Systems Administrator

kirkhill; Brea (CA); On-site; USD 90,000 - 140,000; Full time

Job summary

Kirkhill, Inc. is seeking a Systems Administrator with strong Azure and networking expertise to join our cloud and network infrastructure team.

You will own and mature the Azure cloud environment, including identity with Entra ID, governance, cost management, and security posture, while guiding hybrid-cloud integrations for on-prem workloads. The role encompasses implementing cloud security tooling, Intune endpoint management, and automation via PowerShell and AI copilots.

Qualifications

• Hands-on experience with hybrid cloud migration and Azure networking.
• Azure administration including Entra ID, VMs, vNet, Defender, Intune.
• Ability to design and manage basic network architecture and firewall/ACLs.
• Security clearance and U.S. citizenship are required; CompTIA Security+ certification.
• Azure certifications and cybersecurity compliance knowledge are preferred.
• PowerShell and AI-assisted automation experience.

Responsibilities

• Own and mature the Azure cloud environment: architecture, storage, identity, governance, cost management, and security posture.
• Lead cloud migration and hybrid-cloud integration for on-prem workloads.
• Implement cloud security configuration, CA policy, Defender tooling, monitoring and logging.
• Intune configurations, endpoint management, and automation using PowerShell.
• Maintain monitoring, backup/DR, and patch/configuration management for cloud systems.
• Design, document, and improve network architecture with segmentation and ACL management.
• Support classified environment: SSPs, audits, and inspections; coordinate with FSO.
• Administer Windows Server, AD/Entra ID, and core VDI/virtual infrastructure.

Skills

Hybrid cloud migration

Azure administration

Network design

Security+ (CE)

Security clearance

Azure certifications

CMMC/NIST compliance

AI/PowerShell

Tools

Intune

Entra ID

Job description

Systems Administrator - Cloud & Network Infrastructure

Position Summary

We are seeking a Systems Administrator with strong Azure and networking expertise.

Key Responsibilities

Cloud Infrastructure

• Own and mature our Azure cloud environment: architecture, storage, identity (Entra ID), governance, cost management, and security posture
• Lead cloud migration and hybrid-cloud integration efforts for on-prem workloads where appropriate
• Implement and enforce cloud security configuration, CA policy, Defender security tooling, monitoring and logging
• Intune configurations, package deployment, and endpoint management
• Maintain monitoring, backup/DR, and patch/configuration management practices for cloud-hosted systems
• Use AI, copilot, and PowerShell to automate repetitive administration and security tasks

Network Architecture

• Design, document, and continuously improve network architecture, including segmentation between CUI-scoped enclaves and general business networks
• Manage firewall, VLAN, and ACL configurations (including CUI subnet access control lists) and maintain accurate network documentation/diagrams
• Lead network hardening initiatives and access control requirements (e.g., AC, SC control families)
• Evaluate and implement zero-trust and micro-segmentation strategies

Classified Environment (training provided)

• Maintain secure configurations, audits, and documentation for the classified workstations;
• Maintain active Security+ certification
• Maintain System Security Plans (SSPs), POA&Ms, and supporting documentation
• Support periodic government inspections, self-inspections, vulnerability scans, and audit log reviews for the classified system
• Serve as day-to-day POC for the classified environment, coordinating with the Facility Security Officer (FSO) and compliance team as needed

General Systems Administration

• Administer Windows Server, Active Directory/Entra ID, endpoint management, and core virtual infrastructure services
• Participate in security assessments, incident response testing, risk assessments, and 3rd party audits
• Execute vulnerability scans, system patching, configuration deployments
• Support configuration and software management controls (e.g., application allow-listing, nonessential functionality restrictions) in coordination with compliance staff
• Participate in change management processes for IT systems affecting CUI/classified scope
• Prioritize and resolve escalated technical issues and mentor junior IT staff, manage ticketing systems, and address chronic or persistent issues
• Own and support all critical security incidents, interruptions/outages, and end-user issues with flexible evening/weekend work when required
• Maintain system documentation, diagrams, project plans, asset inventory

Required Qualifications

• Hands-on expertise in hybrid cloud migration, Microsoft Azure networking, cloud technologies, protocols, and authentication, and WAN network architecture
• Experience administering Azure: identity (Entra ID), virtual machines, vnet, CA policy, Azure Foundry, Purview, Defender, Intune, etc.
• Design and manage basic network architecture: routing, switching, segmentation, firewall/ACL configuration, VLANs, RADIUS, etc.
• Excellent writing skills, conceptual thinking skills, and communication skills needed to learn/implement GenAI tools
• Active Secret security clearance
• U.S. citizenship required.
• CompTIA Security+ (CE)

Preferred Qualifications

• Cloud or Microsoft Azure Certifications
• Experience with cybersecurity compliance frameworks similar to CMMC/NIST 800-171
• Implementing simple AI solutions in Azure Foundry and/or Copilot
• Strong PowerShell skills

Work Environment

• On-site role
• Some after-hours/on-call availability required to support maintenance windows and incident response

Kirkhill, Inc. is proud to be an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. All successful candidates must submit to post offer pre-employment physical examination, drug/alcohol screen and background check as a condition of employment.