Sentinel Blue

Systems Engineer

• Configure and maintain endpoint management baselines in Intune (compliance policies, configuration profiles, and remediation work tied to standards).
• Support hybrid identity systems, including Entra ID and on-premises Active Directory.
• Execute patching and lifecycle workflows for operating systems and common applications, including remediation tasks and exceptions.
• Perform change implementation work through Change Requests, including rollout steps, rollback planning, and post-change validation.
• Assist with backup and recovery tasks when assigned, including restore validation.
• Troubleshoot issues that cross endpoint, identity, and core infrastructure, escalating with clear notes and relevant logs when needed.
• Use existing automation and tooling; write small task-level scripts when appropriate, with review from more senior engineers.
• Contribute to KBs, SOPs, runbooks, and clear ticket notes; create new documentation occasionally when a gap is identified.
• Participate in client calls as needed for troubleshooting, change discussions, and project work.

Systems Engineer I

Cloud Engineer

• Own Entra ID and cloud identity work across client environments, including integrations and authentication flows.
• Design and implement Conditional Access patterns, MFA posture, and break-glass access approaches within standards.
• Lead Microsoft 365 workstreams, including tenant configuration improvements and governance-related implementations.
• Own Azure delivery work within the approved stack (VMs, storage, networking, AVD), including troubleshooting and remediation.
• Lead projects end-to-end, including rollout planning, rollback planning, validation, and closure.
• Regularly create SOPs, runbooks, KBs, and diagrams that improve delivery and supportability.
• Build and improve reusable automation (PowerShell, Graph, workflow tooling) and refine existing patterns.
• Drive permanent fixes for recurring issues and reduce repeat incidents through standards, documentation, and automation.
• Participate in client calls as needed and communicate clearly about status, risks, and next steps.

Cloud Engineer II

• Own endpoint management across client environments (Intune compliance, baselines, configuration profiles, firewall rules, and remediation).
• Operate and manage hybrid identity systems, including Entra ID and on-premises Active Directory.
• Drive patching and lifecycle execution, including exception handling, remediation planning, and follow-through for endpoints and on-premise servers.
• Coordinate local/cloud backup and recovery systems and processes, including restore validation and reliability improvements (Veeam exposure is a plus).
• Implement and validate systems changes across servers, virtualization, and core infrastructure fundamentals within approved standards.
• Run changes and projects end-to-end through Change Requests: plan the work, call out risk, execute cleanly, validate results, and document outcomes.
• Build and improve reusable automation (PowerShell, Graph, workflow tooling) and refine existing scripts and patterns with a focus on repeatability.
• Produce SOPs, runbooks, KBs, and diagrams on a regular basis, especially for recurring tasks and common failure modes.
• Participate in client calls as needed and communicate status, options, and next steps in plain language.

Systems Engineer II

• Handle Entra ID administration and cloud identity tasks, including tenant configuration and common identity integrations.
• Assist with Conditional Access and other policy work within established patterns.
• Administer Microsoft 365 services (Exchange, SharePoint, OneDrive, Teams) and tenant configuration tasks.
• Configure Intune device management tasks tied to cloud service delivery (profiles, compliance, baseline enforcement).
• Contribute to Azure work under guidance, including VMs, storage, networking, and AVD within established designs.
• Implement approved changes via Change Requests, including validation and clear documentation of outcomes.
• Use existing RMM automation and tooling; write small task-level scripts when appropriate.
• Execute patch management and lifecycle workflows within standards, including remediation work under guidance.
• Maintain strong operational hygiene in tickets, notes, and documentation; create new KBs/runbooks/SOPs when gaps are found.
• Participate in client calls as needed for troubleshooting, change discussions, and project work.

