System Administrator, SeniorFull-Time, APG, MDTop Secret/SCI ClearanceJob Description: Cloud & Subscription ManagementAzure Government Administration: Administer and sustain secure, multi-subscription environments strictly within Azure Government, including dedicated experience navigating cArmy and the Enterprise Cloud Management Agency (ECMA) frameworks.Modern Deployment & Connectivity: Deploy and manage virtual machines, storage, networking components, and identity services. Must possess a strong understanding of Remote Desktop Protocol (RDP) mechanics and the secure protocols required to connect and execute administrative actions using elevated/privileged accounts.Application Hosting: Deploy and maintain application workloads (including Linux-based workloads) utilizing modern hosting architectures such as Containers and Azure App Services (utilizing OneDeploy with .zip or .jar packages). Security, Compliance, & Troubleshooting (Core Focus)Vulnerability & Compliance Management: Actively monitor, document, and accurately report Information Assurance Vulnerability Management (IAVM) compliance. Execute and maintain STIG checklists to ensure all infrastructure meets rigorous hardening standards.Operational Directives: Rapidly analyze, coordinate, and execute technical actions in response to Cyber Tasking Orders (CTOs).Advanced Troubleshooting: Diagnose and resolve complex system outages. Must be proficient in analyzing network, firewall, and proxy traffic using packet capture (PCAP) tools (e.g., Wireshark) to isolate connectivity issues.Above-Baseline Software Updates: Perform and validate above-baseline software updates and configurations. Routine, baseline system maintenance and patching are automated via a Managed Service Provider (MSP), allowing this role to focus on high-impact deployment tasks. Scripting & AutomationCommand Line Proficiency: Utilize Azure CLI and PowerShell to query resources, automate repetitive administrative tasks, and streamline cloud operations (Note: Infrastructure as Code (IaC) is not utilized for standard deployments). Identity & Access Management (IAM)Deep RBAC & Entra ID Expertise: Maintain and troubleshoot identity, access, and directory services utilizing Microsoft Entra ID .Complex Group Authorization: Demonstrate a deep conceptual understanding of Role-Based Access Control (RBAC), security groups, and nested permission structures. Candidates must be able to navigate and troubleshoot complex environments where roles are dynamically mapped to security groups through custom, obfuscated web application authorization systems. Operations & Professional SkillsService Desk Integration: Manage, document, and resolve technical issues systematically through an enterprise ticketing system/service desk.Communication & Collaboration: Deliver clear, concise, and professional technical communications within the team and directly to end-users/customers. Requirements & CertificationsClearance: Active Secret or Top Secret security clearance.Core Certifications: Must possess Security+ (or equivalent IAT Level II certification) AND a relevant cloud environment certification (e.g., AZ-104 Azure Administrator, SC-300 Identity and Access Administrator, or equivalent) or 5 years relevant experience