Required Skills: Systems engineering, SOC 2, CMMC, NIST, Windows Server, Compliance assessments. Microsoft 365 administration

Job Description

Responsibilities

The Client is seeking an experienced Systems Engineer to provide consulting services in support of Technology Services initiatives. This independent contractor engagement will focus on projects related to SOC 2 and CMMC 2.0 compliance, cybersecurity enhancements, infrastructure modernization, and technology risk reduction.

The anticipated engagement period is approximately six to twelve months. The selected consultant will provide services under a mutually agreed-upon scope of work and project objectives. The engagement is expected to require a significant level of effort during the project period.

The ideal consultant will possess extensive experience in Microsoft-based infrastructure, cybersecurity, systems engineering, and regulatory compliance frameworks.

Consulting Services May Include

• Assessing, implementing, and enhancing security controls aligned with SOC 2 and CMMC 2.0 requirements.
• Conducting compliance assessments, remediation planning, and gap analyses related to cybersecurity and information security controls.
• Performing systems hardening activities and vulnerability remediation efforts.
• Designing, configuring, deploying, and optimizing Microsoft-based infrastructure environments, including:
• Active Directory
• Microsoft 365 enterprise environments
• Exchange environments
• Windows Server platforms
• Diagnosing and resolving complex infrastructure, networking, systems, and application issues.
• Supporting application implementations, system configurations, upgrades, and infrastructure improvement initiatives.
• Evaluating system performance, availability, and security posture and recommending or implementing approved improvements.
• Coordinating with CLIENT personnel and third-party service providers regarding infrastructure projects, issue resolution, and technical implementations.
• Providing technical expertise during compliance assessments, audits, security reviews, and post-incident evaluations.
• Developing and maintaining technical documentation related to systems, configurations, architecture, security controls, and operational procedures.
• Providing advanced technical expertise for complex infrastructure and security issues referred by CLIENT personnel.
• Performing services in accordance with applicable security, change-management, documentation, and project-governance requirements established for the engagement.

Qualifications

• Extensive Microsoft systems engineering experience in enterprise environments.
• Strong networking, systems administration, and infrastructure troubleshooting expertise.
• Experience supporting cybersecurity compliance initiatives, including SOC 2, CMMC, NIST, or similar frameworks.
• Demonstrated experience implementing security controls, vulnerability remediation, and systems hardening.
• Experience with enterprise Microsoft 365 administration, Active Directory, Exchange, Windows Server, and related technologies.
• Strong written communication and technical documentation skills.
• Ability to independently evaluate technical requirements, recommend solutions, and deliver results in a consulting environment.