IT Engineer

About the role

Reports to Head of Cyber & IT

This is a Hybrid remote role requiring 3 days / week in office from Arlington, VA

Must be a U.S. Citizen eligible for security clearance

Istari Digital is a government and commercial contracting company that partners with leading defense organizations on classified and ITAR-regulated data projects. We operate in a fast-paced, security-first environment where reliability, compliance, and innovation go hand in hand.

The Role:

We're looking for a mid-level IT Engineer to own the day-to-day IT operations that keep our people productive and our environment secure. This includes onboarding and offboarding, access requests, password and MFA resets, endpoint management, and SaaS administration.

You'll have enough hands-on experience to work these queues on your own, without close supervision, while following the security and compliance guardrails a defense contractor needs. You'll join a small, high-trust IT and cyber team. As you master the work, we expect you to automate it, and the role can grow into an IT automation path. If you're tired of doing the same manual task twice and want a role where you're expected to script it away, you'll fit right in.

Core Responsibilities

User Lifecycle & Service Desk

• Run onboarding and offboarding end-to-end: account provisioning, hardware setup, role changes, same-day deprovisioning, and device wipe and recovery. This includes no-notice terminations.

• Work the IT service desk queue in Jira Service Management. Handle password and MFA resets, access requests, department and admin requests, and troubleshooting within defined SLAs.

• Write and maintain SOPs, runbooks, and knowledge-base articles so common requests can be self-served or handled consistently.

• Escalate security-relevant issues, such as suspected phishing, data spills, or anomalous access, to the cyber team using established procedures.

Endpoint & Device Management

• Administer macOS and Windows endpoints in Rippling MDM: enrollment, configuration profiles, and policy enforcement. Help finish migrating the remaining devices off JumpCloud.

• Enforce OS and application patching, and report on device compliance across the fleet.

• Deploy and maintain endpoint security agents (EDR) and DLP controls, such as restricting unmanaged cloud storage.

• Track hardware inventory, assignment, and retirement.

Systems & SaaS Administration

• Administer Google Workspace: users, groups, organizational units, shared drives, and email authentication. Support the Google Drive migration.

• Administer Atlassian, GitHub organization access, Slack, and other core SaaS platforms.

• Maintain SSO and MFA integrations between our identity provider and downstream applications.

• Maintain the tool and license inventory. Track renewals and expirations, reclaim inactive licenses (90+ days), and flag shadow IT found through our SaaS management platform.

Access Governance & Compliance Support

• Run monthly user access reviews (Google, GitHub, AWS, and others) and keep the evidence audit-ready.

• Apply least-privilege access and our admin-access guardrails consistently across environments.

• Support CMMC Level 2 and NIST 800-171 compliance with evidence collection and accurate documentation of IT controls.

Automation (Growth Path)

• Script repetitive tasks (Python, Bash, PowerShell, Google Apps Script, or similar). Examples include onboarding checklists, access-review exports, license-expiry alerts, and ticket routing.

• Partner with cyber and infrastructure engineers on IT automation and tooling-as-code initiatives as the role matures.

Qualifications

Required

• 4–6 years of experience in IT support, systems administration, or IT engineering, including at least 2 years beyond tier-one help desk.

• Hands-on administration of an IDaaS/MDM platform (Rippling, JumpCloud, Okta, Azure AD/Entra, Jamf, Intune, or similar). This includes SSO, MFA, and device policy management.

• Experience supporting both macOS and Windows endpoints, including patching and device compliance.

• Google Workspace administration across user lifecycle, groups, and shared drives.

• Experience working a ticket queue in Jira or a similar ITSM tool, and meeting response SLAs.

• Working scripting ability in at least one language (Python, Bash, PowerShell, or similar), with interest in automating repetitive work.

• Clear written communication: you document what you do so others can repeat it.

• Sound judgment on when to resolve, when to escalate, and when a request needs security review.

• U.S. Citizenship.

• At least one certification aligned to the DoD Cyber Workforce Framework (DoDM 8140.03), or the ability to earn one within 6 months of hire, such as:

• CompTIA A+, Network+, or Security+

• ISC2 SSCP

• Microsoft, Google Workspace, or Jamf administrator certifications

Preferred

• Experience in a CMMC, ITAR, FedRAMP, or other regulated environment. Candidates from adjacent regulated industries are encouraged to apply.

• Administration of Atlassian, GitHub organizations, or Slack Enterprise.

• Familiarity with SaaS management or IT asset management platforms 

• Exposure to AWS IAM, EDR tooling (e.g., CrowdStrike), or vulnerability scanners (e.g., Nessus).

• Experience building automations or workflows that remove manual steps from an IT process.

• Familiarity with NIST 800-171 or NIST 800-53 controls and audit evidence collection.

About Istari Digital

Istari is a digital engineering software company building open, scalable infrastructure for engineering data. Our platform lets customers simply and securely integrate engineering models across disciplines, organizations, and security levels — whether they're designing prototypes, performing virtual testing, or training AI and autonomy for complex systems.

Focus is rewarded.  Finish is remembered.

Facts are friendly.  Even when they are not fun.

Fellowship is fundamental.  Make others successful.