Systems Engineer II

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

The Systems Engineer II is responsible for the design, implementation, maintenance, security, and ongoing support of enterprise infrastructure systems across multiple business locations.

This role oversees hybrid cloud and on-premises environments, including Microsoft 365, Azure, GCC High, network infrastructure, endpoint management platforms, security controls, and compliance initiatives. The engineer serves as a key technical authority for infrastructure modernization, incident escalation, system integrations, and cybersecurity efforts.

• Hybrid Location: Combination of remote work and scheduled on-site support across regional facilities and offices.
• Maintenance Windows: Participation in scheduled after-hours maintenance, system upgrades, and critical incident response duties.
• Compliance Culture: Strict adherence to corporate security baselines, audit controls, and federal regulatory compliance workflows.

• Tenant & Identity Management: Administer Microsoft 365 commercial and GCC High environments. Support Microsoft Entra ID (Azure Active Directory) and configure granular Conditional Access policies.
• Infrastructure & Virtualization: Support Azure cloud infrastructure administration, migration projects, and manage Azure Virtual Desktop (AVD) host pools and session hosts.
• Endpoint Compliance: Implement and maintain Microsoft Intune device management policies, compliance baselines, app deployments, and troubleshoot enrollment issues.

• Wireless & Switching: Administer enterprise wireless infrastructure utilizing Aruba technologies and manage the Aruba Central cloud management platform.
• Firewall & Perimeter Defense: Maintain Fortinet firewall infrastructure, security policies, IPSec VPN tunnels, and Azure networking integrations.
• Network Modernization: Support enterprise routing, switching, DNS/DHCP, ISP migrations, facility relocations, and new site network deployments.

• Compliance Controls: Participate in cybersecurity compliance initiatives, directly implementing technical controls supporting CMMC Level 2 audit and accreditation requirements.
• Vulnerability Management: Monitor CVE announcements, conduct patch management cycles, and coordinate remediation activities stemming from third-party penetration testing and vulnerability scans.

• Server & Directory Services: Support Windows Server environments, Active Directory optimization, GPO policies, asset inventory, and CMDB record accuracy.
• Project Execution: Lead or assist with office buildouts, organizational acquisitions, tenant-to-tenant migrations, and vendor coordination.
• Operational Support: Perform Tier 2/3 root-cause analysis, provide scheduled after-hours support for critical maintenance windows, and author comprehensive Standard Operating Procedures (SOPs).

• Analytical Problem Solving: Strong root-cause diagnostic mindset for resolving complex, multi-layered IT infrastructure incidents.

• Cross-Functional Collaboration: Ability to work effectively across IT, cybersecurity teams, executive stakeholders, and third-party vendors.

• Technical Communication: Clear verbal and written articulation of technical concepts for both technical teams and non-technical end users.

• 3–5+ years in systems and network engineering.
• Proficiency in M365, GCC High, Azure, Entra ID, and Intune.
• Hands-on experience with Fortinet Firewalls and Aruba Wireless / Central.
• Solid TCP/IP networking, VPN, DNS, DHCP, and switching knowledge.
• Proven technical documentation and troubleshooting skills.

• Bachelor's degree in Computer Science, IT, or equivalent experience.
• Experience supporting defense contractors or government regulated environments (NIST 800-171 / CMMC).
• Microsoft AZ-104, CompTIA Security+, Fortinet NSE 4/5, or Aruba ACMA/ACMP.