Hybrid IT Infrastructure & Security Administrator

One Way Ventures

Chantilly (VA)

Hybrid

USD 100,000 - 140,000

Full time

4 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Elveo is seeking an IT Infrastructure & Systems Administrator to support and maintain core IT infrastructure, with emphasis on Microsoft Entra ID, Intune, Defender, and MDM tooling across Chevy Chase, MD and Chantilly, VA. You will monitor endpoint compliance, assist with security and CMMC requirements, and help ensure systems meet ITAR/export-control obligations.

The role also covers general systems and network administration, including firewalls, VPNs, DNS/DHCP, wireless infrastructure, and

Qualifications

4+ years of experience in network engineering, systems administration, or infrastructure management.
Hands-on experience designing and maintaining LAN/WAN, VPN, firewall, and wireless network infrastructure.
Strong Windows Server and macOS environment administration experience.
Experience managing Microsoft Entra ID (Azure AD), Conditional Access, and Office 365 at an administrative/architectural level.
Hands-on experience with Microsoft Intune for device/endpoint management and compliance policy.
Experience with MDM platforms such as NinjaOne, ManageEngine, or similar.
Experience deploying and managing Microsoft Defender (Endpoint/365) or comparable endpoint security/EDR tooling.
Understanding of network security fundamentals: firewalls, segmentation, and endpoint protection.
Familiarity with CMMC Level 2 / NIST SP 800-171 control requirements and experience maintaining endpoint compliance in a regulated environment.
Comfortable providing basic end-user technical support alongside infrastructure duties.
Strong documentation, troubleshooting, and incident-response skills.
Relevant certification preferred (e.g., CompTIA Network+/Security+, CCNA, Microsoft Certified: Intune/Endpoint Manager, or equivalent experience)

Responsibilities

Administer and harden core infrastructure: Microsoft Entra ID (Azure AD), Conditional Access, DNS/DHCP, Office 365, and endpoint security (ESET, Microsoft Defender) at the systems-administration level
Manage endpoint and device compliance through Microsoft Intune and MDM platforms (e.g., NinjaOne), including policy design, patch management, and fleet-wide enforcement
Implement and maintain infrastructure security controls (firewalls, MFA, network segmentation, endpoint protection) in line with ITAR and export-control obligations
Support Lynk's CMMC Level 2 compliance program - maintain endpoint compliance (patching, configuration baselines, encryption, access control) across the device fleet and evidence controls for audits
Monitor and remediate endpoint compliance drift via Intune/NinjaOne and Microsoft Defender to keep the environment aligned with NIST SP 800-171 control requirements
Design, deploy, and maintain LAN/WAN, wireless, VPN, and firewall infrastructure across Lynk office and lab locations
Own network architecture decisions - segmentation, routing, VLANs, redundancy, and capacity planning as the company scales
Deploy, monitor, and maintain security posture via Microsoft Defender (Endpoint/365) - threat detection, alerting, and remediation
Manage server infrastructure (physical and virtual), including provisioning, patching, backup, and lifecycle management
Monitor network and infrastructure health; lead incident response and root-cause analysis for outages and performance issues
Partner with security/compliance stakeholders on System Security Plans (SSPs), POA&M; and audit readiness for CMMC assessments
Document network topology, infrastructure architecture, and disaster recovery/business continuity procedures