Astro-Mechanica Senior Systems Administrator at Astro-Mechanica manages and secures Microsoft 365 GCC High tenant and network infrastructure. The role includes implementing CMMC 2.0 controls and ensuring ITAR/EAR compliance across systems.
Responsibilities
Administer and secure our Microsoft 365 GCC High tenant, including Exchange, SharePoint, OneDrive, Teams and Entra ID
Manage identity and access through Okta, including SSO, MFA, conditional access and user lifecycle automation
Build and maintain device policies in Microsoft Intune and Jamf: configuration profiles, compliance, patching, encryption and app deployment
Design, deploy and maintain our Ubiquiti and Cisco network infrastructure, including switching, wireless, firewalls and VPN
Manage Windows, macOS and Linux servers and services, both on-premises and in AWS GovCloud or Azure Government
Implement and monitor CMMC 2.0 controls, maintain the System Security Plan (SSP) and POA&M, and collect evidence for assessments
Ensure systems that store or process controlled technical data meet ITAR and EAR requirements
Own backups, disaster recovery, logging and monitoring, and work with our SIEM to investigate and respond to security events
Automate routine work with PowerShell, Bash or Python
Lead migrations and rollouts of new tools, from planning and testing through user communication
Serve as the escalation point for the help desk, and mentor technicians on complex issues
Write and maintain system documentation, runbooks, and configuration standards
Qualification
Experience administering a CMMC 2Working knowledge of CMMC 2Clear communication skills
Required
You’re the engineer who keeps our systems secure, reliable and running smoothly behind the scenes. You design things properly the first time, automate anything you do twice, and document everything so others can follow. You’re at home in Microsoft 365, identity platforms, MDM, servers and networks, and you can move between Windows, macOS and Linux without missing a beat. You’ve worked in regulated environments, and you understand that CMMC, ITAR and EAR requirements have to be built into every system from the start. You’re also a strong collaborator: you work closely with the help desk, explain your decisions clearly, and enjoy helping engineers get what they need while keeping our environment compliant.
5+ years of experience as a systems administrator or systems engineer
Hands-on experience administering Microsoft 365 GCC and GCC High
3+ years administering Microsoft Intune and Jamf MDM platforms
Strong Windows and macOS administration experience; Linux experience is a huge plus
Experience with identity platforms such as Okta and Entra ID, including SSO and MFA
Experience designing and managing Ubiquiti and Cisco networks
Experience administering a CMMC 2.0 compliant environment
Working knowledge of CMMC 2.0, NIST SP 800-171 and ITAR/EAR compliance requirements
Experience with AWS GovCloud or Azure Government is a strong plus
Scripting and automation skills in PowerShell, Bash or Python
Clear communication skills, and an enjoyment of working with others across the company