Senior System Engineer
- Falls Church
- |8 years of exp
- |Full Time
In office - WFH flexibility
Not Available
About the job
About us:Creative Information Technology Inc (CITI) is an esteemed IT enterprise renowned for its exceptional customer service and innovation. We serve both government and commercial sectors, offering a range of solutions such as Healthcare IT, Human Services, Identity Credentialing, Cloud Computing, and Big Data Analytics. With clients in the US and abroad, we hold key contract vehicles including GSA IT Schedule 70, NIH CIO-SP3, GSA Alliant, and DHS-Eagle II.Join us in driving growth and seizing new business opportunities!:Location: Hybrid (U.S.) with International TravelClearance Required: Active Secret Clearance (Required)Preferred Clearance: Top Secret (TS)Employment Type: Full-TimeTravel Requirement: Some travel requiredPosition OverviewWe are seeking an experienced Senior Systems Engineer to support the deployment, integration, and sustainment of mission-critical systems. The selected candidate will provide hands-on engineering expertise across both Microsoft Azure cloud environments and on-premises infrastructure, ensuring secure, scalable, and highly available solutions that meet stringent security and operational requirements.The ideal candidate possesses deep technical knowledge of Azure security, hybrid infrastructure, enterprise identity management, system integration, and secure implementation practices within highly regulated government or defense environments.Key ResponsibilitiesInfrastructure EngineeringDesign, deploy, configure, and maintain hybrid infrastructure environments spanning Microsoft Azure and on-premises data centers.Support implementation of systems across development, test, staging, and production environments.Develop and maintain infrastructure architecture, deployment diagrams, and engineering documentation.Configure and manage Windows Server environments, Active Directory, DNS, DHCP, PKI, and virtualization platforms.Azure Cloud EngineeringDesign and implement secure Azure landing zones and cloud architectures.Deploy and manage Azure services including:Azure Virtual MachinesAzure Key VaultAzure Entra ID (Azure AD)Azure MonitorAzure FirewallMicrosoft Defender for CloudAzure Front DoorAzure StorageAzure Application GatewayImplement security controls aligned with government security requirements.Support cloud migration and hybrid connectivity initiatives.Security EngineeringImplement and manage Zero Trust and defense-in-depth security principles.Configure Azure security services, identity protection, privileged access controls, and role-based access controls (RBAC).Support integration with PKI, HSM, smart card, token-based authentication, and certificate management solutions.Conduct security assessments, vulnerability remediation, and compliance validation activities.Support incident response, forensic investigations, and system hardening efforts.Systems IntegrationIntegrate enterprise systems including:Active DirectoryLDAPPKI InfrastructureMicrosoft Configuration Manager (SCCM)SplunkSQL ServerIdentity repositories and third-party APIsOperational SupportTroubleshoot complex infrastructure and security issues.Participate in system testing, performance tuning, and disaster recovery exercises.Provide Tier III engineering support during implementation and operational phases.Create standard operating procedures, technical runbooks, and deployment guides.Required Qualifications8+ years of experience as a Systems Engineer, Infrastructure Engineer, or Cloud Engineer.5+ years of hands-on experience designing and supporting Microsoft Azure environments.Strong experience managing hybrid cloud and on-premises infrastructure.Expertise in:Microsoft AzureWindows ServerActive DirectoryAzure Entra IDPowerShell scriptingNetworking and security technologiesExperience implementing secure architectures in government, defense, or regulated environments.Active Secret Clearance required.Willingness and ability to travel internationally.Preferred QualificationsActive Top Secret (TS) Clearance.Experience with Identity and Access Management (IAM) platforms.Familiarity with:PKI and certificate lifecycle managementHardware Security Modules (HSM)Azure Landing ZonesMicrosoft Defender SuiteSplunkDevSecOps practicesExperience working in classified or mission-critical operational environments.Desired Personal AttributesStrong analytical and troubleshooting skills.Excellent communication and customer engagement abilities.Ability to work independently in fast-paced and mission-critical environments.Strong documentation and technical writing skills.How to Apply:To apply for the Senior System Engineer role, please submit your resume to [email protected] will be reviewed on a rolling basis until the position is filled. We look forward to reviewing your application.
