Job Description
Job Description
Systems Administrator (Cloud & Network Infrastructure) - Defense Search
OVERVIEW
Are you looking for a new career opportunity with an exciting Defense/Aerospace company?! Then we've got the right team for you! In this role, you're responsible for the duties listed below.
Immediate opening for a Systems Administrator in Brea, CA who possesses:
- Active Secret Clearance
- Active CompTIA Security+ CE certification
- Hands-on expertise in hybrid cloud migration, Microsoft Azure networking, cloud technologies, protocols, authentication, and WAN network architecture
- Experience administering Azure, including Entra ID, virtual machines, virtual networks, Conditional Access policies, Azure Foundry, Purview, Defender, Intune, and related tools
- U.S. citizenship required
FULL DESCRIPTION: We are seeking a Systems Administrator to support cloud infrastructure, Azure administration, endpoint management, network architecture, classified systems compliance, and core systems administration in an aerospace and defense environment. This permanent, onsite role is responsible for managing Azure architecture, identity, security, endpoint tools, network segmentation, classified systems documentation, Windows Server, Active Directory, Entra ID, virtual infrastructure, vulnerability management, escalated IT support, and critical incident response. The ideal candidate will have an active Secret Clearance, active Security+ CE certification, strong Azure and hybrid cloud experience, hands-on systems administration skills, and the ability to support secure IT operations in a regulated environment.
The selected candidate will be responsible for:
- Owning and maturing the Azure cloud environment, including architecture, storage, identity, governance, cost management, and security posture
- Supporting cloud migration and hybrid-cloud integration efforts for on-prem workloads where appropriate
- Implementing and enforcing cloud security configurations, Conditional Access policies, Defender security tooling, monitoring, and logging
- Supporting Intune configurations, package deployment, and endpoint management
- Maintaining monitoring, backup/DR, patching, and configuration management practices for cloud-hosted systems
- Using AI, Copilot, PowerShell, scripts, and related tools to automate repetitive administration and security tasks
- Managing Azure networking, cloud technologies, protocols, authentication, and WAN network architecture
- Administering Azure tools and services, including Entra ID, virtual machines, virtual networks, Conditional Access policies, Azure Foundry, Purview, Defender, Intune, and related platforms
- Designing, documenting, and continuously improving network architecture
- Supporting segmentation between CUI-scoped enclaves and general business networks
- Managing firewall, VLAN, ACL, routing, switching, RADIUS, and related network security configurations
- Maintaining accurate network documentation and diagrams
- Leading network hardening initiatives and access control requirements
- Evaluating and implementing zero-trust and micro-segmentation strategies
- Maintaining secure configurations, audits, and documentation for classified workstations
- Serving as the day-to-day point of contact for classified systems environments
- Maintaining SSPs, POA&Ms, certifications, documentation, and supporting compliance materials
- Supporting periodic government inspections, self-inspections, vulnerability scans, and audit log reviews for classified systems
- Coordinating with the Facility Security Officer and compliance team as needed
- Managing Windows Server, Active Directory, Entra ID, endpoint management, and core virtual infrastructure services
- Participating in security assessments, incident response testing, risk assessments, and third-party audits
- Executing vulnerability scans, system patching, and configuration deployments
- Supporting configuration and software management controls, including application allow-listing and nonessential functionality restrictions
- Participating in change management processes for IT systems affecting CUI or classified scope
- Prioritizing and resolving escalated technical issues
- Mentoring junior IT staff and supporting ticketing workflows
- Addressing chronic or persistent IT issues
- Owning and supporting critical security incidents, interruptions, outages, and end-user issues
- Supporting flexible evening, weekend, or after-hours work when required
- Maintaining system documentation, diagrams, project plans, and asset inventory
- Performing other duties as assigned
The selected candidate will also possess:
- Active Secret Clearance required
- Active CompTIA Security+ CE certification required
- U.S. citizenship required
- Strong hands-on Azure administration experience required
- Hybrid cloud migration experience required
- Microsoft Azure networking experience required
- Cloud technologies, protocols, authentication, and WAN network architecture experience required
- Experience administering Entra ID required
- Experience with Azure virtual machines and virtual networks required
- Conditional Access policy experience required
- Azure Foundry experience preferred
- Microsoft Purview experience preferred
- Microsoft Defender experience preferred
- Microsoft Intune experience required
- Windows Server administration experience required
- Active Directory administration experience required
- Virtual infrastructure administration experience required
- Endpoint management and device management experience required
- Experience with package deployment, patching, and endpoint security tools required
- Network architecture design and documentation experience required
- Routing, switching, segmentation, firewall, ACL, VLAN, and RADIUS experience required
- Zero-trust security and micro-segmentation experience preferred
- Experience supporting CUI-scoped enclaves preferred
- Classified systems compliance experience required
- SSP and POA&M experience required
- Audit, inspection, vulnerability scan, and audit log review support experience required
- Experience with cybersecurity compliance frameworks similar to CMMC or NIST 800-171 preferred
- Vulnerability scanning experience required
- Incident response, risk assessment, and third-party audit experience preferred
- PowerShell scripting or automation experience preferred
- Experience implementing simple AI solutions using Azure Foundry or Copilot preferred
- Cloud or Microsoft Azure certifications preferred
- Strong troubleshooting and escalation support skills required
- Ability to support ticketing, critical incidents, and outages required
- Ability to mentor junior staff preferred
- Excellent writing skills required
- Strong conceptual thinking and communication skills required
- Strong documentation and organizational skills required
- Ability to work onsite in Brea, CA
- Ability to work standard Monday through Friday hours with after-hours, weekend, or on-call support as needed
- Ability to support a full-time, permanent opportunity
- No sponsorship available
Physical Requirements:
- Ability to sit and work at a computer for extended periods while administering systems, reviewing logs, managing cloud environments, responding to tickets, documenting procedures, and supporting security tasks
- Ability to use hands and fingers for keyboard use, systems administration, configuration, documentation, troubleshooting, and standard IT tasks
- Ability to review system dashboards, cloud consoles, security alerts, compliance documentation, network information, tickets, reports, diagrams, and computer screens for extended periods
- Ability to communicate by phone, email, video meeting, chat, and in person throughout the workday
- Ability to occasionally stand, walk, bend, reach, and move throughout office, IT, server, manufacturing, secure, or classified work areas as needed
- Ability to occasionally lift, carry, or move standard IT equipment, office materials, computers, peripherals, or small hardware components as needed
- Ability to support critical incidents, outages, after-hours needs, weekends, or emergency response situations as required
- Ability to wear required PPE and follow applicable site, IT, security, classified systems, manufacturing, and safety procedures
- Ability to maintain accuracy, professionalism, confidentiality, and attention to detail while supporting secure systems and regulated environments
Salary Range: $120,000 to $170,000/year plus negotiable bonus potential
More information can be found at www.defensesearchusa.com.
\nCompany Description
Defense Search is a specialized recruiting and staffing firm dedicated exclusively to the defense & aerospace industry. We place candidates on a contract, contract-to-hire, and direct hire basis.
Company Description
Defense Search is a specialized recruiting and staffing firm dedicated exclusively to the defense & aerospace industry. We place candidates on a contract, contract-to-hire, and direct hire basis.