System Administrator SkillBridge Internship

dstaffing; Baltimore (MD); On-site; USD 60,000 - 90,000; Part time

Job summary

DUIT in Maryland is offering a SkillBridge intern position for a System Administrator. The intern will work with PowerShell scripting, Entra ID, Azure, Intune, and Defender, while learning security frameworks like NIST 800-171 and CMMC, in support of GCC Gov environments.

Ideal candidates have strong scripting skills and will gain hands-on experience with government cloud tools, identity management, and governance practices in a regulated setting.

Responsibilities

• System administrator: will gain hands-on experience with PowerShell scripting for automation.
• Work within Microsoft Entra ID, Microsoft Azure, Microsoft Intune, and Microsoft Defender.
• Learn security frameworks such as NIST SP 800-171 and CMMC.

Skills

PowerShell scripting

Entra ID

Azure

Intune

Defender

CMMC

NHST/Compliance awareness

Email/Collab administration

Azure AD

Tools

Exchange Online

Entra ID

Azure AD

Intune

Job description

One of Inc 5000's fastest growing companies, come join us! Our work environment is limitless, you matter to us, your great work will be recognized, and there are many opportunities for advancement. Davis Unlimited Information Technologies, Inc (DUIT) wants you! We have an opening for a System Administrator SkillBridge intern in our office headquarters.

Davis Unlimited Information Technologies (DUIT)'s SkillBridge program is developed so the Service member not only obtain Industry skill sets, but also the skill sets required to meet customer's needs after completion of the SkillBridge program. We are looking to not only have the service member gain industry knowledge but also the knowledge required to employ them upon completion.

The Path

At our headquarters office in Maryland, we will assist retiring or transitioning Military Service members. DUIT has developed extensive SkillBridge job training and career development programs in the following career fields to enhance the opportunities for separating Service members:

• Program Manager
• Program Integrator
• Hardware Technician
• Acquisition Professional
• Network Engineer
• Software Engineer
• Cybersecurity Engineering
• IT Staffing

All Applicants must have the following: approval from command and able to follow training plan requirements. Information provided is subject to verification.

What you will get to do:

System administrator: will get to use PowerShell Scripting, work within Microsoft Entra ID, Microsoft Azure, Microsoft Intune, and Microsoft Defender. The system administrator will learn security frameworks such as NIST SP 800-171 and CMMC.

Requirements

• 5+ years administering Microsoft environments; 2–3+ years in Microsoft 365 GCC (GCC or GCC High) and Azure Government
• Strong PowerShell scripting for automation (Exchange Online, Entra ID, Intune, SharePoint, Graph)
• Hands‑on with hybrid identity (Entra ID/Azure AD), Entra Connect/Cloud Sync, Conditional Access, MFA, PIM
• Endpoint management with Intune (Gov): device compliance, app protection, BitLocker, Autopilot, Windows Update for Business
• Email/collab: Exchange Online (mail flow, EOP, DKIM/DMARC/SPF), Teams (GCC nuances), SharePoint/OneDrive governance
• Security stack: Microsoft Defender for Endpoint/Office/Identity, Defender for Cloud/Cloud Apps, Sentinel basics (KQL)
• Azure (Gov): subscriptions/management groups, RBAC, VNets/NSGs, private endpoints, Key Vault, Storage/SAS, Backup/ASR
• Governance & compliance: Azure Policy, blueprints/landing zones (Gov), tagging, cost management, least‑privilege design
• Backup/DR and change management (ITIL fundamentals); solid documentation skills

GCC/Government Cloud Specifics

• Understanding of GCC vs GCC High boundaries, FedRAMP/NIST 800-171 alignment, and feature parity limitations
• Data residency/sovereignty and egress controls; third‑party app restrictions in Gov tenants
• S/MIME, and certificate lifecycle basics

CMMC (v2.0) Knowledge & Practices

• Working knowledge of CMMC Levels 1–2 and mapping to NIST SP 800-171/172 requirements
• Experience implementing and operating:
  • Access control: role‑based access, Conditional Access, device compliance, session controls
  • Identification & authentication: MFA everywhere.
  • Audit & logging: unified audit log, retention, Sentinel/Log Analytics queries & alerting; evidence collection. Splunk, Datadog or equivalent.
  • Configuration management: secure baselines (STIG‑informed), change tracking, policy as code (Azure Policy)
  • Incident response: response procedures, post‑incident reporting
  • Data protection: Purview sensitivity labels, DLP (Exchange/SharePoint/Teams/endpoints), Information Barriers, eDiscovery
  • Vulnerability & patch management across servers, endpoints, and cloud resources
• Contributing to SSPs, POA&Ms, and control evidence; supporting gap assessments and readiness for C3PAO audits
• Handling and safeguarding CUI, media protection, and secure file sharing within Gov boundaries

Networking & Infrastructure

• Site‑to‑site VPN/ExpressRoute concepts for Gov, private DNS, split‑tunnel considerations
• Zero Trust segmentation principles; endpoint and identity as security perimeter

Automation & DevOps‑Adjacent

• PowerShell modules (ExchangeOnlineManagement, Microsoft.Graph, Az, AzureAD/Entra), scheduled jobs, desired state configs
• CI/CD‑style admin habits for scripts (version control, peer review), ARM/Bicep/Terraform (Gov aware) a plus

Soft Skills

• Clear technical writing for auditors and leadership; ability to translate controls into actionable configurations
• Cross‑team collaboration (Security, Compliance, Networking), vendor coordination, and user communication/training

Certifications (Nice to Have)

• Microsoft: MS‑102 (or MD‑102), AZ‑104, AZ‑500, SC‑200/300/400
• Compliance/Security: Security+, CySA+, CISSP
• CMMC ecosystem: CCP/CCL (or equivalent training), experience with RPO/C3PAO engagements