Own endpoint management across client environments (Intune compliance, baselines, configuration profiles, firewall rules, and remediation).
Operate and manage hybrid identity systems, including Entra ID and on-premises Active Directory.
Drive patching and lifecycle execution, including exception handling, remediation planning, and follow-through for endpoints and on-premise servers.
Coordinate local/cloud backup and recovery systems and processes, including restore validation and reliability improvements (Veeam exposure is a plus).
Implement and validate systems changes across servers, virtualization, and core infrastructure fundamentals within approved standards.
Run changes and projects end-to-end through Change Requests: plan the work, call out risk, execute cleanly, validate results, and document outcomes.
Build and improve reusable automation (PowerShell, Graph, workflow tooling) and refine existing scripts and patterns with a focus on repeatability.
Produce SOPs, runbooks, KBs, and diagrams on a regular basis, especially for recurring tasks and common failure modes.
Participate in client calls as needed and communicate status, options, and next steps in plain language.

U.S. citizenship – by nature of our work with the defense industry, all employees must be eligible for a Secret clearance.
3-5 years of relevant engineering experience, including ownership of operational delivery across multiple systems.
Hands-on experience with Intune, Entra, and Azure in production environments.
Strong knowledge of on-premises Window infrastructure, including Active Directory, DNS, DHCP, and GPO management.
Proven ability to troubleshoot complex issues, implement durable fixes, and validate outcomes.
Clear written and verbal communication, including client-facing technical discussions.
Proficiency in PowerShell and comfort improving or designing reusable automation.
CompTIA Security+ required within 6 months of hire if not already held.

Systems Engineer II

Key skills