Security+, Fortinet NSE 4/5, or Aruba ACMA/ACMP certification.

Responsibilities

  • Administer Microsoft 365 commercial and GCC High environments, support Microsoft Entra ID, and configure Conditional Access policies.
  • Support Azure infrastructure administration and migration projects, and manage Azure Virtual Desktop host pools and session hosts.
  • Implement and maintain Microsoft Intune device management policies, compliance baselines, and app deployments; troubleshoot enrollment issues.
  • Administer enterprise wireless infrastructure using Aruba technologies and manage Aruba Central.
  • Maintain Fortinet firewall infrastructure, security policies, IPSec VPN tunnels, and Azure networking integrations.
  • Support routing, switching, DNS/DHCP, ISP migrations, facility relocations, and new site network deployments.
  • Implement technical controls supporting CMMC Level 2 audit and accreditation requirements.
  • Monitor CVE announcements, conduct patch management cycles, and coordinate remediation from penetration testing and vulnerability scans.
  • Support Windows Server environments, Active Directory optimization, GPO policies, asset inventory, and CMDB record accuracy.
  • Lead or assist with office buildouts, organizational acquisitions, tenant-to-tenant migrations, and vendor coordination.
  • Perform Tier 2/3 root-cause analysis and scheduled after-hours support for critical maintenance windows.
  • Author comprehensive Standard Operating Procedures (SOPs).
  • Collaborate across IT, cybersecurity teams, executive stakeholders, and third-party vendors, and communicate technical concepts to technical and non-technical audiences.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service