Azure Cloud & Network Systems Administrator

Kirkhill, Inc.; Brea (CA); On-site; USD 95,000 - 125,000; Full time

Job summary

Kirkhill, Inc. in California is hiring a Systems Administrator with Azure cloud and network expertise to manage enterprise cloud and on-prem hybrid infrastructure. The role emphasizes security, Entra ID, Intune, Defender, and automation with PowerShell.

You will design and maintain Azure resources, govern cost and security, implement zero-trust, monitor systems, and coordinate with the compliance team on classified environments as needed.

Qualifications

• Hands-on expertise in hybrid cloud migration and Microsoft Azure networking.
• Experience administering Azure: Entra ID, virtual machines, vnet, CA policy, Defender, Intune.
• Design and manage basic network architecture: routing, switching, segmentation, firewall/ACL configuration, VLANs, RADIUS.
• Active Secret security clearance and U.S. citizenship.
• CompTIA Security+ (CE).

Responsibilities

• Own and mature our Azure cloud environment: architecture, storage, identity (Entra ID), governance, cost management, and security posture.
• Lead cloud migration and hybrid-cloud integration efforts for on-prem workloads where appropriate.
• Implement and enforce cloud security configuration, CA policy, Defender security tooling, monitoring and logging.
• Intune configurations, package deployment, and endpoint management.
• Maintain monitoring, backup/DR, and patch/configuration management practices for cloud-hosted systems.
• Use PowerShell to automate repetitive administration and security tasks.
• Design, document, and continuously improve network architecture, including segmentation between CUI-scoped enclaves and general business networks.
• Manage firewall, VLAN, and ACL configurations (including CUI subnet access control lists) and maintain accurate network documentation/diagrams.
• Lead network hardening initiatives and access control requirements.
• Evaluate and implement zero-trust and micro-segmentation strategies.
• Maintain secure configurations, audits, and documentation for the classified workstations.
• Maintain active Security+ certification
• Maintain System Security Plans (SSPs), POA&Ms, and supporting documentation
• Support periodic government inspections, vulnerability scans, and audit log reviews for the classified system
• Serve as day-to-day POC for the classified environment, coordinating with the Facility Security Officer (FSO) and compliance team as needed
• Administer Windows Server, Active Directory/Entra ID, endpoint management, and core virtual infrastructure services
• Participate in security assessments, incident response testing, risk assessments, and 3rd party audits
• Execute vulnerability scans, system patching, configuration deployments
• Support configuration and software management controls in coordination with compliance staff
• Participate in change management processes for IT systems affecting CUI/classified scope
• Prioritize and resolve escalated technical issues and mentor junior IT staff
• Own and support all critical security incidents, interruptions/outages, and end-user issues with flexible evening/weekend work when required
• Maintain system documentation, diagrams, project plans, asset inventory

Skills

Hybrid cloud migration

Azure networking

Azure identity management

PowerShell

Active Secret clearance

Security+ (CE)

Tools

Intune

Defender

CA policy

Azure Foundry

Purview

Entra ID

Job description

Kirkhill, Inc. in California is hiring a Systems Administrator with Azure cloud and network expertise to manage enterprise cloud and on-prem hybrid infrastructure. The role emphasizes security, Entra ID, Intune, Defender, and automation with PowerShell.

You will design and maintain Azure resources, govern cost and security, implement zero-trust, monitor systems, and coordinate with the compliance team on classified environments as needed.