Senior Systems Engineer (On-Site - Arlington, VA)

Chinook Systems; Arlington (VA); On-site; USD 130,000 - 170,000; Full time

Job summary

Chinook Systems, Inc. seeks a Senior IT Systems Engineer to provide hands-on Tier 3 troubleshooting, systems administration, and security-focused infrastructure improvements at our Arlington, VA headquarters.

You will own technical execution, documentation, and remediation for managed IT and security services, with a focus on AI enablement initiatives. The role requires leading on-site support, engineering complex solutions, and coordinating with MSP/MSSP providers to maintain secure identity,

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field.
• IAT-II or equivalent security certification (Security+ or GICSP).
• 7+ years of progressive IT systems experience with Tier 3 troubleshooting and production changes.
• Strong Microsoft 365, Azure, Entra ID, and Intune administration.
• Experience with Fortinet FortiGate firewalls.
• Experience with DLP/IRM/DRM and policy enforcement.
• Workflow automation experience with ITSM platforms and Adobe Sign.
• Scripting with PowerShell and API integrations.
• Ability to document and implement formal change management.

Responsibilities

• Resolve complex Tier 3 issues across identity, endpoints, servers, networks, cloud services, and business applications.
• Administer on-premises and virtualized infrastructure, FortiGate firewalls, Microsoft 365 GCC, Azure, Entra ID, Intune, SharePoint, and Teams.
• Coordinate patching, vulnerability remediation, upgrades, and backup testing with the provider.
• Direct MSP / MSSP technical work, prioritizing escalations and remediation validation.
• Coordinate SOC incident response, containment, and recovery, escalating risk as needed.
• Implement, administer, and test DLP and IRM / DRM, including classification and encryption policies.
• Investigate alerts, tune rules, and document gaps.
• Design and maintain IT service management workflows using Adobe Sign or equivalents.
• Translate manager-approved processes into documented workflows.
• Validate requirements and acceptance criteria with process owners and maintain integrations.
• Author and maintain technical white papers, SOPs, architecture diagrams, runbooks, and post-change validation.
• Configure and validate Microsoft Sentinel and provider security-platform integrations.
• Support audits, SSP / POA&M updates, and NIST SP 800-171 / 172 and CMMC safeguards.
• Support AI enablement through configuration, testing, documentation, and user assistance.

Skills

Tier 3 troubleshooting

Systems administration

FortiGate

Microsoft 365 GCC

Azure

Entra ID

Intune

SharePoint

Teams

PowerShell

Workflow automation

Documentation

MS Office Suite

Education

Bachelor's degree in Information Technology / Computer Science / Cybersecurity

IAT-II certification (Security+ or GICSP)

Tools

Fortinet FortiGate

Microsoft Sentinel

Adobe Sign

PowerShell

APIs

Job description

The Work:

As the Senior IT Systems Engineer, you will provide hands-on Tier 3 troubleshooting, systems administration, infrastructure improvements, enterprise data protection, and workflow automation. You will implement approved changes and provide technical direction to Chinook's managed IT and security services provider, which delivers Tier 1 and Tier 2 support and security operations center (SOC) services. This senior individual-contributor role will own technical execution, documentation, and remediation. You will also provide technical support for AI enablement and other project-based innovation initiatives.

This position is IN-Office at our Corporate Headquarters in Arlington, VA.

Citizenship / Clearance Requirements:

• Must be a U.S. Citizen.
• Must be able to obtain and maintain a Secret security clearance based on customer and project requirements.

Key Responsibilities:

