IT Support & Systems Administrator

IT Support & Systems Administrator Integral Engineering Group, LLC Knoxville, TN Job Details Full-time $60,000 - $80,000 a year 1 day ago Benefits Travel reimbursement Health savings account Paid holidays Disability insurance Health insurance Dental insurance 401(k) Paid time off Employee assistance program Vision insurance 401(k) matching Professional development assistance Life insurance Referral program Retirement plan Qualifications

SSO CMMC

Cloud identity and access management (IAM) FedRAMP IT user and group management Microsoft Exchange Application deployment Public Cloud Endpoint Detection and Response (EDR) High school diploma or GED Production systems Cloud service support Azure AD Customer support ticket management Data access controls implementation MFA UEM Cloud compliance System deployment Systems & applications support Access control management Data Loss Prevention PowerShell Intune IT department experience Ticketing system technical support Information Technology Full Job Description Position Summary Join our small, cloud-centric team as the technical backbone of our IT operations.

This is a hybrid role:

you'll own day-to-day end-user support while also serving as our hands-on administrator for Microsoft 365, Azure/Entra ID, and Intune. A core part of the position is maintaining and continuously improving our CMMC compliance posture in a Controlled Unclassified Information (CUI) environment. The successful candidate will balance responsive end-user support with the technical depth required to administer our Microsoft cloud environment and sustain our compliance program. Key Responsibilities End-user support (Tier 1 & 2): Resolve helpdesk tickets across password/MFA, M365 (Outlook, Teams, OneDrive, SharePoint), printers, Windows 11, VPN, and hardware. Document, track, and escalate when appropriate. Microsoft 365 administration: Administer Exchange Online, SharePoint, Teams, and OneDrive. Manage licensing, mailboxes, shared resources, retention policies, and DLP rules.

Azure / Entra ID administration:

Manage users, groups, roles, and Conditional Access policies. Configure SSO, MFA, and identity protection. Intune & endpoint management: Build and maintain configuration profiles, compliance policies, app deployments, and Autopilot enrollment. Investigate failed deployments and remediate at scale. Security & Defender stack: Administer Microsoft Defender for Endpoint and Defender for Office 365. Triage alerts, review incidents, and tune policies to reduce noise without lowering posture.

CMMC compliance ownership:

Maintain and update the System Security Plan (SSP) and POA&Ms. Collect and organize evidence against

NIST SP 800-171 / CMMC

Level 2 controls. Support audits and assessments, working with our compliance partners and assessors.

GCC-High operations:

Operate within our GCC-High tenant boundary, ensuring data handling, sharing, and conditional access align with

CUI/ITAR

requirements.

Device lifecycle:

Receive/inventory hardware, asset tag, image/reimage, enroll via Autopilot, and verify BitLocker and compliance before hand-off.

Vendor coordination:

Manage support cases with Microsoft, MSP, and software vendors. Provide logs, lead remote sessions, and drive issues to resolution. Automation & scripting: Use PowerShell to automate routine admin tasks across Entra ID, Exchange Online, and Intune. Maintain runbooks for repeatable procedures.

Documentation:

Keep the SSP, network diagrams, runbooks, and end-user knowledge base accurate and current. Required Qualifications 5-7 years of progressive IT experience, including hands-on administration of Microsoft 365 and Azure/Entra ID in a production environment. Demonstrated experience administering Intune (configuration profiles, compliance policies, app deployment, Autopilot). Working knowledge of Conditional Access, MFA, SSO, and identity governance in Entra ID. Practical experience with Microsoft Defender for Endpoint and/or Defender for Office 365. Direct experience supporting a

CMMC, NIST

800-171, or comparable regulated compliance program (DFARS, ITAR, FedRAMP, HIPAA, or similar). Proficiency with PowerShell for administrative scripting against Microsoft 365 and Entra ID. Strong customer-service orientation — comfortable owning Tier 1 tickets while also leading admin and compliance work. High school diploma or equivalent (GED). Must be a U.S. Person (citizen or lawful permanent resident) to meet ITAR compliance requirements). Preferred Qualifications Associate's or Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field. Direct hands-on experience operating within a GCC-High tenant.

Microsoft certifications:

MS-102 (M365 Administrator Expert), SC-300 (Identity & Access Administrator), MD-102 (Endpoint Administrator), AZ-104 (Azure Administrator), or SC-200 (Security Operations Analyst). CompTIA Security+ or CySA+. Experience preparing for or supporting a CMMC Level 2 assessment with a C3PAO. Familiarity with SIEM tooling, log aggregation, or Microsoft Sentinel. Experience with backup/DR tooling (e.g., Veeam, Datto, Azure Backup). Experience supporting an engineering, defense, or manufacturing environment Work conditions Role requires the ability to lift and move equipment weighing up to 40 pounds as part of regular job duties Travel < 20% between Knoxville and Kingsport, TN Occasional after-hours maintenance windows Work will be performed in a Controlled Unclassified Information (CUI) environment; adherence to security protocols and handling requirements is mandatory Employment is contingent upon successful completion of a background check and drug screening Must be a U.S. Person (citizen or lawful permanent resident) in order to meet ITAR compliance requirements Compensation & benefits Salary non-exempt range: 60,000 - 90,000 11 Paid Holidays (1 floating) Paid Time Off (PTO) - Accrued 401(k) with up to 100% match on first 4% of employee contributions Medical PPO (HSA eligible) Dental coverage Vision coverage Short and Long Term Disability Accidental and Life Insurance Hybrid work schedule flexibility Reimbursement for approved travel and training expenses Employment with Integral Engineering Group is at-will. This means that either the employee or the company may terminate the employment relationship at any time, with or without cause or notice. Integral Engineering Group is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Pay:

$60,000.00 - $80,000.00 per year

Benefits:

401(k) 401(k) matching Dental insurance Employee assistance program Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Vision insurance Ability to

Commute:

Knoxville, TN 37902 (Required)

Work Location:

In person