Systems Administrator Secret clearance

StaffSource; Brea (CA); On-site; USD 100,000 - 150,000; Full time

Job summary

StaffSource is seeking a Systems Administrator with strong Azure and networking expertise to support our secured, classified-friendly environment in California. The role focuses on maturing the Azure cloud environment, Entra ID governance, and hybrid-cloud integration for on-prem workloads.

You will implement cloud security configurations, manage Intune and Defender tooling, automate tasks with PowerShell, and design network segmentation with robust ACL controls.

Qualifications

• Hybrid cloud migration and Azure networking expertise required.
• Active Secret clearance and CompTIA Security+ (CE) certification.
• Experience with Entra ID and cloud governance.

Responsibilities

• Own and mature Azure cloud environment including Entra ID and governance.
• Lead cloud migration and hybrid-cloud integration for on-prem workloads.
• Implement cloud security configurations and Defender tooling.
• Manage Intune configurations and endpoint management.
• Maintain monitoring, backup/DR, patch/configuration for cloud systems.
• Automate tasks with PowerShell and AI tooling.
• Design and improve network architecture with segmentation between enclaves.
• Manage firewall, VLAN, ACL configurations and maintain documentation.
• Lead network hardening and access-control initiatives.
• Evaluate zero-trust and micro-segmentation strategies.
• Support classified environment: SSPs, audits, and inspections.
• Mentor junior IT staff and coordinate with compliance team.

Skills

Azure networking

Cloud migration

Entra ID

Network architecture

Security compliance

PowerShell automation

Zero-trust concepts

Firewall/ACL management

Tools

Intune

Defender

PowerShell

Job description

Position Summary

We are seeking a Systems Administrator with strong Azure and networking expertise.

Key Responsibilities

• Own and mature our Azure cloud environment: architecture, storage, identity (Entra ID), governance, cost management, and security posture
• Lead cloud migration and hybrid-cloud integration efforts for on-prem workloads where appropriate
• Implement and enforce cloud security configuration, CA policy, Defender security tooling, monitoring and logging
• Intune configurations, package deployment, and endpoint management
• Maintain monitoring, backup/DR, and patch/configuration management practices for cloud-hosted systems
• Use AI, copilot, and PowerShell to automate repetitive administration and security tasks
• Design, document, and continuously improve network architecture, including segmentation between CUI-scoped enclaves and general business networks
• Manage firewall, VLAN, and ACL configurations (including CUI subnet access control lists) and maintain accurate network documentation/diagrams
• Lead network hardening initiatives and access control requirements (e.g., AC, SC control families)
• Evaluate and implement zero-trust and micro-segmentation strategies

Classified Environment (training provided)

• Maintain secure configurations, audits, and documentation for the classified workstations;
• Maintain active Security+ certification
• Maintain System Security Plans (SSPs), POA&Ms, and supporting documentation
• Support periodic government inspections, self-inspections, vulnerability scans, and audit log reviews for the classified system
• Serve as day-to-day POC for the classified environment, coordinating with the Facility Security Officer (FSO) and compliance team as needed

General Systems Administration

• Administer Windows Server, Active Directory/Entra ID, endpoint management, and core virtual infrastructure services
• Participate in security assessments, incident response testing, risk assessments, and 3rd party audits
• Execute vulnerability scans, system patching, configuration deployments
• Support configuration and software management controls (e.g., application allow-listing, nonessential functionality restrictions) in coordination with compliance staff
• Participate in change management processes for IT systems affecting CUI/classified scope
• Prioritize and resolve escalated technical issues and mentor junior IT staff, manage ticketing systems, and address chronic or persistent issues
• Own and support all critical security incidents, interruptions/outages, and end-user issues with flexible evening/weekend work when required
• Maintain system documentation, diagrams, project plans, asset inventory

Required Qualifications

• Hands-on expertise in hybrid cloud migration, Microsoft Azure networking, cloud technologies, protocols, and authentication, and WAN network architecture
• Design and manage basic network architecture: routing, switching, segmentation, firewall/ACL configuration, VLANs, RADIUS, etc.
• Excellent writing skills, conceptual thinking skills, and communication skills needed to learn/implement GenAI tools
• Active Secret security clearance
• CompTIA Security+ (CE)

Preferred Qualifications

• Cloud or Microsoft Azure Certifications
• Experience with cybersecurity compliance frameworks similar to CMMC/NIST 800-171
• Implementing simple AI solutions in Azure Foundry and/or Copilot
• On-site role
• Some after-hours/on-call availability required to support maintenance windows and incident response