Job description
This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible. Koniag IT Systems, LLC a Koniag Government Services company, is seeking a Senior Microsoft Infrastructure Administrator to support KITS and our government customer Washington, DC. The position is remote. This position requires the candidate to be able to obtain a Public Trust. Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement. The Microsoft Infrastructure Administrator (Senior) is a senior technical authority responsible for the administration, security, and sustainment of CLIENT's enterprise Microsoft infrastructure environment. This individual provides expert-level administration and engineering support across Microsoft 365, Azure Government, Microsoft Entra identity, Exchange Online, Microsoft Teams, and endpoint management platforms.
This role requires deep, hands-on expertise across the full Microsoft enterprise stack, the ability to independently resolve complex, cross-domain Microsoft infrastructure problems, and the capacity to lead Microsoft-related projects, integrations, and improvements within CLIENT's enterprise environment. The Senior Microsoft Infrastructure Administrator serves as the primary escalation point for Microsoft infrastructure incidents and provides senior technical guidance to junior Microsoft infrastructure team members.
This individual must be capable of operating autonomously — diagnosing, deciding, and resolving within delegated authority without escalation to government personnel for routine or moderately complex matters — and must demonstrate expert-level mastery of Microsoft enterprise platforms at Federal agency scale.
Key Responsibilities:
Microsoft 365 Administration & Engineering:
Provide expert-level administration, configuration, and engineering support for CLIENT's Microsoft 365 environment, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and associated services
Lead planning and execution of Microsoft 365 service updates, feature rollouts, and configuration changes in accordance with ITIL 4 change management practices
Monitor Microsoft 365 service health, performance, and security posture, taking proactive action to address issues before they impact end users
Develop and maintain Microsoft 365 configuration standards, policies, and governance documentation
Support Microsoft 365 license management and optimization in coordination with the Asset/Financial Management team
Stay current on Microsoft 365 roadmap updates and recommend improvements aligned with CLIENT's mission and security requirements
Azure Government & Entra Identity Administration:
Administer and engineer CLIENT's Microsoft Azure Government environment, including Azure Active Directory (Entra ID), conditional access policies, identity governance, and privileged identity management
Lead integration and administration of Microsoft Entra identity services, including IAL2 identity assurance, multi-factor authentication, and single sign-on configurations
Support Zero Trust Architecture implementation through proper configuration of Entra identity, conditional access, and least-privilege access controls
Manage Azure Government resource administration, including subscriptions, resource groups, role-based access control (RBAC), and policy enforcement
Coordinate with the Infrastructure and Platform Operations team on Azure-hosted workloads and cloud infrastructure management
Support FedRAMP compliance for Azure Government services in alignment with CLIENT cybersecurity policies
Endpoint Management & Security:
Lead administration and engineering of Microsoft Endpoint Manager (Intune) for device management, compliance policy enforcement, and application deployment across CLIENT's endpoint fleet
Manage Microsoft Defender for Endpoint configuration, policy management, and incident response coordination
Develop and maintain endpoint configuration baselines, compliance policies, and security standards aligned with NIST SP 800-53 and CLIENT cybersecurity requirements
Support patch management and software deployment processes for Windows endpoints through Intune and related tooling
Coordinate with the NOC and Service Desk teams on endpoint-related incidents and escalations
Exchange Online & Teams Administration:
Administer and engineer Exchange Online, including mail flow, transport rules, anti-spam/anti-phishing policies, and mailbox management
Support Microsoft Teams administration, including Teams policies, governance, meeting configurations, and integration with A/V systems
Manage email security configurations, including DMARC, DKIM, SPF, and Microsoft Defender for Office 365
Coordinate with the A/V Lead Systems Integrator on Microsoft Teams Rooms integration and support
