Senior IT Systems Administrator

Location: Denver, Colorado

Environment: Smallsat Design and Manufacturing

About the role

Imagine arriving at work knowing the systems you're responsible for aren't supporting another ordinary corporate office. They're supporting a team building spacecraft. EVONA is partnering with a fast-growing international space technology company that is expanding its US operations in Denver and building the infrastructure, engineering capability and teams required to support its next phase of growth. At the centre of that expansion sits IT. As Senior IT Systems Administrator, you'll become the primary IT resource for the US operation — responsible for keeping its people connected, its infrastructure reliable, its cloud environments secure and its systems compliant with the demanding requirements of the US government and defence ecosystem. This isn't a role where you'll spend your day forwarding tickets to somebody else. You'll own things.

Responsibilities

• Support employees when technology gets in their way, troubleshoot hardware and software issues and manage the workstations, servers, networks and devices that keep the Denver operation running.
• Administer Microsoft GCC High across Exchange Online, SharePoint, Teams, OneDrive, Intune and Entra ID, alongside Azure Government infrastructure and AWS GovCloud environments.
• Manage onboarding and offboarding, user provisioning, MFA, role-based access, privileged accounts and permissions across both local and cloud environments.
• Monitor endpoints and infrastructure, investigate suspicious activity, respond to security incidents, manage vulnerabilities, maintain patching and system‑hardening programmes and continuously improve the controls protecting the organisation.
• When something doesn't look right, investigate it; when something could be more secure, improve it; help ensure the technology and security architecture can grow with the organisation.
• Help maintain and strengthen compliance with frameworks and requirements such as: CMMC | NIST 800-171 | FedRAMP | ITAR | DFARS.
• Maintain security documentation, inventories, audit evidence, access reviews, logs and control records and help ensure the organisation is ready when customers or auditors need evidence that controls are actually being followed.
• Evaluate encryption technologies and protocols including AES, RSA, ECC and TLS/SSL, considering how they're applied to data at rest and in transit. This includes disk encryption, certificate handling and key management in environments aligned with FIPS 140-2/140-3 requirements.
• Support backups, restoration testing, disaster recovery and business continuity exercises.
• Manage and troubleshoot the physical infrastructure behind the operation — switches, routers, storage, wireless networks, firewalls, internet connectivity and office IT equipment.

Requirements

• At least five years of experience across systems administration, infrastructure engineering, IT operations, cybersecurity or a closely related field.
• A degree in IT, Computer Science or Cybersecurity is ideal, although equivalent practical experience is equally interesting.
• Strong experience within Windows‑based enterprise environments and Microsoft 365.
• Experience with Microsoft GCC High, Azure Government and AWS GovCloud would be particularly valuable.
• Experience supporting organisations working within CMMC, NIST 800-171, FedRAMP, ITAR, DFARS or similar regulated environments would be highly advantageous.

Skills

• Active Directory and Entra ID, Group Policy, DNS and DHCP.
• TCP/IP, VLANs, routing, VPNs and firewalls.
• Endpoint security and EDR; device management and encryption.
• Vulnerability remediation; system monitoring and logging; incident investigation and response.
• Microsoft GCC High, Azure Government, AWS GovCloud.
• Microsoft Entra ID / Active Directory, Microsoft Intune, Microsoft Defender, Microsoft Sentinel / Security Center, Windows Server.
• EDR and endpoint security, firewalls, VPNs and networking.
• Identity and privileged access management, vulnerability and patch management.
• Monitoring and logging platforms, encryption