Infrastructure Administrator

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Provide daily management and assistance for the enterprise Microsoft 365 environment, which includes Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and related services.

• Implement Microsoft 365 configuration modifications, service requests, and user administration tasks in alignment with established procedures and ITIL 4 change management standards.

• Monitor the health and performance of Microsoft 365 services, escalating any issues as needed.

• Maintain documentation of Microsoft 365 configurations and update knowledge base articles accordingly.

• Support the management of Microsoft 365 licenses and user provisioning/deprovisioning processes.

• Assist in the planning and execution of Microsoft 365 service updates and feature rollouts.

• Facilitate the administration of the Microsoft Azure Government environment, encompassing Entra ID, user and group management, and role assignments.

• Manage Microsoft Entra identity services, including multi-factor authentication, conditional access policies, and single sign-on configurations.

• Aid in the implementation of Zero Trust Architecture through Entra identity policies and least-privilege access controls.

• Oversee routine administrative tasks for Azure Government, such as resource management, access control, and policy compliance monitoring.

• Contribute to FedRAMP compliance activities for Azure Government services.

• Support Microsoft Endpoint Manager (Intune) for device enrollment, enforcement of compliance policies, and application deployment.

• Assist with configurations for Microsoft Defender for Endpoint and respond to endpoint security incidents.

• Apply and maintain endpoint configuration baselines and compliance policies in accordance with NIST SP 800-53 and cybersecurity requirements.

• Facilitate patch management and software deployment for Windows endpoints.

• Collaborate with NOC and Service Desk teams regarding endpoint-related incidents and escalations.

• Administer Exchange Online, including mailbox management, distribution groups, mail flow monitoring, and basic transport rules.

• Assist with the administration of Microsoft Teams, including Teams policies, user configurations, and meeting settings.

• Support email security configurations and monitoring, which encompasses anti-spam and anti-phishing policy management.

• Coordinate the configuration and support of Microsoft Teams Rooms as necessary.

• Ensure that Microsoft infrastructure administration adheres to FISMA, NIST SP 800-53, FedRAMP, and cybersecurity policies.

• Implement least-privilege and separation-of-duties principles in Microsoft infrastructure configurations and access management.

• Assist with security assessments, audit evidence collection, and remediation of findings related to Microsoft.

• Report any suspected or confirmed security incidents within the Microsoft infrastructure.

• Diagnose and independently resolve routine and moderately complex Microsoft infrastructure incidents.

• Escalate complex or cross-domain incidents to the Senior Microsoft Infrastructure Administrator.

• Manage incident records within the Government ITSM platform.

• Coordinate with NOC, Service Desk, and other functional teams to resolve cross-functional incidents.

• Contribute to and follow troubleshooting runbooks and knowledge base articles.

⛳️ Requirements

• A minimum of 3–5 years of hands-on experience in enterprise Microsoft infrastructure administration.

• Proven experience in administering Microsoft 365 and Microsoft Entra in a Federal or similar enterprise setting.

• Experience in Microsoft endpoint management utilizing Microsoft Intune.

• Familiarity with Zero Trust Architecture principles as applied to Microsoft platforms.

• Experience in a Federal or private-sector enterprise environment of comparable scale and complexity.

• Demonstrated capability to independently resolve routine and moderately complex issues within Microsoft infrastructure.

• Experience with FedRAMP-authorized Microsoft services and Federal security compliance requirements.

• Strong proficiency in Microsoft 365 administration, including Exchange Online, SharePoint, OneDrive, and Teams.

• Strong proficiency in Microsoft Azure Government and Azure Active Directory (Entra ID).

• Strong proficiency in Microsoft Entra identity management and conditional access.

• Strong proficiency in Microsoft Endpoint Manager (Intune) — including device management and compliance.

• Strong proficiency in Microsoft Defender for Endpoint and Defender for Office 365.

• Strong proficiency in Exchange Online mail flow, security, and administration.

• Strong proficiency in role-based access control (RBAC) and least-privilege access management.

• Working knowledge of Zero Trust Architecture principles and OMB M-22-09.

• Working knowledge of NIST SP 800-53 security controls as applicable to Microsoft platforms.

• Working knowledge of FedRAMP requirements for Microsoft Azure Government.

• Working knowledge of PowerShell scripting for Microsoft 365 and Azure administration.

• Working knowledge of ITSM platforms (e.g., ServiceNow).

• Working knowledge of ITIL 4 change and incident management practices.

• Working knowledge of enterprise network fundamentals relevant to Microsoft infrastructure.

• Current and unexpired Microsoft Certified: Microsoft 365 Administrator Expert (MS-102) certification is required.

• Current and unexpired Microsoft Certified: Azure Administrator Associate (AZ-104) certification is required.

• Ability to obtain a Public Trust clearance.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) retirement plan.

• Paid time off.

• Paid parental leave.

• Life and disability insurance.

• Flexible spending accounts.

• Commuter benefits.

• Tuition reimbursement.