System Administrator

You are the last technical checkpoint before a Microsoft Government Cloud environment goes live for a Defense Industrial Base client, and the reason it holds up during an audit.

MISSION

Every environment you touch, commercial or GCC High, client-owned or E3DI's own, is built, documented, and verified, so nothing surprises a client, E3DI, or an assessor later.

OUTCOMES YOU OWN IN YEAR ONE

These are the same measures your annual bonus is calculated against, not a separate wish list.

• Build-out delivery and quality: 100% of cloud build-outs across Entra ID, Intune, Azure networking, and AVD, for clients and for E3DI's own environment alike, land on schedule and are validated against security and compliance requirements before handoff, with zero critical configuration errors found in post-deployment review.
• Compliance-aligned engineering: Every deployed technical control is mapped and verified against CMMC Level 2 and NIST 800-171; Standard Operating Procedures and configuration baselines stay current; and System Security Plans and Plan of Action and Milestones' technical inputs go out accurately and on the timeline compliance leadership needs.
• Security monitoring and data protection: Sentinel, Purview, and Defender for Endpoint stay at full health across your assigned client environments, with onboarding or telemetry anomalies resolved within 5 business days and no unresolved detection gaps at quarter close.
• Escalation and root cause resolution: Systemic issues get fixed at the root, not patched at the symptom, and you ship at least one standardization or automation improvement every quarter.
• Professional standards: Consistent quality and responsiveness across every concurrent client engagement, technical certifications kept current, and no substantiated client complaints about professionalism or responsiveness.

WHAT THE WEEK ACTUALLY LOOKS LIKE

You are moving across several live tenants in the same week, client and E3DI's own alike: building out identity and network infrastructure on one, tuning Sentinel or Defender health on another, and validating controls before it goes to the Director of IT Operations for sign-off. Nobody is reviewing your configuration changes line by line. You are the technical checkpoint, which means the judgment calls are yours, and so is the accountability when something breaks, whether it is a client's environment or E3DI's own. Work is remote, with occasional travel for client site visits or team coordination meetings.

HOW WE WORK

E3DI operates at the seams between prime contractors, government stakeholders, technology providers, and mission operators, the exact point where a rushed configuration or a skipped documentation step turns into someone else's compliance failure. That means we don't hand off environments we haven't verified ourselves, we document as we build instead of scrambling before an audit, and we escalate real problems the day we find them instead of hoping they resolve on their own.

WHO THIS FITS

If that is already how you work, you will fit here. If you are used to environments where good enough passes and documentation happens after the fact, this will not feel like a good fit, and better to know that now than in month two.

REQUIREMENTS

• Experience: 3 to 5 years of hands-on experience administering Microsoft cloud, identity, and security infrastructure in a compliance-driven environment, in production, not lab or training environments.
• Citizenship: Must be a U.S. citizen.
• Platform depth: Direct, hands-on experience with Entra ID, Intune, Azure Virtual Desktop, Azure Firewall, Microsoft Sentinel, and Microsoft Purview.
• Dual-tenant fluency: Experience in both commercial Microsoft 365 or Azure and GCC High tenants, including the practical differences between them.
• Automation: Strong PowerShell scripting, including Microsoft Graph API, for identity and device management automation.
• Compliance literacy: Working knowledge of CMMC Level 2 and NIST 800-171 control families and how they map to Microsoft cloud technical controls.

A bachelor's degree in computer science, information systems, or a related field is preferred; relevant experience can substitute.

WHO THIS IS NOT FOR

This is not an entry-level role or a ticket-queue job where someone checks your work before it ships. If you want a fully scripted checklist and low autonomy, this will not be satisfying. If you want ownership across multiple live DIB client environments, with a compliance backstop that doesn't bend for convenience, this is built for you.

COMPENSATION AND BENEFITS

Base Starting Salary: $80,000, depending on experience and location.

Bonus: Eligible for E3DI's annual performance bonus plan, tied directly to the outcomes above.

Benefits: Comprehensive health, dental, and vision insurance; 401(k) with company match; paid time off, federal holidays, and professional development support.