IT Engineer

DeKalb Health; Chitwood (MO); On-site; USD 85,000 - 110,000; Full time

Job summary

MAPP Technologies is seeking an IT Engineer to support, secure, and improve our hybrid Microsoft and Azure Government infrastructure in a manufacturing environment. You will help administer Windows Server, Active Directory, and 365 services, while ensuring secure access and policy compliance.

The role involves collaboration with IT leadership, vendors, and production teams to maintain reliable systems, manage incidents, and implement security controls aligned with NIST SP 800-171 and CMMC Level

Qualifications

• Experience administering Windows Server, Active Directory, Group Policy, DNS, and DHCP.
• Experience with Microsoft 365 administration and security features.
• Experience with hybrid identity and user lifecycle management.
• Knowledge of Azure Government and cloud security is preferred.
• Familiarity with firewall/network security platforms.

Responsibilities

• Administer, maintain, and troubleshoot IT infrastructure including Windows servers and AD.
• Support hybrid identity services and Microsoft 365 GCC High environments.
• Assist with Azure Government, VPN, and remote access services.
• Support endpoint management and device compliance initiatives.
• Provide advanced second/third-level IT support and incident resolution.
• Contribute to security monitoring, vulnerability remediation, and incident response.

Skills

Windows Server

Active Directory

Group Policy

DNS

DHCP

Microsoft 365

Entra ID

MFA

Azure Government

Fortinet

Networking concepts

Endpoint management

Tools

ManageEngine Endpoint Central

ManageEngine ServiceDesk Plus

Intune

Microsoft Defender

Microsoft Sentinel

Proofpoint

Fortinet firewall

Azure Virtual Desktop

Job description

• Location 1927 WEST 4TH STREET,Joplin, MO, 64801,United States
• Job Category Administrative
• Employee Type Full-Time

Contact information

• Phone [phone] x 385
• Email [e-mail]

Description

Infrastructure and Systems Administration

• Administer, maintain, and troubleshoot company IT infrastructure, including Windows servers, Active Directory, Group Policy, DNS, DHCP, file services, print services, and related infrastructure services.
• Support hybrid identity services, including on-premises Active Directory, Microsoft Entra ID, Microsoft 365, user synchronization, group-based access, and account lifecycle management.
• Support Microsoft 365 GCC High services, including Exchange Online, SharePoint, OneDrive, Teams, and related administrative functions.
• Support Azure Government infrastructure and services, including virtual networks, virtual machines, storage, monitoring, secure access, and related cloud resources.
• Support remote access and virtual desktop technologies, including VPN, Remote Desktop Services, Azure Virtual Desktop, and other approved remote access methods.
• Assist with server, workstation, and application upgrades, migrations, configuration changes, and lifecycle replacement projects.
• Maintain system documentation, network diagrams, configuration records, asset records, administrative procedures, and support runbooks.

Network and Security Infrastructure

• Administer and troubleshoot network infrastructure, including Fortinet firewalls, VPNs, VLANs, switches, wireless networks, routing, DNS, DHCP, and network segmentation.
• Support secure connectivity between on-premises systems, Azure Government resources, remote users, vendors, and approved cloud services.
• Monitor and troubleshoot firewall policies, VPN connectivity, site-to-site connectivity, remote access issues, and network performance.
• Assist with the implementation and maintenance of security baselines, secure configurations, firewall rules, access restrictions, endpoint controls, and network monitoring.

Endpoint, Patch, and Device Management

• Administer endpoint management tools such as ManageEngine Endpoint Central for patching, software deployment, remote support, inventory, configuration enforcement, and endpoint reporting.
• Support workstation, laptop, shared device, thin client, printer, mobile device, and production-floor technology needs.
• Assist with Microsoft Intune, MDM, and device compliance initiatives where applicable.
• Support endpoint security controls, including device encryption, antivirus/EDR, application control, removable media controls, and secure configuration policies.
• Ensure endpoints are patched, inventoried, monitored, and maintained in accordance with company policy.

Service Desk and User Support

• Provide advanced second-level and third-level support for complex user, endpoint, application, network, identity, and infrastructure issues.
• Escalate, coordinate, and resolve incidents using the company helpdesk system, including ManageEngine ServiceDesk Plus.
• Assist the IT Manager with escalations, root cause analysis, repeat-issue remediation, and knowledge base development.
• Support onboarding, offboarding, role changes, access changes, MFA/passwordless authentication, hardware provisioning, and account access requests.
• Train users on approved systems, cybersecurity practices, remote access procedures, and secure handling of company information.

Cybersecurity, Monitoring, and Incident Response

• Support cybersecurity monitoring and alert triage using tools such as Microsoft Defender, Microsoft Sentinel, Proofpoint, Fortinet logs, Endpoint Central, and other approved platforms.
• Investigate suspicious activity, phishing reports, endpoint alerts, failed access attempts, unusual network behavior, and other security events.
• Assist with vulnerability management, patch remediation, risk tracking, configuration review, and security exception documentation.
• Support the enforcement of least privilege, MFA, Conditional Access, privileged account controls, secure remote access, and administrative access restrictions.
• Participate in incident response activities, including containment, documentation, remediation, evidence preservation, and post-incident improvement actions.

