SYSTEM ADMINISTRATOR with Security Clearance

THE COMPANY For over 40 years, Aero Simulation, Inc. (ASI) has provided quality flight training devices to the US Military. ASI has successfully built numerous training systems with a primary focus on aircrew and maintenance training systems. Our current programs include, but are not limited to, the B-1 Training Systems (Air Force), E-2D Training Systems (Navy), CH-53E Training Devices (USMC), IMOMS (Coast Guard), Navigation, Seamanship, Shiphandling Trainer - NSST (Navy). To learn more about ASI visit Programs - Aero Simulation, Inc. ASI is a 100% employee-owned engineering and manufacturing company committed to supporting the nation's warfighters. Being 100% employee-owned directly impacts our culture: it drives our decision-making, motivates our teams, increases our productivity, improves retention and contributes to the future success of our company. Our culture is one where we work hard for our clients and for each other - and we have fun collaborating, sharing experience and expertise, and learning along the way. We strive to deliver exceptional quality, elevate client relationships, and enrich the careers and lives of our employee-owners. As Employee-Owners, we are invested in the success and continued development of each other and the company. In addition to the Employee Stock Ownership Plan (ESOP), we offer a flexible work environment, generous paid time off, professional development opportunities, industry competitive compensation, and superior benefits to include medical, dental, 401k and more! ASI is a great place to build a career and grow with a company that is dedicated to quality, service and to fostering a community of support for each and every member of the team. To learn more about this opportunity, keep reading! POSITION SUMMARY The System Administrator supports, secures, and modernizes the company's IT infrastructure in a regulated U.S. Defense Industrial Base (DIB) environment. This role is part of a small, collaborative IT team and is expected to take ownership of one or more defined technical domains while also contributing to general systems administration and organizational end-user support. The ideal candidate brings strong hands-on experience in at least one of the following areas: Microsoft 365 GCC High security and compliance, enterprise networking and firewall management, or endpoint management and automation. Experience in all areas is not required; depth in one area combined with the ability to operate effectively with compliance-driven environments is strongly preferred. ESSENTIAL DUTIES AND RESPONSIBILITIES Infrastructure and Systems Administration * Administer on-premises and hybrid infrastructure, including:

• Microsoft Azure and Microsoft 365
• Active Directory
• Hyper-V virtualized environments
• Windows Server systems
• Monitor system health, performance, and capacity; participate in lifecycle planning and upgrades.
• Support backup, recovery, and disaster recovery processes in alignment with business and compliance requirements.
• Create and maintain technical and procedural documentation to support operational continuity and audit readiness. * Participate in change management routines to ensure controlled and documented system changes. User Support and Collaboration * Provide support for internal users as needed, including issue escalation from the helpdesk.
• Work closely with IT management, security/compliance personnel, and HR on access provisioning, policy enforcement, and onboarding/offboarding.
• Document systems, procedures, and configurations in accordance with compliance and audit requirements.
• Microsoft 365 GCC High (Primary Focus Area - Strongly Preferred)
• Administer and support Microsoft 365 GCC High tenants in compliance with DoD, CMMC, and contractual requirements.
• Configure and manage security, compliance, and governance capabilities, including:
• Microsoft Purview (eDiscovery, Information Protection, DLP, retention)
• Microsoft Intune (endpoint compliance, configuration profiles, conditional access support)
• Microsoft Sentinel (log ingestion, alerting, and basic security operations support)
• Support identity and access management using Entra ID (Azure AD), including role-based access control, MFA, and conditional access policies.
• Assist with audit preparation, evidence collection, and continuous compliance monitoring activities. Networking and Security (Secondary Focus Area - Desired) * Support and maintain TCP/IP networking and security infrastructure, including:
• Firewalls and network devices from Cisco, Aruba, and Palo Alto
• VLANs, routing, VPNs, and access control policies
• Assist with firewall rule reviews, documentation, and change management.
• Collaborate with security and compliance stakeholders to ensure network configurations align with CMMC and NIST SP 800-171 requirements. Endpoint Management and Automation (Secondary Focus Area - Desired) * Support endpoint lifecycle management for Windows systems, including provisioning, configuration, patching, and decommissioning.
