Systems Administrator II (Microsoft 365 GCC & GCC High) with Security Clearance

Position Type: Full-Time, Exempt Work Location: Oxnard, CA Pay Info: $95,000 - $120,000 (DOE) Systems Application & Technologies, Inc. (SA-TECH) is a progressive and well-established Department of Defense (DoD) contractor specializing in Range operations and maintenance (O&M); weapons testing; facilities management; aerial, ground and seaborne targets O&M; technical, logistics and other engineering support; systems integration; electronics and communications maintenance services; and a growing cybersecurity business. We are highly focused and, among other efforts, currently operate a dozen active test and/or training ranges for the Army, Air Force and Navy. Our 36-year heritage is founded on supporting complex and diverse DoD programs and we’ve developed a standout reputation for providing the highest quality services, superior workmanship and cost-effective results while achieving complete customer satisfaction. As a U.S. defense contractor providing operations & maintenance, engineering, IT, and logistics services to DoD customers, we operate a modern, cloud-first Microsoft environment built on Microsoft 365 GCC and GCC High, backed by an established, well-documented cybersecurity program aligned to NIST SP 800-171 and CMMC Level 2. We are currently looking to hire a Systems Administrator II to serve as the hands-on operational administrator of our two Microsoft government cloud tenants: an enterprise Microsoft 365 GCC tenant supporting corporate operations, and a Microsoft 365 GCC High enclave where Controlled Unclassified Information (CUI) is processed under NIST SP 800-171 and DFARS requirements. This is a full-time, on-site position at SA-TECH’s Oxnard, CA Operations office. This Level II role reports directly to the Director of IT. You enter as the Tier 2 technical escalation point, with an expected progression to Tier 3 within your first 12-18 months while you master the environment, including mentoring junior IT staff. You will execute administrative work under a mature governance model: changes go through change control, privileged access is just-in-time and audited, and the work you do is captured as assessment-ready evidence. If you take pride in doing systems administration the right way — documented, least-privilege, repeatable — you will recognize this environment as one built for you. What you'll do (other duties may be added as needed): * Microsoft 365 tenant administration (GCC and GCC High) * Administer core workloads across both tenants — Entra ID, Exchange Online, SharePoint Online, OneDrive, and Teams — including user and group lifecycle, licensing, and tenant configuration. * Maintain the separation between the enterprise GCC tenant and the GCC High CUI enclave, following SA-TECH's adopted boundary model and data-handling rules. * Support information-protection configurations (sensitivity labeling, DLP, sharing restrictions) in coordination with the Director of IT and the security operations function. * Identity, access, and privileged administration * Operate a just-in-time, least-privilege administrative model with modern, phishing-resistant authentication — privileged work is time-bound, justified, and audited. * Administer identity and access management across both tenants: authentication policy, conditional access, and the credential lifecycle for users and administrators. * Manage service and special-purpose accounts according to documented configuration baselines and procedures. * Perform account provisioning, deprovisioning, and access changes tied to personnel actions, and support recurring account reconciliation reviews. * Endpoint and device management * Administer Microsoft Intune for company devices — enrollment, configuration baselines, update regimens, and device lifecycle workflows across desktop and mobile platforms. * Follow SA-TECH's dedicated administrative workstation practices for privileged work, and help maintain the supporting configuration baselines. * Coordinate with the security operations function on endpoint protection; monitoring and independent review remain separated from this role by design. * Automation, evidence, and operational discipline * Script and automate administrative work with PowerShell and Microsoft Graph, including against government cloud endpoints. * Execute changes through SA-TECH's change-control process: submit and implement approved change requests, keep configuration baselines current, and document what was done. * Capture and file evidence of administrative work (configuration exports, transcripts, screenshots) to support CMMC Level 2 assessment readiness — evidence capture is built into our procedures, not an afterthought. * Follow, improve, and help author standard operating procedures; propose better ways of doing things through the governance process rather than around it. * Team support * Serve as the Tier 2 escalation point for junior IT staff and provide day-to-day mentoring, progressing to Tier 3 escalation authority. * Support Azure Government services connected to the enclave as the environment evolves. * Mentor more junior IT staff. SA-TECH maintains deliberate separation of duties: governance and approvals, independent security oversight, and operational execution are distinct functions. This role owns execution — performing the administrative and configuration work in both tenants under that governance and oversight. You will have real responsibility and real authority to do the work — with clear limits, clear approvals, and an audit trail that protects you as much as the company. This position is based full-time, on-site at SA-TECH’s Oxnard, CA Operations office. Privileged administration and CUI-related work are performed on-site on SA-TECH-managed equipment in accordance with our data-handling and dedicated administrative workstation practices.  The annual base salary range for this position is $95,000 – $120,000. Actual base pay within this range is determined by job-related factors including relevant experience, skills, certifications, education, and internal equity, consistent with California pay-transparency requirements. SA-TECH also offers a comprehensive benefits package. Work Conditions: * Work will be performed in climate-controlled enclosed buildings.
