Job description

Applications for this position will be accepted through 11/9/26 Koniag IT Systems, LLC a Koniag Government Services company, is seeking a Senior Microsoft Infrastructure Administrator to support KITS and our government customer Washington, DC. The position is remote. This position requires the candidate to be able to obtain a Public Trust. Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement. The Microsoft Infrastructure Administrator (Senior) is a senior technical authority responsible for the administration, security, and sustainment of CLIENT's enterprise Microsoft infrastructure environment. This individual provides expert-level administration and engineering support across Microsoft 365, Azure Government, Microsoft Entra identity, Exchange Online, Microsoft Teams, and endpoint management platforms. This role requires deep, hands-on expertise across the full Microsoft enterprise stack, the ability to independently resolve complex, cross-domain Microsoft infrastructure problems, and the capacity to lead Microsoft-related projects, integrations, and improvements within CLIENT's enterprise environment. The Senior Microsoft Infrastructure Administrator serves as the primary escalation point for Microsoft infrastructure incidents and provides senior technical guidance to junior Microsoft infrastructure team members. This individual must be capable of operating autonomously — diagnosing, deciding, and resolving within delegated authority without escalation to government personnel for routine or moderately complex matters — and must demonstrate expert-level mastery of Microsoft enterprise platforms at Federal agency scale. Key Responsibilities: Microsoft 365 Administration & Engineering: Provide expert-level administration, configuration, and engineering support for CLIENT's Microsoft 365 environment, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and associated services Lead planning and execution of Microsoft 365 service updates, feature rollouts, and configuration changes in accordance with ITIL 4 change management practices Monitor Microsoft 365 service health, performance, and security posture, taking proactive action to address issues before they impact end users Develop and maintain Microsoft 365 configuration standards, policies, and governance documentation Support Microsoft 365 license management and optimization in coordination with the Asset/Financial Management team Stay current on Microsoft 365 roadmap updates and recommend improvements aligned with CLIENT's mission and security requirements Azure Government & Entra Identity Administration: Administer and engineer CLIENT's Microsoft Azure Government environment, including Azure Active Directory (Entra ID), conditional access policies, identity governance, and privileged identity management Lead integration and administration of Microsoft Entra identity services, including IAL2 identity assurance, multi-factor authentication, and single sign-on configurations Support Zero Trust Architecture implementation through proper configuration of Entra identity, conditional access, and least-privilege access controls Manage Azure Government resource administration, including subscriptions, resource groups, role-based access control (RBAC), and policy enforcement Coordinate with the Infrastructure and Platform Operations team on Azure-hosted workloads and cloud infrastructure management Support FedRAMP compliance for Azure Government services in alignment with CLIENT cybersecurity policies Endpoint Management & Security: Lead administration and engineering of Microsoft Endpoint Manager (Intune) for device management, compliance policy enforcement, and application deployment across CLIENT's endpoint fleet Manage Microsoft Defender for Endpoint configuration, policy management, and incident response coordination Develop and maintain endpoint configuration baselines, compliance policies, and security standards aligned with NIST SP 800-53 and CLIENT cybersecurity requirements Support patch management and software deployment processes for Windows endpoints through Intune and related tooling Coordinate with the NOC and Service Desk teams on endpoint-related incidents and escalations Exchange Online & Teams Administration: Administer and engineer Exchange Online, including mail flow, transport rules, anti-spam/anti-phishing policies, and mailbox management Support Microsoft Teams administration, including Teams policies, governance, meeting configurations, and integration with A/V systems Manage email security configurations, including DMARC, DKIM, SPF, and Microsoft Defender for Office 365 Coordinate with the A/V Lead Systems Integrator on Microsoft Teams Rooms integration and support Troubleshoot and resolve complex Exchange Online and Teams incidents, serving as the senior escalation point for Microsoft messaging and collaboration issues Security, Compliance & Governance: Ensure all Microsoft infrastructure configurations comply with FISMA, NIST SP 800-53, FedRAMP, and CLIENT cybersecurity policies Administer Microsoft Purview compliance solutions, including data loss prevention, information protection, and compliance management Support implementation and maintenance of Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09) across Microsoft platforms Apply least-privilege and separation-of-duties principles to all Microsoft infrastructure configurations and access management Support security assessment activities, audit evidence collection, and remediation of Microsoft-related findings Promptly report suspected or confirmed security incidents involving Microsoft infrastructure per CLIENT procedures Incident Management & Escalation: Serve as the senior escalation point for complex Microsoft infrastructure incidents and problems Independently diagnose and resolve complex, cross-domain Microsoft infrastructure issues without escalation to government personnel for subject-matter knowledge Manage the Microsoft infrastructure incident lifecycle in the Government ITSM platform, ensuring accurate and complete records Coordinate with the NOC, Service Desk, network, and infrastructure teams to resolve cross-functional Microsoft incidents Develop and maintain Microsoft infrastructure troubleshooting runbooks, escalation procedures, and knowledge base articles Team Leadership & Mentoring: Provide senior technical guidance and mentoring to junior Microsoft Infrastructure Administrators Assign and prioritize Microsoft infrastructure work items in alignment with Sprint commitments and operational priorities Ensure team members are cross-trained and capable of supporting all Microsoft infrastructure functions Conduct quality reviews of team members' work to ensure accuracy, completeness, and adherence to standards Support recruitment, onboarding, and professional development of Microsoft infrastructure team personnel Required Qualifications: Experience: Minimum 6–8 years of hands-on enterprise Microsoft infrastructure administration and engineering experience Demonstrated experience administering and engineering Microsoft 365, Azure Government, and Microsoft Entra in a Federal or comparable enterprise environment Proven experience with Microsoft endpoint management using Microsoft Intune and Microsoft Defender for Endpoint Experience implementing and maintaining Zero Trust Architecture principles across Microsoft platforms Demonstrated experience in a Federal or private-sector enterprise environment of comparable scale, complexity, and security posture Proven ability to independently resolve complex, cross-domain Microsoft infrastructure problems at the enterprise level Experience with FedRAMP-authorized Microsoft services and Federal security compliance requirements Technical Expertise: Expert-level proficiency in: Microsoft 365 administration (Exchange Online, SharePoint, OneDrive, Teams) Microsoft Azure Government and Azure Active Directory (Entra ID) Microsoft Entra identity governance, conditional access, and privileged identity management Microsoft Endpoint Manager (Intune) — device management and compliance Microsoft Defender for Endpoint and Defender for Office 365 Microsoft Purview compliance solutions Exchange Online mail flow, security, and administration Role-based access control (RBAC) and least-privilege access management Strong working knowledge of: Zero Trust Architecture and OMB M-22-09 implementation NIST SP 800-53 security controls as applied to Microsoft platforms FedRAMP requirements for Microsoft GCC High or Azure Government PowerShell scripting for Microsoft 365 and Azure administration ITSM platforms (e.g., ServiceNow) ITIL 4 change and incident management practices Enterprise network fundamentals relevant to Microsoft infrastructure Required Certifications (Must be current and unexpired throughout performance): Microsoft Certified: Microsoft 365 Administrator Expert (MS-102) (required) Microsoft Certified: Azure Administrator Associate (AZ-104) (required) Microsoft Certified: Identity and Access Administrator Associate (SC-300) (required) Additional preferred certifications: Microsoft Certified: Azure Solutions Architect Expert (AZ-305) Microsoft Certified: Security Operations Analyst Associate (SC-200) Microsoft Certified: Information Protection Administrator Associate (SC-400) CompTIA Security+ or equivalent Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment. The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations. Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com. Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Requirements

