Systems Engineer Level II

Tlingit Haida Tribal Business Corporation•Falls Church, VA

3d•$100,000 - $125,000

About The Position

Tlingit Haida Tribal Business Corporation (THTBC) seeks a mid-level Systems Engineer to administer, monitor, secure, and troubleshoot enterprise infrastructure, including servers, cloud services, identity systems, virtualization, networking, endpoints, and backup and recovery. The role supports Microsoft 365 Commercial and GCC High, Azure, Entra ID, Windows Server, VMware, and Hyper-V, while helping implement NIST SP 800-171 and CMMC technical safeguards for Controlled Unclassified Information (CUI) and Federal Contract Information (FCI). The engineer resolves moderately complex issues and escalates high-risk or design-level matters to senior engineers and IT leadership. The position is remote, or hybrid for candidates near the Colorado or Virginia offices, with travel up to 20%. It is an exempt role requiring the ability to achieve the clearance required for assigned contracts and responsibilities. The position includes scheduled maintenance, after-hours support, and on-call rotations.

Requirements

Bachelor’s degree in IT, Computer Science, Cybersecurity, Information Systems, or a related field; an equivalent combination of education, training, certifications, and experience may be considered.
At least 5 years of relevant enterprise IT experience, including 2 years of hands-on production server, cloud, virtualization, or infrastructure support.
Practical experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, and Microsoft 365 Commercial and/or GCC High administration.
Working knowledge of Azure, Entra ID, MFA, access management, and VMware and/or Hyper-V.
Experience troubleshooting enterprise networks and supporting endpoint protection, device management, patching, vulnerability remediation, backups, and recovery testing.
Foundational cybersecurity knowledge and familiarity with NIST SP 800-171, CMMC, or comparable frameworks.
Basic PowerShell or comparable automation skills; ability to resolve routine to moderately complex issues independently and escalate appropriately.
Strong documentation, communication, customer service, organization, and collaborative problem-solving skills.
Availability for after-hours maintenance, emergency support, and on-call duties as needed.
Legal authorization to work in the United States and ability to meet applicable employment screening, federal contract, background investigation, and security requirements.
Active U.S. Government security clearance or ability to obtain and maintain the clearance required for assigned contracts and responsibilities.
Ability to work in an office environment with prolonged periods of sitting and computer use.
Ability to travel domestically up to 20% as business needs require.
Ability to lift up to 25 pounds occasionally.

Nice To Haves

Relevant Microsoft, CompTIA Security+, Network+, VMware, Azure, ITIL Foundation, or comparable certifications.
Experience supporting federal contractors, CUI environments, GCC High tenants, or 8(a), tribally owned, or small disadvantaged businesses.

Responsibilities

Monitor system health, performance, capacity, and availability; investigate alerts and resolve escalated support tickets.
Administer Windows Server, Active Directory, Group Policy, DNS, DHCP, Microsoft 365, Azure, Entra ID, and VMware or Hyper-V environments.
Support enterprise networking, including routers, switches, firewalls, Wi-Fi, VPNs, VLANs, and WAN connectivity.
Manage approved account and access changes, MFA, role-based permissions, privileged access, and periodic access reviews.
Maintain endpoint management and protection tools; perform approved patching, vulnerability remediation, and system hardening.
Validate backups, troubleshoot failures, conduct restoration tests, and assist with disaster recovery exercises and recovery objectives.
Triage security alerts and support incident response, evidence preservation, remediation, and recovery under designated oversight.
Support NIST SP 800-171 and CMMC controls, asset classification and assessment scoping, CUI/FCI safeguards, audit evidence, and corrective-action tracking.
Execute approved changes, migrations, upgrades, and automation with appropriate testing, validation, documentation, and rollback procedures.
Maintain inventories, diagrams, configuration records, SOPs, runbooks, and recovery documentation; coordinate with internal teams and vendors.
Support approved AI tools, including Microsoft Copilot and Microsoft 365 Copilot, under established oversight; validate permissions and data protections, test workflows, maintain records, and report suspected misuse or exposure. Do not submit CUI, FCI, credentials, or restricted data to unapproved AI services.
Participate in scheduled maintenance, after-hours support, and on-call rotations; perform related duties as assigned.