Sentinel Blue is hiring a Systems Engineer I for their Operations team. This role focuses on day-to-day engineering work in client environments across endpoints, identity, and core systems, requiring the candidate to perform tasks such as configuring endpoint policies and troubleshooting issues.
Responsibilities:
- Configure and maintain endpoint management baselines in Intune (compliance policies, configuration profiles, and remediation work tied to standards)
- Support hybrid identity systems, including Entra ID and on-premises Active Directory
- Execute patching and lifecycle workflows for operating systems and common applications, including remediation tasks and exceptions
- Perform change implementation work through Change Requests, including rollout steps, rollback planning, and post-change validation
- Assist with backup and recovery tasks when assigned, including restore validation
- Troubleshoot issues that cross endpoint, identity, and core infrastructure, escalating with clear notes and relevant logs when needed
- Use existing automation and tooling; write small task-level scripts when appropriate, with review from more senior engineers
- Contribute to KBs, SOPs, runbooks, and clear ticket notes; create new documentation occasionally when a gap is identified
- Participate in client calls as needed for troubleshooting, change discussions, and project work
Requirements:
- U.S. citizenship – by nature of our work with the defense industry, all employees must be eligible for a Secret clearance
- 2+ years of hands-on experience in IT operations, systems administration, or engineering work
- Practical experience with Intune, Entra, and Azure in production environments
- Solid fundamentals across Windows administration, identity basics, and general troubleshooting
- Experience supporting on-premise Windows environments, including Active Directory, DNS, DHCP, and GPO management
- Clear written and verbal communication, including the ability to explain work and outcomes on calls
- Scripting fundamentals (PowerShell preferred)
- CompTIA Security+ required within 6 months of hire if not already held
- Familiarity with Azure Government, Microsoft 365 GCC High, and other FedRAMP Moderate platforms
- Backup exposure, especially Veeam, including restores and validation
- Working knowledge of networking fundamentals (DNS, DHCP, routing, VPN basics)
- Prior experience in a managed services or multi-client environment
- Familiarity with CMMC, NIST 800-171, CIS Controls, or similar frameworks
- Bachelor's or Master's degree in Cybersecurity, Information Systems, Computer Science, Business, or a related field