Senior Microsoft Infrastructure Administrator

About this role

This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible. Koniag IT Systems, LLC a Koniag Government Services company, is seeking a Senior Microsoft Infrastructure Administrator to support KITS and our government customer Washington, DC. The position is remote. This position requires the candidate to be able to obtain a Public Trust. Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement. The Microsoft Infrastructure Administrator (Senior) is a senior technical authority responsible for the administration, security, and sustainment of CLIENT's enterprise Microsoft infrastructure environment. This individual provides expert-level administration and engineering support across Microsoft 365, Azure Government, Microsoft Entra identity, Exchange Online, Microsoft Teams, and endpoint management platforms.
This role requires deep, hands-on expertise across the full Microsoft enterprise stack, the ability to independently resolve complex, cross-domain Microsoft infrastructure problems, and the capacity to lead Microsoft-related projects, integrations, and improvements within CLIENT's enterprise environment. The Senior Microsoft Infrastructure Administrator serves as the primary escalation point for Microsoft infrastructure incidents and provides senior technical guidance to junior Microsoft infrastructure team members.
This individual must be capable of operating autonomously — diagnosing, deciding, and resolving within delegated authority without escalation to government personnel for routine or moderately complex matters — and must demonstrate expert-level mastery of Microsoft enterprise platforms at Federal agency scale.
Key Responsibilities:
Microsoft 365 Administration & Engineering:

• Provide expert-level administration, configuration, and engineering support for CLIENT's Microsoft 365 environment, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and associated services

• Lead planning and execution of Microsoft 365 service updates, feature rollouts, and configuration changes in accordance with ITIL 4 change management practices

• Monitor Microsoft 365 service health, performance, and security posture, taking proactive action to address issues before they impact end users

• Develop and maintain Microsoft 365 configuration standards, policies, and governance documentation

• Support Microsoft 365 license management and optimization in coordination with the Asset/Financial Management team

• Stay current on Microsoft 365 roadmap updates and recommend improvements aligned with CLIENT's mission and security requirements

Azure Government & Entra Identity Administration:

• Administer and engineer CLIENT's Microsoft Azure Government environment, including Azure Active Directory (Entra ID), conditional access policies, identity governance, and privileged identity management

• Lead integration and administration of Microsoft Entra identity services, including IAL2 identity assurance, multi-factor authentication, and single sign-on configurations

• Support Zero Trust Architecture implementation through proper configuration of Entra identity, conditional access, and least-privilege access controls

• Manage Azure Government resource administration, including subscriptions, resource groups, role-based access control (RBAC), and policy enforcement

• Coordinate with the Infrastructure and Platform Operations team on Azure-hosted workloads and cloud infrastructure management

• Support FedRAMP compliance for Azure Government services in alignment with CLIENT cybersecurity policies

Endpoint Management & Security:

• Lead administration and engineering of Microsoft Endpoint Manager (Intune) for device management, compliance policy enforcement, and application deployment across CLIENT's endpoint fleet

• Manage Microsoft Defender for Endpoint configuration, policy management, and incident response coordination

• Develop and maintain endpoint configuration baselines, compliance policies, and security standards aligned with NIST SP 800-53 and CLIENT cybersecurity requirements

• Support patch management and software deployment processes for Windows endpoints through Intune and related tooling

• Coordinate with the NOC and Service Desk teams on endpoint-related incidents and escalations

Exchange Online & Teams Administration:

• Administer and engineer Exchange Online, including mail flow, transport rules, anti-spam/anti-phishing policies, and mailbox management

• Support Microsoft Teams administration, including Teams policies, governance, meeting configurations, and integration with A/V systems

• Manage email security configurations, including DMARC, DKIM, SPF, and Microsoft Defender for Office 365

• Coordinate with the A/V Lead Systems Integrator on Microsoft Teams Rooms integration and support

• Troubleshoot and resolve complex Exchange Online and Teams incidents, serving as the senior escalation point for Microsoft messaging and collaboration issues

Security, Compliance & Governance:

• Ensure all Microsoft infrastructure configurations comply with FISMA, NIST SP 800-53, FedRAMP, and CLIENT cybersecurity policies

• Administer Microsoft Purview compliance solutions, including data loss prevention, information protection, and compliance management

• Support implementation and maintenance of Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09) across Microsoft platforms

• Apply least-privilege and separation-of-duties principles to all Microsoft infrastructure configurations and access management

• Support security assessment activities, audit evidence collection, and remediation of Microsoft-related findings

• Promptly report suspected or confirmed security incidents involving Microsoft infrastructure per CLIENT…