Microsoft 365 Administrator

BCubed Engineering Corp (DBA Auria); Warrenton (VA); On-site; USD 105,000 - 130,000; Full time

Benefits offered by this job

Generous PTO

Flex time

11 paid holidays & floating days

401(k) match up to 4%

Tuition & certifications support up to

Health insurance

Life insurance

Employee Assistance Program

Job summary

Auria is seeking a Systems Administrator III - M365 to support and secure our hybrid Microsoft 365 environment from onsite locations in Warrenton or Reston, VA. The role emphasizes identity, endpoint, and cloud service administration with a focus on security and compliance in a government-like setting.

The ideal candidate has 5–10 years of hands-on experience with Entra ID, Intune, AD, and Azure Virtual Desktop, plus PowerShell and Graph automation.

Qualifications

• Bachelor's degree or equivalent in information technology, computer science, cybersecurity, or related discipline.
• 5–10 years of progressive systems administration experience, including administering Microsoft 365, Entra ID, and Intune in a production environment.
• Demonstrated capability managing identity and endpoint policies, troubleshooting cloud services, and PowerShell automation.
• Certifications such as M365 Certified: Endpoint Administrator Associate or Identity and Access Administrator Associate preferred; other relevant certs are advantageous.

Responsibilities

• Administer Microsoft Entra ID users, groups, devices, apps, registrations, and service principals; manage MFA, CA, and privileged access where licensed.
• Support hybrid identity and AD DS; diagnose sync, auth, token, device registration, and app integration issues.
• Manage Intune enrollment, policies, configurations, and Autopilot device prep; support macOS/Linux where applicable.
• Administer Exchange Online mailboxes, Groups, Teams policies, and SharePoint/OneDrive access and sharing; manage licenses and tenant settings.
• Maintain Azure Virtual Desktop components, patching, capacity, and dependencies; troubleshoot connectivity and performance.
• Assist with Defender configurations and implement hardening; support incident response and evidence collection per policy.
• Develop and maintain PowerShell scripts and Graph automation; follow change control and document runbooks.

Skills

Entra ID administration

Intune administration

Windows endpoint administration

Hybrid identity

Microsoft 365 tenant administration

Azure Active Directory

PowerShell scripting

Microsoft Graph

Security incident response

Education

Bachelor's degree in IT / CS / Cybersecurity

Job description

• life insurance
• paid time off
• flex time
• 401(k)

Auria is looking to hire an Systems Administrator III - M365 to support the company. This role is ONSITE in either Warrenton or Reston, VA.

WHAT YOU CAN EXPECT TO DO:

• Identity and access: Administer Microsoft Entra ID users, groups, devices, enterprise applications, application registrations, and service principals. Manage account lifecycles, role-based access control, least privilege, multifactor authentication, Conditional Access, and privileged access capabilities where licensed and supported.
• Hybrid identity: Support Active Directory Domain Services, Group Policy, and approved Microsoft Entra synchronization services. Diagnose synchronization, authentication, authorization, token, device registration, and application integration issues; maintain application credentials and certificates.
• Endpoint management: Administer Microsoft Intune enrollment, application deployment, compliance policies, configuration profiles, encryption, security baselines, and supported update controls. Standardize Windows provisioning, including Autopilot device preparation where supported; support macOS and Linux within platform and government‑cloud capabilities.
• Microsoft 365 services: Administer Exchange Online mailboxes, permissions, groups, and mail flow; Teams policies; and SharePoint Online and OneDrive access and sharing. Manage licenses, tenant settings, service health, and client connectivity; implement approved collaboration and data‑protection settings.
• Azure Virtual Desktop: Maintain host pools, session hosts, workspaces, application groups, user assignments, images, RemoteApps, and FSLogix profiles where deployed. Coordinate patching, capacity, scaling, and compute, storage, and network dependencies; troubleshoot connectivity, authentication, applications, and performance using supported management methods.
• Security and compliance: Maintain Microsoft Defender for Endpoint and Defender for Office 365 configurations and implement cybersecurity‑approved hardening and remediation. Assist with alert investigation, containment, and recovery under cybersecurity direction; preserve logs and provide evidence supporting access, configuration, and protection requirements. Support implementation, maintenance, and documentation of assigned technical controls under company policies, contractual requirements, and applicable NIST SP 800‑171 and CMMC requirements. Coordinate with Cybersecurity on assessments, remediation, incident response, and evidence collection; promptly escalation of security risks and control deficiencies.
• Service operations: Resolve escalated incidents and requests within service targets; document root causes and reduce recurring issues. Coordinate with Microsoft and vendors, communicate service impacts, maintain operational metrics, and validate backup, restoration, and recovery procedures for assigned services. Maintain current operational procedures and configuration records to support continuity and knowledge transfer; prioritize concurrent incidents and requests, communicate status and escalation needs, and recommend sustainable corrective actions. Participate in documented restoration and recovery validation for assigned services.
• Automation and change: Develop and maintain tested PowerShell scripts and Microsoft Graph automation using government‑cloud endpoints, appropriate permissions, and secure credential handling. Maintain configuration records and runbooks; test changes, document rollback plans, follow change approval processes, and share knowledge with the service desk.

