Senior Microsoft Infrastructure Administrator

System One; Washington (District of Columbia); Hybrid; USD 140,000 - 175,000; Full time

Benefits offered by this job

Health benefits

Job summary

System One seeks a Senior Microsoft Infrastructure Administrator to lead and implement Microsoft 365, Azure Government, and Entra ID solutions in a federal‑friendly environment. You will own cloud security posture, drive change via ITSM processes, and mentor junior staff.

You will administer Exchange Online, Teams, Intune, and Defender for Endpoint, aligning with FedRAMP/NIST requirements and Zero Trust principles.

Qualifications

• 5+ years of enterprise Microsoft infrastructure administration/engineering.
• Experience with federal/comparably regulated environments (FedRAMP/NIST).
• Strong PowerShell scripting for Microsoft 365/Azure administration.
• Knowledge of ITIL change/incident management and ITSM tooling.

Responsibilities

• Administer and engineer Microsoft 365 services (Exchange Online, SharePoint Online, OneDrive, Teams).
• Manage Azure Government and Entra ID, including Conditional Access and PIM.
• Maintain Intune device management and Defender for Endpoint policies.
• Support Zero Trust initiatives and identity governance with least-privilege access.
• Lead incident management as senior escalation point and mentor junior admins.

Skills

Microsoft 365 administration

Azure Government

Microsoft Entra ID

PowerShell

Zero Trust

Incident management

ServiceNow ITSM

ITIL processes

Education

Microsoft 365 Administrator Expert

Azure Administrator Associate (AZ-104)

Identity and Access Administrator Associate (SC-300)

Tools

Microsoft Defender for Endpoint

Microsoft Purview

Intune

Exchange Online

Job description

Senior Microsoft Infrastructure Administrator Location: Remote, with occasional onsite support in Washington, DC Employment requirements: Ability to work without sponsorship and ability to obtain a Public Trust Position Overview System One IT is seeking a Senior Microsoft Infrastructure Administrator to support an enterprise federal environment. This individual will serve as a senior technical authority across Microsoft 365, Azure Government, Microsoft Entra ID, Exchange Online, Microsoft Teams, Intune, Defender, and related Microsoft cloud services. The successful candidate will provide hands-on administration and engineering support, independently resolve complex cross-platform issues, lead Microsoft infrastructure improvements, and mentor junior administrators. This position requires strong technical ownership, sound judgment, and experience operating in a regulated federal or comparably secure enterprise environment.

Key Responsibilities

Microsoft 365 Administration

• Administer and engineer Microsoft 365 services, including Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
• Lead Microsoft 365 updates, feature rollouts, and configuration changes through established change-management practices.
• Monitor Microsoft 365 service health, performance, and security posture.
• Develop configuration standards, governance documentation, and technical procedures.
• Support Microsoft 365 licensing and service optimization.
• Evaluate Microsoft roadmap updates and recommend platform improvements.

Azure Government and Entra ID

• Administer Azure Government and Microsoft Entra ID services.
• Configure Conditional Access, multifactor authentication, single sign-on, identity governance, and Privileged Identity Management.
• Support Zero Trust initiatives through identity-based security controls and least-privilege access.
• Manage Azure subscriptions, resource groups, role-based access control, and policy enforcement.
• Support identity assurance requirements, including IAL2.
• Maintain Microsoft cloud services in alignment with FedRAMP and federal cybersecurity requirements.

Endpoint Management and Security

• Administer Microsoft Intune for device management, application deployment, configuration, and compliance enforcement.
• Manage Microsoft Defender for Endpoint policies and support security incident response.
• Develop endpoint security baselines aligned with NIST SP 800-53 requirements.
• Support Windows endpoint patching and software deployment.
• Troubleshoot complex endpoint enrollment, compliance, policy, and application issues.

Exchange Online and Microsoft Teams

• Administer Exchange Online mail flow, transport rules, mailbox configurations, and email security policies.
• Manage Microsoft Teams policies, governance, meetings, and service configurations.
• Configure and maintain DMARC, DKIM, SPF, and Microsoft Defender for Office 365.
• Support Microsoft Teams Rooms and audiovisual integrations.
• Serve as the senior escalation point for messaging and collaboration incidents.

Security, Compliance, and Governance

• Maintain Microsoft platform configurations in accordance with FISMA, FedRAMP, NIST SP 800-53, and organizational security requirements.
• Administer Microsoft Purview capabilities, including data loss prevention and information protection.
• Support Zero Trust Architecture aligned with NIST SP 800-207 and OMB M-22-09.
• Apply least-privilege and separation-of-duties principles.
• Support security assessments, audit evidence collection, and remediation activities.

Incident Management and Technical Leadership

• Serve as the senior escalation point for complex Microsoft infrastructure incidents.
• Independently diagnose and resolve cross-domain Microsoft platform issues.
• Maintain incident records, troubleshooting runbooks, technical procedures, and knowledge articles.
• Coordinate with service desk, network, security, and infrastructure teams.
• Mentor junior Microsoft infrastructure administrators.
• Review technical work for accuracy, quality, and adherence to standards.

Required Qualifications

• 6 to 8 or more years of hands-on enterprise Microsoft infrastructure administration and engineering experience.
• Experience administering Microsoft 365, Azure Government, and Microsoft Entra ID in a federal or comparably regulated enterprise environment.
• Strong hands-on experience with Microsoft Intune and Microsoft Defender for Endpoint.
• Experience implementing Zero Trust principles across Microsoft platforms.
• Experience independently resolving complex Microsoft infrastructure issues.
• Knowledge of FedRAMP-authorized Microsoft services and federal security requirements.
• Strong PowerShell scripting skills for Microsoft 365 and Azure administration.
• Familiarity with ITSM platforms such as ServiceNow.
• Knowledge of ITIL change and incident management practices.

Required Technical Expertise

• Microsoft 365 administration
• Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams
• Azure Government
• Microsoft Entra ID
• Conditional Access and Privileged Identity Management
• Identity governance and role-based access control
• Microsoft Intune
• Microsoft Defender for Endpoint
• Microsoft Defender for Office 365
• Microsoft Purview
• PowerShell
• Zero Trust Architecture
• FedRAMP, FISMA, and NIST SP 800-53

Required Certifications

• Microsoft Certified: Microsoft 365 Administrator Expert
• Microsoft Certified: Azure Administrator Associate, AZ-104
• Microsoft Certified: Identity and Access Administrator Associate, SC-300

Preferred Certifications

• Microsoft Certified: Azure Solutions Architect Expert, AZ-305
• Microsoft Certified: Security Operations Analyst Associate, SC-200
• Microsoft Certified: Information Protection and Compliance Administrator Associate, SC-400
• CompTIA Security+ or an equivalent security certification

Benefits and Perks

• System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.