• Resolve complex Tier 3 issues across identity, endpoints, servers, networks, cloud services, and business applications; perform root-cause analysis and provide on-site equipment support.
• Administer on-premises and virtualized infrastructure, FortiGate firewalls, Microsoft 365 GCC, Azure, Entra ID, Intune, SharePoint, and Teams; maintain secure identity, access, and device configurations.
• Coordinate patching, vulnerability remediation, upgrades, and backup and recovery testing with the provider; resolve failures and validate results.
• Direct MSP / MSSP technical work, prioritize escalations, and verify remediation.
• Coordinate SOC incident response, containment, and recovery, escalating risk and service-scope decisions.
• Implement, administer, and test data loss prevention (DLP) and information rights management / digital rights management (IRM / DRM), including classification, encryption, document permissions, and sharing / transfer restrictions.
• Investigate alerts, tune rules, and document gaps.
• Design and maintain IT service management, approval, and electronic-signature workflows using Adobe Sign, or equivalent platforms.
• Translate manager-approved processes into documented workflows.
• Validate requirements and acceptance criteria with process owners, support adoption, and maintain integrations through platform changes.
• Author and maintain detailed technical white papers, SOPs, architecture and workflow diagrams, configuration baselines, runbooks, implementation guides, and test evidence in version-controlled repositories; transfer routine support procedures to the provider.
• Execute formal change management, documenting requirements, technical design, risk and impact, approvals, testing, communications, implementation, rollback, and post-change validation.
• Configure and validate Microsoft Sentinel and provider security-platform integrations, including event delivery, secure data handling, alert ownership, and escalation.
• Support audits, security assessments, SSP / POA&M updates, and approved NIST SP 800-171 / 172 and CMMC safeguards under GRC direction.
• Support AI enablement through assigned configuration, integration testing, documentation, and user assistance within approved policies.

Minimum Qualifications:

• At least 7 years of progressive, hands‑on systems administration, infrastructure, or engineering experience, including independent Tier 3 troubleshooting and production change implementation.
• A Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
  • A High School Diploma and 12 years of experience may be considered in lieu of a formal degree.
• An IAT-II satisfying certification such as Security+ or GICSP.
• Strong Microsoft 365, Azure, Entra ID, and Intune administration skills.
• Experience troubleshooting across Windows, identity, networking, DNS, DHCP, and backups.
• Hands‑on Fortinet FortiGate experience.
• Applied experience in the implementation, administration and testing of both DLP and IRM / DRM, including classification, encryption, document permissions, sharing restrictions, and policy enforcement.
• Hands‑on workflow automation experience with an IT service management platform, and Adobe Sign or an equivalent electronic‑signature / document‑approval platform. Experience must include workflow configuration, integration, testing, and maintenance.
• Demonstrated ability to automate administration and integrate services using PowerShell or comparable scripting, APIs, and supported workflow tools.
• Demonstrated ability to produce detailed technical white papers, SOPs, system and workflow documentation, and implementation records, and to execute formal change management with approvals, testing, rollback, and post-change validation.
• Experience directing MSP / MSSP technical work, resolving escalations, validating remediation, and supporting security investigations, recovery, and control evidence collection.
• Proficiency with the Microsoft Office Suite (Excel, Word, Outlook, MS Teams, MS Project, PowerPoint).

Preferred Qualifications:

• An Active Secret or higher Security Clearance.
• Relevant advanced infrastructure / security certifications and experience supporting NIST SP 800-171 / 172, CMMC, DFARS, or NISPOM requirements.
• HaloITSM and Adobe Sign experience.
• Microsoft 365 GCC experience.
• Experience with Microsoft Sentinel, Qualys, Microsoft Purview or Fortra information-protection products.
• Experience with CrowdStrike-based SOC integrations.

Physical Considerations:

• Must be able to work in an office environment.
• Must be able to walk construction sites with uneven surfaces, carry up to 50 lbs., climb stairs and ladders, and work both indoors and outdoors in severe weather conditions, in confined spaces, and in dust-generating environments.
• Must be able to maintain spatial awareness and comply with safety standards while working near mechanical and electrical building equipment and systems.
• Must be able to wear Personal Protective Equipment (PPE) where required.

Annual Salary, Dependent Upon Qualifications and Experience: $130,000 – 170,000

Who is Chinook?

Chinook Systems, Inc. is a leader in delivering lifecycle energy security solutions to mission critical government and commercial facility Owners. We specialize in the engineering, construction, commissioning, and operations of intelligent, cyber secure, code compliant, and energy efficient building systems. Our solutions save millions of dollars in utility costs, reduce harmful emissions to the environment, and mitigate cyber‑attacks on facilities. Chinook provides motivated employees with the opportunity to advance in a fast‑growing, innovative, entrepreneurial, and collaborative work environment.

Equal Employment Opportunity Statement:

Chinook Systems Inc. is an Equal Opportunity Employer. We do not discriminate against anyone because of their differences, such as age, disability, ethnicity, religion, national origin, gender, gender identity and expression, or sexual orientation.

Chinook is committed to providing veteran employment opportunities to our service men and women.