* Work will include sitting, standing, walking, lifting and reaching.
* The typical work schedule is Monday - Friday, 7am - 4pm, with occasional planned after-hours maintenance windows scheduled through change control.
* You will be working in front of computer screens for most of the day. Requirements Required Education/Experience/Skills: * High School Diploma or equivalent.
* Three years or more (3+) of hands-on systems administration experience in a Microsoft 365 / Entra ID environment.
* Working proficiency with Entra ID (users, groups, roles, Conditional Access), Exchange Online, SharePoint Online/OneDrive, Teams, and Intune.
* PowerShell scripting experience, including Microsoft Graph PowerShell or equivalent administrative automation.
* Understanding of multi-factor authentication, least-privilege administration, and role-based access control concepts.
* Strong documentation habits and the discipline to work within change control and standard operating procedures.
* Clear written and verbal communication, including the ability to explain technical work to non-technical stakeholders and, when needed, to assessors.
* Must possess valid US Drivers’ license; must be able to be insured through SA-TECH's vehicle insurance policy while driving work/government/rental vehicles during working hours, and for the duration of your work employment.
* No security clearance is required.
* All candidates will be required to pass background screening to include SSN, Driver Record, and Criminal Background Investigation.
Preferred Qualifications: * Experience administering Microsoft 365 GCC High and/or GCC, including familiarity with U.S. government cloud endpoints and their differences from commercial M365 would be very beneficial.
* Familiarity with NIST SP 800-171, CMMC Level 2, and DFARS 252.204-7012 obligations in a defense-contractor setting is a plus.
* Experience implementing privileged-access management, phishing-resistant MFA, or dedicated administrative workstation patterns in Microsoft environments would be very helpful.
* Experience supporting compliance assessments or audits (evidence gathering, walkthroughs, interviews) would be beneficial.
* Relevant certifications such as CompTIA Security+, MD-102, MS-102, SC-300, or AZ-104 are preferred.
* Experience with Azure (Azure Government preferred), Microsoft Purview, or Defender-family security tooling is a big plus.
* Prior DoD or federal IT experience — hands-on IT or technical work performed for, or in direct support of, DoD or other federal components (uniformed service, government civilian, or contractor) is an added advantage.
* Formal education — an associate's or bachelor's degree in information technology, computer science, cybersecurity, or a related field, or equivalent professional experience or military technical training is preferred.
* Clearance eligibility — the ability to obtain and maintain a U.S. security clearance should future contract requirements direct it; an active or previously held DoD security clearance is a plus. Supporting Our Warfighters: As a highly regarded and long-established DoD employer, SA-TECH recognizes that our success is indicative of our team members' hard work and dedication towards a common goal… Supporting our Warfighters. Along with unparalleled stability, we have the ingredients for superior performance with a servant leadership mentality that provides an affirmation of purpose and value in a team-oriented positive work environment. As such, we provide a sense of family, competitive pay and employee benefits, along with a strong commitment to the professional development of our workforce and for providing broad career opportunities throughout the United States. SA