Designs, administers, secures, and supports hybrid cloud and on-premises enterprise infrastructure. Responsibilities include Microsoft 365 and Azure administration, Intune endpoint management, Aruba networking, Fortinet firewalls, Windows Server and Active Directory support, CMMC compliance controls, vulnerability remediation, migrations, site deployments, incident escalation, vendor coordination, and technical documentation.
Company Overview
By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Position OverviewThe Systems Engineer II is responsible for the design, implementation, maintenance, security, and ongoing support of enterprise infrastructure systems across multiple business locations.
This role oversees hybrid cloud and on-premises environments, including Microsoft 365, Azure, GCC High, network infrastructure, endpoint management platforms, security controls, and compliance initiatives. The engineer serves as a key technical authority for infrastructure modernization, incident escalation, system integrations, and cybersecurity efforts.
Work Environment & Schedule
- Hybrid Location: Combination of remote work and scheduled on-site support across regional facilities and offices.
- Maintenance Windows: Participation in scheduled after-hours maintenance, system upgrades, and critical incident response duties.
- Compliance Culture: Strict adherence to corporate security baselines, audit controls, and federal regulatory compliance workflows.
Cloud & Microsoft 365 Architecture
- Tenant & Identity Management: Administer Microsoft 365 commercial and GCC High environments. Support Microsoft Entra ID (Azure Active Directory) and configure granular Conditional Access policies.
- Infrastructure & Virtualization: Support Azure cloud infrastructure administration, migration projects, and manage Azure Virtual Desktop (AVD) host pools and session hosts.
- Endpoint Compliance: Implement and maintain Microsoft Intune device management policies, compliance baselines, app deployments, and troubleshoot enrollment issues.
Network Infrastructure & Security
- Wireless & Switching: Administer enterprise wireless infrastructure utilizing Aruba technologies and manage the Aruba Central cloud management platform.
- Firewall & Perimeter Defense: Maintain Fortinet firewall infrastructure, security policies, IPSec VPN tunnels, and Azure networking integrations.
- Network Modernization: Support enterprise routing, switching, DNS/DHCP, ISP migrations, facility relocations, and new site network deployments.
Security, Compliance & Risk Remediation
- Compliance Controls: Participate in cybersecurity compliance initiatives, directly implementing technical controls supporting CMMC Level 2 audit and accreditation requirements.
- Vulnerability Management: Monitor CVE announcements, conduct patch management cycles, and coordinate remediation activities stemming from third-party penetration testing and vulnerability scans.
Systems Administration & Project Delivery
- Server & Directory Services: Support Windows Server environments, Active Directory optimization, GPO policies, asset inventory, and CMDB record accuracy.
- Project Execution: Lead or assist with office buildouts, organizational acquisitions, tenant-to-tenant migrations, and vendor coordination.
- Operational Support: Perform Tier 2/3 root-cause analysis, provide scheduled after-hours support for critical maintenance windows, and author comprehensive Standard Operating Procedures (SOPs).
Core Behavioral Competencies
Analytical Problem Solving: Strong root-cause diagnostic mindset for resolving complex, multi-layered IT infrastructure incidents.
Cross-Functional Collaboration: Ability to work effectively across IT, cybersecurity teams, executive stakeholders, and third-party vendors.
Technical Communication: Clear verbal and written articulation of technical concepts for both technical teams and non-technical end users.
- 3–5+ years in systems and network engineering.
- Proficiency in M365, GCC High, Azure, Entra ID, and Intune.
- Hands-on experience with Fortinet Firewalls and Aruba Wireless / Central.
- Solid TCP/IP networking, VPN, DNS, DHCP, and switching knowledge.
- Proven technical documentation and troubleshooting skills.
- Bachelor's degree in Computer Science, IT, or equivalent experience.
- Experience supporting defense contractors or government regulated environments (NIST 800-171 / CMMC).
- Microsoft AZ-104, CompTIA Security+, Fortinet NSE 4/5, or Aruba ACMA/ACMP.
Similar Jobs
Information Technology • Consulting
Provide internal and customer-facing managed infrastructure support, including monitoring, incident response, systems administration, network troubleshooting, Azure and virtualization administration, escalation management, documentation, and change activities. Resolve incidents within SLA targets, participate in root cause analysis, maintain infrastructure records, and use PowerShell automation to improve operations. The role also serves as a technical escalation point and mentors junior engineers.
Top Skills:
Active DirectoryAzureAzure BackupAzure MonitorAzure Site RecoveryCiscoConnectwise PsaDhcpDnsFirewallsGroup PolicyHyper-VIt GlueLog AnalyticsLogicmonitorMerakiMicrosoft 365NinjaonePowershellRoutingSwitchingVmware VsphereVpnWindows ServerWireless
Energy
Leads power system studies and grid interconnection projects for utility-scale solar PV and battery storage systems. Performs short-circuit, arc-flash, load-flow, grounding, harmonic, ampacity, and power-quality analyses; designs collection systems; specifies equipment; prepares reports and presentations; manages project scope, schedules, and budgets; supports clients; and mentors junior engineers.
Top Skills:
Battery Energy Storage Systems (Bess)CdegsCymcapEtapPower Distribution SystemsPslfPss/EPythonSolar Photovoltaic (Pv) SystemsTransformersTransmission Systems
Transportation • Energy • Utilities • Industrial
Lead advanced electric power systems studies covering load flow, transient stability, short-circuit, electromagnetic transients, grid modernization, renewable resources, and T&D equipment applications. Manage projects, develop models and software tools, analyze and visualize data, prepare technical reports and proposals, support generator testing and validation, train colleagues, and present findings to customers and industry organizations. The role also contributes to business development, technical publications, standards application, and equipment specifications.
Top Skills:
AspenAtpBattery Energy StorageCC++CapeCdegsCigreConverter-Based ResourcesCymeDigsilentDsa ToolsEmtpEmtp-RvEtapFactsHvdcIecIeeeJavaMapsMatlabExcelMicrosoft PowerpointMicrosoft WordMilsoftNercNescPerlPlexosPowerworldPromodPscadPslfPss/EPythonSynergi
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
