IT Systems Administrator

Herrick Labs; Germantown (MD); On-site; USD 80,000 - 120,000; Full time

Job summary

Herrick Labs in Germantown, Maryland, is seeking an IT Systems Administrator to manage and secure enterprise IT systems. You will support key services like Microsoft 365 GCC High and Windows Server while ensuring compliance with CMMC Level 2 and NIST SP 800-171.

The ideal candidate possesses strong troubleshooting and technical skills, along with experience in network security and documentation. This is a full-time position located on-site.

Qualifications

• Current TS/SCI or eligibility required.
• Strong experience with hybrid identity services.
• Experience in cybersecurity operations and compliance.

Responsibilities

• Administer Hybrid Azure AD services.
• Manage Microsoft 365 GCC High.
• Support cybersecurity operations.
• Create and maintain technical documentation.

Skills

Hybrid Azure AD (Entra ID)

Microsoft 365 GCC High

Windows Server

Network Security

Cybersecurity operations

Attention to detail

Tools

VMware

SonicWall firewall

Job description

The IT Systems Administrator is responsible for deploying, administering, securing, and documenting enterprise IT systems that support a secure, compliance-driven environment. This position manages hybrid identity services, Microsoft 365 GCC High, Windows infrastructure, virtualization platforms, cybersecurity controls, and network services while ensuring alignment with CMMC Level 2 and NIST SP 800-171 requirements. The ideal candidate is a hands‑on technical professional who can build, secure, troubleshoot, and document complex systems while supporting operational continuity and audit readiness

Job Location:

Germantown, MD

Position Type:

Full‑time

Description:

Based on‑site in Germantown, Maryland, the IT Systems Administrator will support and maintain the organization's core IT infrastructure, including Hybrid Azure AD (Entra ID), Microsoft 365 GCC High, Windows Server environments, endpoint management platforms, virtualization technologies, and secure network services. This role works closely with cybersecurity and compliance initiatives, supporting identity management, system hardening, monitoring, patch management, backup and recovery operations, and regulatory compliance activities. The position requires strong technical troubleshooting skills, attention to detail, and the ability to maintain documentation in a highly regulated environment supporting sensitive government‑related programs.

Key Responsibilities:

• Administer Hybrid Azure AD (Entra ID), Azure AD Connect, Conditional Access, MFA, SSO, and certificate‑based authentication.
• Manage Microsoft 365 GCC High services, including Exchange Online, Teams, SharePoint, and OneDrive.
• Maintain Windows Server infrastructure, including Active Directory, DNS, DHCP, Group Policy, and endpoint management platforms.
• Implement and maintain secure configurations, patch management processes, compliance baselines, and system hardening standards.
• Support cybersecurity operations through security monitoring, log analysis, endpoint protection platforms, vulnerability remediation, and audit evidence collection.
• Assist with CMMC Level 2, NIST SP 800-171, and related compliance requirements through documentation, control implementation, and assessment readiness activities.
• Support SonicWall firewall, VPN, switching, wireless, VLAN, and network segmentation technologies.
• Maintain virtualization and storage environments, including VMware, Proxmox, SAN, and NAS platforms.
• Perform backup, disaster recovery, and business continuity support activities.
• Create and maintain technical documentation, procedures, diagrams, and operational runbooks to ensure knowledge transfer and continuity.
• Troubleshoot and resolve infrastructure, cloud, network, and security‑related issues across on‑premises and cloud environments.
• Collaborate with internal teams to improve system reliability, security posture, and operational efficiency.

Requirements:

• Current TS/SCI or eligibility required.
• Strong experience with Hybrid Azure AD (Entra ID) and Microsoft 365 GCC High.
• Experience administering Windows Server, Active Directory, Group Policy, and endpoint management solutions.
• Familiarity with CMMC Level 2, NIST SP 800-171, and secure government‑contractor environments.
• Working knowledge of networking fundamentals, virtualization, cybersecurity operations, and enterprise documentation practices.
• Strong communication skills, attention to detail, and an ownership mindset.