Systems Engineer I

Sentinel Blue is hiring a Systems Engineer I for their Operations team. This role focuses on day-to-day engineering work in client environments across endpoints, identity, and core systems, requiring the candidate to perform tasks such as configuring endpoint policies and troubleshooting issues.

Responsibilities:

• Configure and maintain endpoint management baselines in Intune (compliance policies, configuration profiles, and remediation work tied to standards)
• Support hybrid identity systems, including Entra ID and on-premises Active Directory
• Execute patching and lifecycle workflows for operating systems and common applications, including remediation tasks and exceptions
• Perform change implementation work through Change Requests, including rollout steps, rollback planning, and post-change validation
• Assist with backup and recovery tasks when assigned, including restore validation
• Troubleshoot issues that cross endpoint, identity, and core infrastructure, escalating with clear notes and relevant logs when needed
• Use existing automation and tooling; write small task-level scripts when appropriate, with review from more senior engineers
• Contribute to KBs, SOPs, runbooks, and clear ticket notes; create new documentation occasionally when a gap is identified
• Participate in client calls as needed for troubleshooting, change discussions, and project work

Requirements:

• U.S. citizenship – by nature of our work with the defense industry, all employees must be eligible for a Secret clearance
• 2+ years of hands-on experience in IT operations, systems administration, or engineering work
• Practical experience with Intune, Entra, and Azure in production environments
• Solid fundamentals across Windows administration, identity basics, and general troubleshooting
• Experience supporting on-premise Windows environments, including Active Directory, DNS, DHCP, and GPO management
• Clear written and verbal communication, including the ability to explain work and outcomes on calls
• Scripting fundamentals (PowerShell preferred)
• CompTIA Security+ required within 6 months of hire if not already held
• Familiarity with Azure Government, Microsoft 365 GCC High, and other FedRAMP Moderate platforms
• Backup exposure, especially Veeam, including restores and validation
• Working knowledge of networking fundamentals (DNS, DHCP, routing, VPN basics)
• Prior experience in a managed services or multi-client environment
• Familiarity with CMMC, NIST 800-171, CIS Controls, or similar frameworks
• Bachelor's or Master's degree in Cybersecurity, Information Systems, Computer Science, Business, or a related field