IT Engineer - Microsoft GCC High

ABOUT THE TEPA COMPANIES Established in 2005 and owned by the Paskenta Band of Nomlaki Indians, The Tepa Companies deliver comprehensive and sustainable solutions to federal, state, local, and private-sector clients throughout the United States. The tribally owned companies work independently and collaboratively to provide wide-ranging construction, engineering, environmental, industrial, staffing, and technology services. When you join Tepa Companies, you have the opportunity to expand your entrepreneurial skill set while growing professionally alongside the best in the industry. You will have the opportunity to impact your team, the organization as a whole, and subsequently, our Tribe. We seek out top talent to provide the best services for our clients. We focus on being a responsible company for our employees and their families by creating a culture that reflects our core values and offering competitive pay and benefits package. Our benefits package includes comprehensive medical, dental, vision, generous paid time off and holidays, 401(k) plan with company match, life insurance, flexible spending and health savings account, mental health support and resources, short and long-term disability, and tuition reimbursement. ABOUT THE JOB The Tepa Companies are seeking an Information Technology Engineer – Microsoft GCC High to design, implement, secure, and maintain IT systems that support Microsoft Government Community Cloud (GCC High) environments. This role will work closely with the VP of IT, security, and business stakeholders to ensure systems meet federal, DoD, and contractual requirements while enabling reliable, scalable, and secure operations. Job Functions: Designs, deploys, and administers Microsoft GCC High environments, including Azure Government, Microsoft 365 GCC High, Entra ID (Azure AD), Exchange, SharePoint, Teams, and related services. Implements identity, access, and device management solutions aligned with Zero Trust principles. Administers Microsoft Active Directory and Entra ID, including hybrid identity scenarios. Configures and maintains Intune for device compliance, configuration, and endpoint security. Administers Microsoft Exchange environments supporting regulated workloads. Configures and maintains secure tenant settings, conditional access policies, logging, and monitoring. Manages migrations to GCC High from commercial or legacy environments, including planning, execution, and validation. Ensures system availability, performance, backup, and disaster recovery for GCC High workloads. Deploys and manages security tooling (e.g., endpoint protection, SIEM, vulnerability management, encryption, logging). Monitors systems for security events, vulnerabilities, and misconfigurations, and remediate findings. Assists with incident response, root cause analysis, and corrective action plans. Ensures proper handling, storage, and transmission of Controlled Unclassified Information (CUI). Engineers and maintains on-premises, cloud, and hybrid infrastructure supporting regulated workloads. Administers servers, storage, networking, firewalls, and endpoint systems as required. Automates system configuration, monitoring, and compliance checks where possible. Documents architecture, configurations, and operational procedures. Works closely with the VP of IT on security strategy, architecture decisions, and compliance roadmap. Partners with internal teams to ensure technology solutions meet business and regulatory needs. Stays current on Microsoft Government cloud changes, CMMC updates, and cybersecurity best practices. Recommends and implements improvements to security posture, efficiency, and reliability. WHAT WE’RE LOOKING FOR Bachelor’s degree in information technology, Computer Science, Cybersecurity, or related field, or equivalent practical experience 5 years of experience in IT systems engineering, cloud engineering, or related roles Experience administering Microsoft 365 and Azure environments; GCC High experience strongly preferred Microsoft Active Directory and Entra ID (Azure AD) administration experience. Experience with identity and access management, endpoint management, and security controls in an enterprise environment Prior helpdesk or technical support experience demonstrate strong troubleshooting fundamentals Experience with enterprise networking technologies Microsoft Intune administration experience Microsoft Exchange Administration Experience Scripting or coding experience using PowerShell (preferred), Bash, and/or Python Experience with automation to support system administration and operational efficiency Demonstrated understanding of enterprise development, testing, and change-management practices Strong customer service skills with the ability to support internal stakeholders professionally and effectively Demonstrated ability to independently research, evaluate, and engage with unfamiliar technologies, solutions, and problems Strong documentation, troubleshooting, and analytical skills Equal Opportunity Employer/Veterans/Disabled Tepa is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. As a federal contractor, Tepa has affirmative action programs for protected veterans and individuals with disabilities. If you’d like to view a copy of the company’s affirmative action plans for protected veterans and individuals with disabilities, please email hr@tepa.com. If you have a disability and you believe you need a reasonable accommodation in order to search for a job opening or to submit an online application, please e-mail careers@tepa.com. If you don’t see a position that matches what you’re looking for, share your information with us! Our recruiters will contact you when an opportunity aligns with your experience.