By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Position OverviewThe Systems Engineer II is responsible for the design, implementation, maintenance, security, and ongoing support of enterprise infrastructure systems across multiple business locations.
This role oversees hybrid cloud and on-premises environments, including Microsoft 365, Azure, GCC High, network infrastructure, endpoint management platforms, security controls, and compliance initiatives. The engineer serves as a key technical authority for infrastructure modernization, incident escalation, system integrations, and cybersecurity efforts.
Work Environment & Schedule
- Hybrid Location: Combination of remote work and scheduled on-site support across regional facilities and offices.
- Maintenance Windows: Participation in scheduled after-hours maintenance, system upgrades, and critical incident response duties.
- Compliance Culture: Strict adherence to corporate security baselines, audit controls, and federal regulatory compliance workflows.
Cloud & Microsoft 365 Architecture
- Tenant & Identity Management: Administer Microsoft 365 commercial and GCC High environments. Support Microsoft Entra ID (Azure Active Directory) and configure granular Conditional Access policies.
- Infrastructure & Virtualization: Support Azure cloud infrastructure administration, migration projects, and manage Azure Virtual Desktop (AVD) host pools and session hosts.
- Endpoint Compliance: Implement and maintain Microsoft Intune device management policies, compliance baselines, app deployments, and troubleshoot enrollment issues.
Network Infrastructure & Security
- Wireless & Switching: Administer enterprise wireless infrastructure utilizing Aruba technologies and manage the Aruba Central cloud management platform.
- Firewall & Perimeter Defense: Maintain Fortinet firewall infrastructure, security policies, IPSec VPN tunnels, and Azure networking integrations.
- Network Modernization: Support enterprise routing, switching, DNS/DHCP, ISP migrations, facility relocations, and new site network deployments.
Security, Compliance & Risk Remediation
- Compliance Controls: Participate in cybersecurity compliance initiatives, directly implementing technical controls supporting CMMC Level 2 audit and accreditation requirements.
- Vulnerability Management: Monitor CVE announcements, conduct patch management cycles, and coordinate remediation activities stemming from third-party penetration testing and vulnerability scans.
Systems Administration & Project Delivery
- Server & Directory Services: Support Windows Server environments, Active Directory optimization, GPO policies, asset inventory, and CMDB record accuracy.
- Project Execution: Lead or assist with office buildouts, organizational acquisitions, tenant-to-tenant migrations, and vendor coordination.
- Operational Support: Perform Tier 2/3 root-cause analysis, provide scheduled after-hours support for critical maintenance windows, and author comprehensive Standard Operating Procedures (SOPs).
Core Behavioral Competencies
Analytical Problem Solving: Strong root-cause diagnostic mindset for resolving complex, multi-layered IT infrastructure incidents.
Cross-Functional Collaboration: Ability to work effectively across IT, cybersecurity teams, executive stakeholders, and third-party vendors.
Technical Communication: Clear verbal and written articulation of technical concepts for both technical teams and non-technical end users.
- 3–5+ years in systems and network engineering.
- Proficiency in M365, GCC High, Azure, Entra ID, and Intune.
- Hands-on experience with Fortinet Firewalls and Aruba Wireless / Central.
- Solid TCP/IP networking, VPN, DNS, DHCP, and switching knowledge.
- Proven technical documentation and troubleshooting skills.
- Bachelor's degree in Computer Science, IT, or equivalent experience.
- Experience supporting defense contractors or government regulated environments (NIST 800-171 / CMMC).
- Microsoft AZ-104, CompTIA Security+, Fortinet NSE 4/5, or Aruba ACMA/ACMP.
Skills Required
- 3-5+ years of experience in systems and network engineering
- Proficiency with Microsoft 365, GCC High, Azure, Entra ID, and Intune
- Hands-on experience with Fortinet firewalls and Aruba Wireless or Aruba Central
- Knowledge of TCP/IP networking, VPN, DNS, DHCP, and switching
- Technical documentation and troubleshooting experience
- Bachelor's degree in Computer Science, Information Technology, or equivalent experience
- Experience supporting defense contractors or government-regulated environments, including NIST 800-171 or CMMC
- Microsoft AZ-104, CompTIA Security+, Fortinet NSE 4/5, or Aruba ACMA/ACMP certification
What We Do
By Light Professional IT Services LLC (By Light) provides a full range of hardware and software engineering services to defense, civilian, and commercial customers worldwide. Driven by a management team that leverages real-world expertise from the defense, intelligence, federal healthcare, and commercial sectors, we provide reliable, efficient, and cost-effective IT solutions. Some of our successes include: • Completion of 80+ Global Information Grid Bandwidth Expansion (GIG-BE) sites both CONUS & OCONUS. Provided Optical Network Engineering, Implementation, & Project Control Worldwide. • Provided timely completion of ATM to IP Migration, Legacy Network Optimization, & VOIP Implementation of 47 CONUS Sites for the United States Special Operations Command (USSOCOM) SCAMPI Network. • Supporting the AMC CIO/G6 in the Depot Modernization Program, implementing CONUS wide 802.11/a/b/g/n wireless networks, Area Processing Center Migration, DISN Optimization, and a 40,000 user, enterprise-wide SharePoint Implementation. • Completion of 2,000 Plus Legacy Circuit Migrations to DISN Transport for DISN Transition Program. • Delivered Communications Support & Staff Augmentation for Deployed DoD Forces under the Program Executive Office Enterprise Information Systems Technology Applications Office (PEO EIS TAO). • Successful Implementation of Secure Intelligent Video Systems (IVS) for the Intelligence Community. • Supporting major international carriers in the modernization and expansion of Data Center Facilities. • Engineering new Turnkey “Cloud Services,” including Hosting, Managed Services, COOP, and Data Storage and Archival.
