Systems Administrator – A&D CUI

Skills Required:

• 
  10 years’ experience as a System Administrator supporting highly secure Microsoft workloads
• 5 years’ experience supporting MSFT 365 workloads; SharePoint Online, Exchange Online, OneDrive, Microsoft Teams, Microsoft Defender, Intune
• Deep understanding of MSFT Gov Cloud standards DFARS 7012, NIST-800-171, and CMMC 2.0
• Deep understanding of Azure AD & Conditional Access controls
• Experience managing secure IAM practices including multi-factor authentication (MFA), role-based access control (RBAC), and privileged identity management.
• Experience with managing and implementing Entra ID governance. Thorough understanding and proven experience for maintaining for user life cycle, entitlement and access management policies and access certification using Entra ID governance platform.
• Experience with traditional and modern IT processes, tools and solutions (change management is key)
• Provides timely resolution to complex IT issues, including working with vendors on escalated issues that cannot be resolved immediately
• Strong scientific method and technical know-how to troubleshoot errors to resolution in the most efficient manner possible
• Superior written and oral communications
• Knowledgebase documentation skills
• Ability to work independently, as well as part of a global support team with minimal supervision. Experience of working with cross-geographic teams
• Skills in compliance documentation, audit preparation, and cross-functional collaboration

Skills Preferred:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• CompTIA Cybersecurity Analyst (CySA )

Specific Duties & Responsibilities

• Day to day support for MSFT Gov Cloud M365 tenant
• Implementation and Configuration of tenant controls and security standards in line with GCC
• Assist in the remediation of security related vulnerabilities across the Collaboration workloads
• Ensuring that IT Service Level Agreements are met
• Assist in the development of training documentation and knowledge

Participate in Weekly Team Meetings

͏

Do

• Ensuring customer centricity by providing apt cybersecurity

• Monitoring and safeguarding the log sources and security access
• Planning for disaster recovery in the event of any security breaches
• Monitor for attacks, intrusions and unusual, unauthorized or illegal activity
• Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems
• Conduct security assessments, risk analysis and root cause analysis of security incidents
• Handling incidents escalated by the L1 team in 24x7 rotational shifts
• Use advanced analytics tools to determine emerging threat patterns and vulnerabilities
• Completing all tactical security operations tasks associated with this engagement.
• Analyses all the attacks and come up with remedial attack analysis
• Conduct detailed analysis of incidents and create reports and dashboards

• Stakeholder coordination & audit assistance

• Liaise with stakeholders in relation to cyber security issues and provide future recommendations
• Maintain an information security risk register and assist with internal and external audits relating to information security
• Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
• Advice and guidance to employees on issues such as spam and unwanted or malicious emails

͏

Deliver

͏

͏