Windows Systems Administrator

Location: Liberty Station, San Diego, CA
Employment Type: Full-Time
Work Model: Hybrid (On-site support + remote support as needed)
Clearance: None required, but can support up to a TS or help to obtain a Secret Clearance

Innovatus Technology Consulting is seeking a Windows Systems Administrator to support and secure our corporate IT environment and Microsoft GCC High tenant. This role is hands-on and operations-focused, centered around Windows endpoint and identity administration, standardization, patching, policy enforcement, and troubleshooting across a security-first, compliance-driven environment.

You will be responsible for maintaining secure, reliable Windows systems for local and remote employees, supporting compliance activities (CMMC/NIST-aligned), and improving operational efficiency through automation and documentation.

• Administer and troubleshoot Windows 10/11 endpoints and related enterprise services in a secure environment.
• Build and maintain standard Windows images / configuration baselines, including OS hardening and required software packages.
• Manage Group Policy / configuration policies and ensure consistent enforcement of security settings across endpoints.
• Perform patching and update management, ensuring endpoints remain current, stable, and compliant.
• Manage device access and enforcement controls (local admin restrictions, device encryption posture, secure configuration requirements).
• Monitor endpoint health and compliance and remediate drift from approved baselines.

• Provision/deprovision users and devices; apply security groups and validate access changes are fully completed.
• Support authentication and access troubleshooting, including sign-in failures, conditional access behaviors, and device registration issues.
• Maintain accurate account, device, and asset status records to support audit readiness.

• Administer and troubleshoot the Innovatus Microsoft GCC High environment, including:
  • User accounts, licensing, and device access
  • Exchange Online / email configuration and issues
  • Microsoft Teams support
  • SharePoint Online and OneDrive access/configuration troubleshooting
• Maintain secure configuration posture and contribute to tenant hardening initiatives.

• Enforce secure endpoint configurations aligned to Innovatus security policies and compliance expectations.
• Maintain and validate asset inventory records, including ownership, configuration state, and disposition status.
• Support evidence collection by documenting configurations, change history, and endpoint compliance status.
• Ensure users and devices follow approved policies (baseline configuration adherence, encryption, access constraints, etc.).

• Provide daily technical support to local and remote employees:
  • Windows troubleshooting (hardware/software/OS issues)
  • Peripheral support (printers, docks, scanners)
  • Conference room/AV systems (cameras, speakers, microphones)
  • Mobile device access support
• Resolve tickets independently; escalate when necessary with complete troubleshooting notes and logs.

• Assist with setup, configuration, and troubleshooting of lab solutions:
  • Windows servers, storage systems, lab endpoints
  • Networking equipment and demo environments
• Support customer/internal demos by maintaining stable and secure lab configurations.

• Use Microsoft Power Platform (Power Automate / Power Apps) to automate repetitive IT and compliance tasks in GCC High-compatible ways.
• Document repeatable IT processes, troubleshooting steps, standard builds, and compliance procedures.

• 2+ years of experience in Windows administration, desktop/endpoint support, or systems administration (or equivalent practical experience).
• Strong knowledge of:
  • Windows 10/11 administration and troubleshooting
  • System configuration, patching, and baseline management
  • User/device lifecycle workflows (onboarding/offboarding, access control)
• Strong problem-solving skills and customer support mindset.
• Ability to work in a security- and compliance-driven environment.

• Experience with one or more of the following:
  • Microsoft Intune / endpoint management profiles
  • Group Policy design and administration
  • Microsoft 365 administration (GCC High or Government environments a plus)
  • Security frameworks: CMMC / NIST 800-171 familiarity
  • Scripting/automation (PowerShell preferred)
• Certifications such as CompTIA A+, Network+, Security+, or Microsoft certs (helpful, not required).

• Independently resolve common Windows endpoint issues and handle escalations cleanly.
• Improve endpoint compliance by reducing configuration drift and tightening baseline enforcement.
• Streamline onboarding/offboarding with consistent procedures and documented checklists.
• Deliver at least one automation improvement (workflow, app, or ticketing/process enhancement).

• Hybrid environment (Liberty Station on-site support + remote support).
• Collaborative team supporting corporate IT, innovation lab infrastructure, and compliance requirements.
• High priority on balancing speed, security, and audit readiness.