Cloud Engineer I

Security Operations

• Continuously monitor the Security Information and Event Management (SIEM) dashboard and leverage security tools to detect potential security incidents and anomalies in real-time.
• Analyze incoming alerts to determine their relevance and urgency; effectively distinguish between false and true positives to prioritize response efforts.
• Conduct investigations by gathering context and other relevant logs to understand scope of alert.
• Strictly adhere to established Service Level Agreements (SLAs), Incident Response (IR) playbooks and Standard Operating Procedures (SOPs) to ensure consistent and compliant handling of security events.
• Create, update, and manage tickets in our case management system, ensuring all investigative steps, communications, and findings are thoroughly documented.
• Identify and escalate complex or high-severity incidents to Tier II or Incident Response Team, providing clear details and a comprehensive summary of initial findings.
• Perform basic remediation actions, such as blocking indicators and isolating compromised hosts, when authorized by SOPs or directed by senior personnel.
• Demonstrate excellent verbal and written communication skills, when communicating with team members, clients, and/or stakeholders.
• Contribute to the team’s knowledge base, creating or updating articles, SOPs, and/or playbooks when new trends or resolution methods are identified.

SOC Analyst I

• Design, deploy, configure, and maintain secure, reliable systems across client and internal environments, including servers, endpoints, identity platforms, and cloud services.
• Operate and support production systems by troubleshooting and resolving infrastructure, platform, and endpoint issues, collaborating and escalating as necessary to meet service and security expectations.
• Review, validate, and maintain system configurations (e.g., identity and access management, logging and monitoring, encryption, network segmentation, endpoint protection, backup and recovery) to ensure alignment with security, operational, and compliance requirements.
• Implement and maintain system hardening standards, configuration baselines, patching processes, and lifecycle management practices.
• Contribute to the execution and continuous improvement of Platforms Team objectives, including system reliability, scalability, and sustainability.
• Communicate clearly and effectively with technical and non-technical stakeholders via written and verbal channels to explain system behavior, proposed changes, risks, and remediation actions.
• Develop and maintain accurate system documentation, diagrams, runbooks, and standard operating procedures that support operational consistency and audit readiness.
• Support the development and maintenance of internal tooling, templates, and repeatable build processes to improve system consistency, efficiency, and security posture.

Platform Engineer

• Design, build, and maintain shared platform services that support secure and scalable infrastructure across client and internal environments.
• Develop and maintain infrastructure-as-code (IaC) using tools such as Terraform, ARM/Bicep, or similar frameworks.
• Build automation for system provisioning, configuration management, patching, and lifecycle operations.
• Support and improve CICD pipelines, deployment workflows, and platform integrations.
• Implement platform-level security controls, including identity integration, logging, monitoring, encryption, and segmentation.
• Collaborate with Security Operations and Compliance teams to embed compliance and audit-readiness into platform designs.
• Monitor platform health and reliability, supporting incident response, root cause analysis, and continuous improvement efforts.
• Communicate platform designs, changes, and operational guidance clearly to internal teams and clients.
• Contribute to platform documentation, standards, runbooks, and architectural diagrams.
• Identify opportunities to reduce manual effort, improve consistency, and enhance developer and operator experience through automation.

Compliance

• Receive, triage, and analyze compliance-related requests, documentation, and assessment findings, and work to resolve issues through research, evidence collection, and stakeholder coordination.
• Support the development and maintenance of System Security Plans (SSPs), POA&Ms, policy sets, procedures, and control documentation across client environments.
• Review client technical configurations (e.g., access controls, logging, encryption, segmentation, backup strategies) against NIST/CMMC compliance objectives and document gaps or remediation actions.
• Communicate with clients through email, chat, meetings, and interviews to gather evidence, clarify processes, and maintain progress visibility on compliance deliverables.
• Assist in the management, implementation, and validation of compliance controls across CMMC, NIST 800-171, and/or DFARS 7012.
• Contribute to internal compliance documentation templates, client-facing guidance materials, and evidence repositories that streamline audit readiness.
• Support the creation of compliance reports, risk assessments, briefs, and executive presentations that translate findings into clear business narrative.