Systems Engineer II

By Light Professional IT Services LLC; McLean (VA); Hybrid; USD 90,000 - 140,000; Full time

Job summary

By Light Professional IT Services LLC is seeking a Systems Engineer II to design, implement, and sustain enterprise infrastructure across regional facilities. You will manage hybrid cloud and on-prem environments, including M365, Azure, GCC High, and security controls, acting as a technical authority on modernization and incident response.

Responsibilities include architecture of cloud, network, and security, plus vulnerability remediation and documentation.

Qualifications

• Analytical problem solving for complex IT incidents.
• Ability to collaborate across IT, cybersecurity, and stakeholders.
• Clear written and verbal technical communication.

Responsibilities

• Manage M365 (GCC High) and Azure environments including Entra ID and Intune.
• Administer Azure infrastructure, AV Desktop host pools, and migration projects.
• Maintain firewall and network security; ensure compliance with security controls.

Skills

Analytical problem solving

Cross-functional collaboration

Technical communication

Education

Bachelor's degree in Computer Science / IT or equivalent

Tools

Fortinet Firewalls

Aruba Central

Azure

Entra ID

Intune

Job description

Company Overview

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

Position Overview

The Systems Engineer II is responsible for the design, implementation, maintenance, security, and ongoing support of enterprise infrastructure systems across multiple business locations.

This role oversees hybrid cloud and on-premises environments, including Microsoft 365, Azure, GCC High, network infrastructure, endpoint management platforms, security controls, and compliance initiatives. The engineer serves as a key technical authority for infrastructure modernization, incident escalation, system integrations, and cybersecurity efforts.

Work Environment & Schedule

• Hybrid Location: Combination of remote work and scheduled on-site support across regional facilities and offices.
• Maintenance Windows: Participation in scheduled after-hours maintenance, system upgrades, and critical incident response duties.
• Compliance Culture: Strict adherence to corporate security baselines, audit controls, and federal regulatory compliance workflows.

Responsibilities

Cloud & Microsoft 365 Architecture

• Tenant & Identity Management: Administer Microsoft 365 commercial and GCC High environments. Support Microsoft Entra ID (Azure Active Directory) and configure granular Conditional Access policies.
• Infrastructure & Virtualization: Support Azure cloud infrastructure administration, migration projects, and manage Azure Virtual Desktop (AVD) host pools and session hosts.
• Endpoint Compliance: Implement and maintain Microsoft Intune device management policies, compliance baselines, app deployments, and troubleshoot enrollment issues.

Network Infrastructure & Security

• Wireless & Switching: Administer enterprise wireless infrastructure utilizing Aruba technologies and manage the Aruba Central cloud management platform.
• Firewall & Perimeter Defense: Maintain Fortinet firewall infrastructure, security policies, IPSec VPN tunnels, and Azure networking integrations.
• Network Modernization: Support enterprise routing, switching, DNS/DHCP, ISP migrations, facility relocations, and new site network deployments.

Security, Compliance & Risk Remediation

• Compliance Controls: Participate in cybersecurity compliance initiatives, directly implementing technical controls supporting CMMC Level 2 audit and accreditation requirements.
• Vulnerability Management: Monitor CVE announcements, conduct patch management cycles, and coordinate remediation activities stemming from third-party penetration testing and vulnerability scans.

Systems Administration & Project Delivery

• Server & Directory Services: Support Windows Server environments, Active Directory optimization, GPO policies, asset inventory, and CMDB record accuracy.
• Project Execution: Lead or assist with office buildouts, organizational acquisitions, tenant-to-tenant migrations, and vendor coordination.
• Operational Support: Perform Tier 2/3 root-cause analysis, provide scheduled after-hours support for critical maintenance windows, and author comprehensive Standard Operating Procedures (SOPs).

Core Behavioral Competencies

• Analytical Problem Solving: Strong root-cause diagnostic mindset for resolving complex, multi-layered IT infrastructure incidents.

• Cross-Functional Collaboration: Ability to work effectively across IT, cybersecurity teams, executive stakeholders, and third-party vendors.

• Technical Communication: Clear verbal and written articulation of technical concepts for both technical teams and non-technical end users.

Required Experience/Qualifications

• 3–5+ years in systems and network engineering.
• Proficiency in M365, GCC High, Azure, Entra ID, and Intune.
• Hands‑on experience with Fortinet Firewalls and Aruba Wireless / Central.
• Solid TCP/IP networking, VPN, DNS, DHCP, and switching knowledge.
• Proven technical documentation and troubleshooting skills.

Preferred Experience/Qualifications

• Bachelor's degree in Computer Science, IT, or equivalent experience.
• Experience supporting defense contractors or government regulated environments (NIST 800-171 / CMMC).
• Microsoft AZ‑104, CompTIA Security+, Fortinet NSE 4/5, or Aruba ACMA/ACMP.