System Administrator SkillBridge Internship
5 days ago
Halethorpe
Job DescriptionSalary: $60,000 - $90,000 One of Inc 5000's fastest growing companies, come join us! Our work environment is limitless, you matter to us, your great work will be recognized, and there are many opportunities for advancement. Davis Unlimited Information Technologies, Inc (DUIT) wants you! We have an opening for a System Administrator SkillBridge intern in our office headquarters. Davis Unlimited Information Technologies (DUIT)'s SkillBridge program is developed so the Service member not only obtain Industry skill sets, but also the skill sets required to meet customer's needs after completion of the SkillBridge program. We are looking to not only have the service member gain industry knowledge but also the knowledge required to employ them upon completion. The Path At our headquarters office in Maryland, we willassist retiring or transitioning Military Service members. DUIT has developed extensive SkillBridge job training and career development programs in the following career fields to enhance the opportunities for separating Service members: • Program Manager, • Program Integrator, • Hardware Technician, • Acquisition Professional, • Network Engineer, • Software Engineer, • Cybersecurity Engineering, • IT Staffing All Applicants must have the following: approval from command and able to follow training plan requirements . All information provided is subject to verification. What you will get to do: System administrator: will get to use PowerShell Scripting, work within Microsoft Entra ID, Microsoft Azure, Microsoft Intune, and Microsoft Defender. The system administrator will learn security frameworks such as NIST SP 800-171 and CMMC. Requirements • 5+ years administering Microsoft environments; 23+ years in Microsoft 365 GCC (GCC or GCC High) and Azure Government, • Strong PowerShell scripting for automation (Exchange Online, Entra ID, Intune, SharePoint, Graph), • Hands-on with hybrid identity (Entra ID/Azure AD), Entra Connect/Cloud Sync, Conditional Access, MFA, PIM, • Endpoint management with Intune (Gov): device compliance, app protection, BitLocker, Autopilot, Windows Update for Business, • Email/collab: Exchange Online (mail flow, EOP, DKIM/DMARC/SPF), Teams (GCC nuances), SharePoint/OneDrive governance, • Security stack: Microsoft Defender for Endpoint/Office/Identity, Defender for Cloud/Cloud Apps, Sentinel basics (KQL), • Azure (Gov): subscriptions/management groups, RBAC, VNets/NSGs, private endpoints, Key Vault, Storage/SAS, Backup/ASR, • Governance & compliance: Azure Policy, blueprints/landing zones (Gov), tagging, cost management, least-privilege design, • Backup/DR and change management (ITIL fundamentals); solid documentation skills GCC/Government Cloud Specifics • Understanding of GCC vs GCC High boundaries, FedRAMP/NIST 800-171 alignment, and feature parity limitations, • Data residency/sovereignty and egress controls; third-party app restrictions in Gov tenants, • S/MIME, and certificate lifecycle basics CMMC (v2.0) Knowledge & Practices • Working knowledge of CMMC Levels 12 and mapping to NIST SP 800-171/172 requirements, • Experience implementing and operating:, • Access control: role-based access, Conditional Access, device compliance, session controls, • Identification & authentication: MFA everywhere., • Audit & logging: unified audit log, retention, Sentinel/Log Analytics queries & alerting; evidence collection. Splunk, Datadog or equivalent., • Configuration management: secure baselines (STIG-informed), change tracking, policy as code (Azure Policy), • Incident response: response procedures, post-incident reporting, • Data protection: Purview sensitivity labels, DLP (Exchange/SharePoint/Teams/endpoints), Information Barriers, eDiscovery, • Vulnerability & patch management across servers, endpoints, and cloud resources, • Contributing to SSPs, POA&Ms, and control evidence; supporting gap assessments and readiness for C3PAO audits, • Handling and safeguarding CUI, media protection, and secure file sharing within Gov boundaries Networking & Infrastructure • Site-to-site VPN/ExpressRoute concepts for Gov, private DNS, split-tunnel considerations, • Zero Trust segmentation principles; endpoint and identity as security perimeter Automation & DevOps-Adjacent • PowerShell modules (ExchangeOnlineManagement, Microsoft.Graph, Az, AzureAD/Entra), scheduled jobs, desired state configs, • CI/CD-style admin habits for scripts (version control, peer review), ARM/Bicep/Terraform (Gov aware) a plus Soft Skills • Clear technical writing for auditors and leadership; ability to translate controls into actionable configurations, • Cross-team collaboration (Security, Compliance, Networking), vendor coordination, and user communication/training Certifications (Nice to Have) • Microsoft: MS-102 (or MD-102), AZ-104, AZ-500, SC-200/300/400, • Compliance/Security: Security+, CySA+, CISSP, • CMMC ecosystem: CCP/CCL (or equivalent training), experience with RPO/C3PAO engagements