• Develop and maintain scripts and automation (e.g., PowerShell) to improve operational efficiency and consistency.
• Assist with configuration baselines and secure system hardening in alignment with compliance requirements. SUPERVISORY RESPONSIBILITES This is not a supervisory position. Requirements EXPERIENCE REQUIREMENTS * Seven (7) or more years of progressively responsible experience in systems administration or related IT roles.
• Strong understanding of Windows-based enterprise environments.
• Demonstrated experience operating in a regulated or compliance-driven environment (Defense Industrial Base strongly preferred).
• Familiarity with NIST SP 800-171, CMMC, or similar security frameworks. PREFERRED QUALIFICATIONS * Hands-on experience administering Microsoft 365 GCC High.
• Experience with Microsoft Purview, Intune, and/or Sentinel in a compliance-focused environment.
• Networking and firewall experience with Cisco, Aruba, and/or Palo Alto platforms.
• Scripting or automation experience (PowerShell strongly preferred).
• Prior experience supporting audits, assessments, or compliance evidence collection.
• Relevant certifications preferred (e.g. Microsoft, Cisco, Palo Alto, or similar) ADDITIONAL REQUIRED KNOWLEDGE, SKILLS AND ABILITIES * Strong written and verbal communication skills, with the ability to clearly convey quality requirements, findings, and corrective actions to technical and non-technical audiences.
• Highly organized and detail-oriented, with the ability to manage multiple priorities while maintaining accuracy and compliance.
• Self-directed with the ability to work independently, while also collaborating effectively across departments and organizational levels.
• Demonstrated ability to build and maintain productive working relationships with internal stakeholders.
• Strong analytical, critical-thinking, and problem-solving skills, including the ability to assess systems and processes, identify gaps or risks, and implement effective solutions.
• Ability to perform effectively in a fast-paced, deadline-driven environment and manage competing demands with professionalism.
• Ability to handle pressure and ambiguity while maintaining focus, sound judgment, and adherence to quality standards. EDUCATION REQUIREMENTS * Bachelor's degree in a technical discipline (e.g., Information Technology, Computer Science, Cybersecurity), or equivalent experience.
• CompTIA Security required or must be obtained within six (6) months of hire. EMPLOYMENT REQUIREMENTS * U.S. Citizenship Required: As a federal contractor supporting the U.S. warfighter, it is required that all employees in this role be United States citizens in compliance with government contract and security requirements.
• Background Check: Must be able to successfully pass an initial background screening.
• Security Clearance: Must be able to obtain and maintain an active Department of Defense (DoD) security clearance. The selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information, as required by the position.
• Work Schedule Flexibility: Occasional overtime and alternate shifts may be required to meet customer schedules, critical deadlines, or program milestones.
• Travel Requirements: Must be able and willing to travel domestically and, on occasion, internationally to customer sites, partner locations, or project meetings in support of contract objectives.
• Drug-Free Workplace: ASI maintains a Drug-Free Workplace. Applicants and employees are subject to pre-employment and random drug testing in accordance with company policy. Employment Contingency: All employment offers are contingent upon the successful completion of all background checks, security clearance requirements, and drug-screening results. PHYSICAL REQUIREMENTS * Ability to sit, stand, and walk for extended periods of time in an office and manufacturing environment.
• Ability to use hands and fingers to handle, feel, and operate tools, equipment, and computer peripherals.
• Ability to communicate effectively in person, over the phone, and in writing.
• Visual acuity required to perform inspections, read drawings, specifications, and computer screens, including close vision and color differentiation.
• Ability to work in a manufacturing environment with varying noise levels, temperatures, and activity.
• Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORK ENVIRONMENT Work is primarily performed in a shop floor environment, where forklifts and other equipment can create a loud noise level. The work is fast-paced and sometimes involves extreme deadline pressures. The nature of the work requires a high degree of teamwork and cooperation with other members of the staff as well as external customers. Note: This job description is not intended to be an exhaust