Troubleshoot and resolve complex Exchange Online and Teams incidents, serving as the senior escalation point for Microsoft messaging and collaboration issues
Security, Compliance & Governance:
Ensure all Microsoft infrastructure configurations comply with FISMA, NIST SP 800-53, FedRAMP, and CLIENT cybersecurity policies
Administer Microsoft Purview compliance solutions, including data loss prevention, information protection, and compliance management
Support implementation and maintenance of Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09) across Microsoft platforms
Apply least-privilege and separation-of-duties principles to all Microsoft infrastructure configurations and access management
Support security assessment activities, audit evidence collection, and remediation of Microsoft-related findings
Promptly report suspected or confirmed security incidents involving Microsoft infrastructure per CLIENT procedures
Incident Management & Escalation:
Serve as the senior escalation point for complex Microsoft infrastructure incidents and problems
Independently diagnose and resolve complex, cross-domain Microsoft infrastructure issues without escalation to government personnel for subject-matter knowledge
Manage the Microsoft infrastructure incident lifecycle in the Government ITSM platform, ensuring accurate and complete records
Coordinate with the NOC, Service Desk, network, and infrastructure teams to resolve cross-functional Microsoft incidents
Develop and maintain Microsoft infrastructure troubleshooting runbooks, escalation procedures, and knowledge base articles
Team Leadership & Mentoring:
Provide senior technical guidance and mentoring to junior Microsoft Infrastructure Administrators
Assign and prioritize Microsoft infrastructure work items in alignment with Sprint commitments and operational priorities
Ensure team members are cross-trained and capable of supporting all Microsoft infrastructure functions
Conduct quality reviews of team members' work to ensure accuracy, completeness, and adherence to standards
Support recruitment, onboarding, and professional development of Microsoft infrastructure team personnel
Required Qualifications:
Experience:
Minimum 6–8 years of hands-on enterprise Microsoft infrastructure administration and engineering experience
Demonstrated experience administering and engineering Microsoft 365, Azure Government, and Microsoft Entra in a Federal or comparable enterprise environment
Proven experience with Microsoft endpoint management using Microsoft Intune and Microsoft Defender for Endpoint
Experience implementing and maintaining Zero Trust Architecture principles across Microsoft platforms
Demonstrated experience in a Federal or private-sector enterprise environment of comparable scale, complexity, and security posture
Proven ability to independently resolve complex, cross-domain Microsoft infrastructure problems at the enterprise level
Experience with FedRAMP-authorized Microsoft services and Federal security compliance requirements
Technical Expertise:
• Expert-level proficiency in:
Microsoft 365 administration (Exchange Online, SharePoint, OneDrive, Teams)
Microsoft Azure Government and Azure Active Directory (Entra ID)
Microsoft Entra identity governance, conditional access, and privileged identity management
Microsoft Endpoint Manager (Intune) — device management and compliance
Microsoft Defender for Endpoint and Defender for Office 365
Microsoft Purview compliance solutions
Exchange Online mail flow, security, and administration
Role-based access control (RBAC) and least-privilege access management
• Strong working knowledge of:
Zero Trust Architecture and OMB M-22-09 implementation
NIST SP 800-53 security controls as applied to Microsoft platforms
FedRAMP requirements for Microsoft GCC High or Azure Government
PowerShell scripting for Microsoft 365 and Azure administration
ITSM platforms (e.g., ServiceNow)
ITIL 4 change and incident management practices
Enterprise network fundamentals relevant to Microsoft infrastructure
Required Certifications (Must be current and unexpired throughout performance):
Microsoft Certified: Microsoft 365 Administrator Expert (MS-102) (required)
Microsoft Certified: Azure Administrator Associate (AZ-104) (required)
Microsoft Certified: Identity and Access Administrator Associate (SC-300) (required)
• Additional preferred certifications:
Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
Microsoft Certified: Security Operations Analyst Associate (SC-200)
Microsoft Certified: Information Protection Administrator Associate (SC-400)
CompTIA Security+ or equivalent
Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at or by calling 703-488-9377 to request accommodations.
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.