IT System Administrator (Fuse Fed)

We're looking for an IT Administrator to support a growing team delivering testing services to DoD, USG, and commercial clients. This is a dual-scope role: you'll own day-to-day IT administration and help desk support within our Microsoft 365 GCC High environment, and you'll also own the governance, risk, and compliance (GRC) documentation (System Security Plan (SSP), Plan of Action and Milestones (POA&M), and control-implementation evidence) that supports our NIST SP 800-171 / CMMC program.

Responsibilities

Administer the Microsoft 365 GCC High tenant, including user identity, mailboxes, licensing, and access management; Manage and support a mixed fleet of macOS and Windows endpoints, including device provisioning, patching, and compliance configuration; Provide help desk support and troubleshooting for end users, resolving hardware, software, and connectivity issues; Manage user onboarding and offboarding, ensuring timely and accurate provisioning/deprovisioning of accounts and access; Serve as the local point of contact for the managed security services provider (MSSP), coordinating on SOC monitoring, alert triage, and log/data access needed for 24/7 security monitoring; Own and maintain the System Security Plan (SSP) and Plan of Action and Milestones (POA&M) for the NIST SP 800-171 / CMMC program; Collect, organize, and maintain control-implementation evidence across technical, administrative, and physical controls; Translate MSSP guidance and assessment findings into documentation updates and remediation tracking; Support policy development, review, and lifecycle management (drafting, versioning, approval tracking); Prepare documentation and evidence packages ahead of the mock assessment and final CMMC assessment; Track remediation items to closure and maintain an audit trail of compliance activities; Assist with scoping and boundary documentation for the CUI environment, including separation from the parent company's systems

Requirements

Hands-on administrative experience with Microsoft 365 GCC High (or GCC) environments; Working knowledge of NIST SP 800-171 controls, both as applied to IT administration and as documented for CMMC compliance; Experience managing and supporting both macOS and Windows endpoints in a business environment; Demonstrated help desk/end-user support and troubleshooting experience; Strong written documentation skills, able to translate technical controls into clear, assessor-ready language (SSP, POA&M, or equivalent); Experience organizing and maintaining audit or compliance evidence; Ability to obtain a Top Secret (TS) security clearance (U.S. citizenship required); Must be a U.S. citizen, consistent with clearance eligibility and applicable export-control/CUI handling requirements; Willingness to undergo a background investigation as part of the security clearance process; Ability to handle Controlled Unclassified Information (CUI) and comply with applicable ITAR/export-control obligations; Ability to work onsite in Albuquerque, NM

Nice to have

Experience administering or supporting classified enclave networks; Direct experience supporting a CMMC Level 2 assessment (mock or final) or a NIST SP 800-171 self-assessment; Experience working with a C3PAO or third-party assessor; Experience with endpoint management tools (Intune or similar) in a compliance-driven environment; Prior experience supporting DoD, USG, or other federal contract environments; Relevant certifications (Security+, Microsoft 365 Certified: Administrator Expert, CMMC Certified Professional, CISA, or similar)

Benefits

Medical, dental, and vision coverage; Relocation assistance for roles that require it; Flexible time off with no accrual tracking; 2 weeks of paid time off built into the end of each year (subject to team and business needs); Supportive leave of absence policies; Paid leave for new parents