NIST SP 800-171 / CMMC Level 2 Compliance Support

• Support the implementation, maintenance, and documentation of technical security controls aligned with NIST SP 800-171 and CMMC Level 2.
• Assist with collection, organization, and maintenance of compliance evidence, including screenshots, exports, logs, configuration records, access reviews, audit logs, vulnerability reports, patch records, and system documentation.
• Support periodic access reviews, privileged account reviews, asset reviews, configuration reviews, vulnerability remediation reviews, and security monitoring activities.
• Maintain or assist with documentation related to system boundaries, CUI data flows, approved software, authorized users, administrative access, remote access, mobile code, removable media, encryption, logging, monitoring, and incident response.
• Ensure IT changes, system configurations, and access permissions are implemented in accordance with company policy, change management procedures, and compliance requirements.
• Work with IT leadership, auditors, assessors, vendors, and service providers to support internal reviews, external assessments, and remediation activities.

Projects, Vendors, and Continuous Improvement

• Lead or assist with infrastructure, cloud, security, compliance, endpoint, and network improvement projects.
• Coordinate with vendors, managed service providers, software providers, cloud service providers, and support partners to resolve technical issues and complete approved projects.
• Research, evaluate, and recommend new technologies that improve reliability, security, compliance, efficiency, or business operations.
• Identify recurring technical issues and implement long-term corrective actions.
• Create and maintain technical documentation, procedures, diagrams, implementation notes, and user-facing instructions.

Requirements

Required Qualifications

• Experience administering Windows Server, Active Directory, Group Policy, DNS, DHCP, and Windows endpoints.
• Experience with Microsoft 365 administration, preferably including Exchange Online, SharePoint, OneDrive, Teams, and Microsoft 365 security features.
• Experience with Microsoft Entra ID, MFA, Conditional Access, hybrid identity, group-based access, and user lifecycle management.
• Experience with Azure or Azure Government administration, including virtual machines, networking, storage, monitoring, and security configuration.
• Experience supporting Fortinet or similar firewall/network security platforms.
• Knowledge of networking concepts, including TCP/IP, VLANs, routing, switching, DNS, DHCP, VPN, wireless, and firewall rules.
• Experience with endpoint management, patching, software deployment, inventory, and remote support tools. ManageEngine Endpoint Central experience preferred.
• Experience using or administering an IT service management/helpdesk platform. ManageEngine ServiceDesk Plus experience preferred.
• Understanding of cybersecurity principles, including least privilege, MFA, endpoint protection, vulnerability management, logging, monitoring, incident response, secure configuration, and access control.
• Familiarity with NIST SP 800-171, CMMC Level 2, ITAR, CUI handling, or other regulated manufacturing/defense compliance requirements preferred.
• Ability to document systems, procedures, changes, diagrams, evidence, and troubleshooting steps clearly and accurately.
• Ability to troubleshoot complex technical issues across endpoints, servers, identity, network, cloud, and security platforms.
• Ability to manage multiple priorities, communicate clearly with technical and non-technical users, and work independently with minimal supervision.
• Relevant certifications preferred, such as CompTIA Network+, Security+, Microsoft Certified credentials, Fortinet NSE/FCP certifications, or equivalent experience.

Preferred Experience

• Microsoft 365 GCC High or Azure Government experience.
• Hybrid Active Directory and Microsoft Entra ID environments.
• Microsoft Defender, Microsoft Sentinel, or similar security monitoring platforms.
• Proofpoint or similar email security platforms.
• Azure Virtual Desktop, Remote Desktop Services, or secure remote access environments.
• Endpoint Central, ServiceDesk Plus, Intune, or comparable endpoint/ITSM platforms.
• Fortinet firewall administration, VPN, VLAN segmentation, and firewall policy troubleshooting.
• Supporting manufacturing, aerospace, defense, or compliance-driven environments.
• Supporting CMMC Level 2, NIST SP 800-171, CUI, ITAR, or FedRAMP-related evidence requirements.

Summary

MAPP Technologies is seeking an IT Engineer who is responsible for supporting, maintaining, securing, and improving MAPP Technologies’ information technology infrastructure in a hybrid Microsoft, Azure Government, and manufacturing environment. This role provides advanced technical support, infrastructure administration, security control implementation, project execution, vendor coordination, and compliance support.

The IT Engineer works with internal users, IT leadership, outside vendors, managed service providers, and business stakeholders to ensure reliable operation of core systems, secure access to company resources, and alignment with company cybersecurity and compliance requirements, including NIST SP 800-171 and CMMC Level 2.

This position requires strong troubleshooting skills, sound technical judgment, clear communication, documentation discipline, and the ability to support both office and production-floor technology.

About MAPP Technologies

Joplin, Missouri based MAPP Technologies L.L.C. is a privately-held Aerospace & Defense manufacturing and aftermarket services company delivering critical components to OEM print specifications using specialized process capabilities; from raw material through complex machining, welding, coating, assembly, and final inspection – Providing best-in-class value, quality, and just-in-time delivery to our global customers throughout the maritime, aerospace, and power generation industries. We contribute to a world in which people reliably feel protected, safe, and secure.