Must-haves

Applications for this position will be accepted through 11/9/26
Provide expert-level administration, configuration, and engineering support for CLIENT's Microsoft 365 environment, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and associated services
Lead planning and execution of Microsoft 365 service updates, feature rollouts, and configuration changes in accordance with ITIL 4 change management practices
Monitor Microsoft 365 service health, performance, and security posture, taking proactive action to address issues before they impact end users
Develop and maintain Microsoft 365 configuration standards, policies, and governance documentation
Support Microsoft 365 license management and optimization in coordination with the Asset/Financial Management team
Stay current on Microsoft 365 roadmap updates and recommend improvements aligned with CLIENT's mission and security requirements
Azure Government & Entra Identity Administration:
Administer and engineer CLIENT's Microsoft Azure Government environment, including Azure Active Directory (Entra ID), conditional access policies, identity governance, and privileged identity management
Lead integration and administration of Microsoft Entra identity services, including IAL2 identity assurance, multi-factor authentication, and single sign-on configurations
Support Zero Trust Architecture implementation through proper configuration of Entra identity, conditional access, and least-privilege access controls
Manage Azure Government resource administration, including subscriptions, resource groups, role-based access control (RBAC), and policy enforcement
Coordinate with the Infrastructure and Platform Operations team on Azure-hosted workloads and cloud infrastructure management
Support FedRAMP compliance for Azure Government services in alignment with CLIENT cybersecurity policies
Lead administration and engineering of Microsoft Endpoint Manager (Intune) for device management, compliance policy enforcement, and application deployment across CLIENT's endpoint fleet
Manage Microsoft Defender for Endpoint configuration, policy management, and incident response coordination
Develop and maintain endpoint configuration baselines, compliance policies, and security standards aligned with NIST SP 800-53 and CLIENT cybersecurity requirements
Support patch management and software deployment processes for Windows endpoints through Intune and related tooling
Coordinate with the NOC and Service Desk teams on endpoint-related incidents and escalations
Administer and engineer Exchange Online, including mail flow, transport rules, anti-spam/anti-phishing policies, and mailbox management
Support Microsoft Teams administration, including Teams policies, governance, meeting configurations, and integration with A/V systems
Manage email security configurations, including DMARC, DKIM, SPF, and Microsoft Defender for Office 365
Coordinate with the A/V Lead Systems Integrator on Microsoft Teams Rooms integration and support
Troubleshoot and resolve complex Exchange Online and Teams incidents, serving as the senior escalation point for Microsoft messaging and collaboration issues

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureagile

Platform: dayforce
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Parental Leave

Professional Development