WHAT THE TEAM REQUIRES:

• Mission‑Driven Professional: Collaborative contributor motivated by the opportunity to develop cutting‑edge solutions that protect and serve both the nation and the world.
• Intermediate hands‑on proficiency in Microsoft Entra ID, Intune, Windows endpoint administration, Conditional Access, authentication methods, hybrid identity, and Microsoft 365 tenant administration.
• Working proficiency in Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft Defender, and Azure Virtual Desktop administration, including profile management and infrastructure dependencies.
• Ability to interpret logs, diagnose problems across identity, devices, applications, and services, and implement tested solutions independently while recognizing escalation thresholds.
• Practical PowerShell and Microsoft Graph skills; working knowledge of networking, Domain Name System (DNS), certificates, modern authentication, endpoint security, and recovery practices.
• Understanding of GCC High service differences, licensing dependencies, Zero Trust principles, least privilege, change management, and secure handling of Controlled Unclassified Information (CUI) and export‑controlled data.
• Clear communication, accurate documentation, customer focus, sound judgment, integrity, initiative, and effective coordination with technical and business stakeholders.

Required Qualifications (Education, Experience & Certifications):

• Bachelor's degree in information technology, computer science, cybersecurity, or a related discipline;
• 5‑10 years of relevant experience of progressively responsible systems administration experience, including administering Microsoft 365, Microsoft Entra ID, and Microsoft Intune in a production enterprise environment; or an equivalent combination of education, training and experience
• Technical capability: Demonstrated experience managing identity and endpoint policies, troubleshooting Microsoft cloud services, and maintaining PowerShell automation. Practical exposure to hybrid identity and virtual desktops; ability to assume assigned Azure Virtual Desktop responsibilities. Demonstrated ability to independently prioritize competing operational requirements and resolve complex technical issues with limited supervision.
• Certifications: Microsoft 365 Certified: Endpoint Administrator Associate or Microsoft Certified: Identity and Access Administrator Associate preferred. Other relevant current Microsoft certifications and CompTIA Security+ are advantageous; equivalent demonstrated proficiency is acceptable.

WHAT THE TEAM PREFERS:

• Preferred environment experience: GCC High or Azure Government; aerospace, defense, or another regulated sector; and supporting technical controls and assessment evidence for Cybersecurity Maturity Model Certification (CMMC) Level 2 and National Institute of Standards and Technology (NIST) SP 800‑171. Direct GCC High administration experience is strongly preferred, but comparable government‑cloud or regulated‑environment experience may be considered.

PAY TRANSPARENCY:

The salary offered will be based on the selected candidate's qualifications - skills, education & experience - and the position level.

$105,000 - $130,000

APPLICATION DEADLINE:

December 31st, 2026

THE AURIA TEAM:

Auria is a provider of solutions and software in support of complex Space, National Security, and Cyber missions of federal, international, and commercial customers. Headquartered in Colorado Springs, CO our success is built on the excellence of diverse teams advancing innovative systems and operational software to strengthen our customers' missions. With a distinguished track record and a spirit of relentless pursuit, and R&D, we set the pace for progress and execute every mission with the utmost precision.

Why You'll Love Working at Auria

We believe our team does their best work when they are well-supported, financially secure, and have the freedom to balance life outside of the office.

Time for What Matters

• Generous & Growing PTO: Start with a substantial paid time off package that increases every year you're with us.
• True Flexibility: Contract permitting, use Flex Time to work in a way that fits your life, not just your 8-to-5.
• 11 Paid Days Off: Enjoy 6 fixed company holidays plus 5 Floating Holidays to use whenever you choose.

Invested in Your Future

• 401(k) Match -Yours to Keep Instantly: We match up to 4% of your contributions . B oth your contributions and the company match are yours from day one with no vesting wait-period.
• Industry‑Leading Education Support: Level up with up to $12,000 annually for tuition and certifications. We don't just hire talent; we grow it.

Health & Peace of Mind

• Premium Healthcare, Lower Costs: High-quality medical plans paired with a Company‑Sponsored HSA to help you save for the future.
• Fully Covered Life Insurance: Breathe easy with life insurance up to $50K provided at zero cost to you.
• Holistic Support: Access our Employee Assistance Program (EAP) for mental health, financial coaching, and more.

...and that's just the beginning!

The position location and work schedule are based on current business needs. Auria reserves the right to modify the work location or work arrangement, including transitioning between remote, hybrid, or on‑site work, as business needs, customer requirements, or operational circumstances change. Employment with Auria is at will, meaning that either the employee or Auria may terminate the employment relationship at any time, with or without cause or advance notice, subject to applicable law.

Auria is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action-Employer, making decisions without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, marital status, national origin, age, veteran status, disability, or any other protected class.