Job Description
SUMMARY
The IT Systems Engineer III is responsible for building, operating, and supporting secure, mission-critical environments across Microsoft Azure Government (GCC High/Azure Gov) and Karman’s multi-site campus.
This role ensures day-to-day reliability, security, and continuous improvement of Karman’s core infrastructure. The engineer identifies quick wins for system hardening and right-sizing, develops remediation backlogs with cost/effort estimates, and automates infrastructure deployments through scripting and Infrastructure-as-Code (IaC).
ABOUT US
Karman Space & Defense provides concept-to-production solutions for mission-critical systems on spacecraft, launch vehicles, missiles, hypersonics, and integrated defense systems. We believe that solving the industry’s most complex and mission-critical challenges requires relentless determination and a willingness to push the boundaries of possibility. Karman Space & Defense brings to bear unparalleled production capabilities, unmatched engineering expertise, and unflinching analysis to render the impossible, possible.
COMPENSATION & BENEFITS
• Medical, Dental, Vision
• Company Paid Life Insurance
• 401(k) Retirement Savings Plan
• Paid Time Off (PTO)
• Paid Holidays
• Tuition Reimbursement
ESSENTIAL DUTIES AND RESPONSIBILITIES
• Support and enhance identity, security, networking, compute, backup, and observability services across Azure Gov and Karman sites.
• Maintain Entra ID, Intune, Conditional Access, MFA, Defender XDR, Sentinel, Azure VMs/AVD, VNets, firewalls, and private networking.
• Automate deployments and maintenance using PowerShell (required), Bash/Python, and IaC (Bicep/Terraform).
• Manage hybrid integrations (AD Connect, Azure Arc) and maintain change, incident, and service management processes.
• Review and document LAN/WAN infrastructure, Azure environments, and VM/service inventories.
• Identify system hardening and cost-optimization opportunities and build remediation backlogs.
• Partner with the network MSP and ISPs to validate network standards, SLAs, and circuit redundancy.
• Produce audit-ready documentation supporting CMMC/NIST/ITGC controls. • Occasional travel to Karman sites
EDUCATION AND EXPERIENCE
• 5+ years required experience in IT, 10 years preferred; 4–6 years in systems/cloud infrastructure (Azure required; GCC High/Azure Gov preferred).
• Strong experience with identity/security (Entra ID, Intune, Conditional Access, MFA, Defender, Sentinel).
• Solid networking foundation: VLANs/VRFs, L2/L3 switching, DNS/DHCP, VPN/ExpressRoute, Private Endpoints, and load balancing.
• Firewall experience (FortiGate or equivalent) including IPsec, SD-WAN, HA, and SIEM/Sentinel log forwarding.
• Wi-Fi and access control knowledge: 802.1X/NAC, WPA2/3-Enterprise, segmentation.
• Windows Server administration and Azure Backup/ASR experience.
• Strong automation skills: PowerShell required; Bash/Python and Git workflows preferred.
• Experience migrating from on-prem AD/GPO to cloud-first baselines.
• Ability to produce clear, audit-ready documentation.
ITAR REQUIREMENTS
To conform to U.S. Government export regulations , certain positions may require applicant s to be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
TRAVEL REQUIREMENTS
No travel required for this position.
PHYSICAL REQUIREMENTS
As a federal contractor, Karman Space & Defense is committed to compliance with all federal employment eligibility requirements. We participate in E-Verify, a web-based system that allows enrolled employers to confirm the eligibility of their employees to work in the United States. As an E-Verify employer, federal compliance mandates that we require documentation to verify your identity and employment authorization upon hire.
EQUAL OPPORTUNITY EMPLOYER
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities. The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.
Karman is committed to equal employment opportunity. We will not discriminate against employees or applicants for employment on any legally recognized basis (“protected class”) including, but not limited to race; color; religion; genetic information; national origin; sex; pregnancy, childbirth, or related medical conditions; age; disability; citizenship status; uniform servicemember status; or any other protected class under federal, state, or local law.Our management is dedicated to ensuring the fulfillment of this policy with respect to hiring, placement, promotion, transfer, demotion, layoff, termination, recruitment advertising, pay, and other forms of compensation, training, and general treatment during employment.
The IT Systems Engineer III is responsible for building, operating, and supporting secure, mission-critical environments across Microsoft Azure Government (GCC High/Azure Gov) and Karman’s multi-site campus.
This role ensures day-to-day reliability, security, and continuous improvement of Karman’s core infrastructure. The engineer identifies quick wins for system hardening and right-sizing, develops remediation backlogs with cost/effort estimates, and automates infrastructure deployments through scripting and Infrastructure-as-Code (IaC).
ABOUT US
Karman Space & Defense provides concept-to-production solutions for mission-critical systems on spacecraft, launch vehicles, missiles, hypersonics, and integrated defense systems. We believe that solving the industry’s most complex and mission-critical challenges requires relentless determination and a willingness to push the boundaries of possibility. Karman Space & Defense brings to bear unparalleled production capabilities, unmatched engineering expertise, and unflinching analysis to render the impossible, possible.
COMPENSATION & BENEFITS
• Medical, Dental, Vision
• Company Paid Life Insurance
• 401(k) Retirement Savings Plan
• Paid Time Off (PTO)
• Paid Holidays
• Tuition Reimbursement
ESSENTIAL DUTIES AND RESPONSIBILITIES
• Support and enhance identity, security, networking, compute, backup, and observability services across Azure Gov and Karman sites.
• Maintain Entra ID, Intune, Conditional Access, MFA, Defender XDR, Sentinel, Azure VMs/AVD, VNets, firewalls, and private networking.
• Automate deployments and maintenance using PowerShell (required), Bash/Python, and IaC (Bicep/Terraform).
• Manage hybrid integrations (AD Connect, Azure Arc) and maintain change, incident, and service management processes.
• Review and document LAN/WAN infrastructure, Azure environments, and VM/service inventories.
• Identify system hardening and cost-optimization opportunities and build remediation backlogs.
• Partner with the network MSP and ISPs to validate network standards, SLAs, and circuit redundancy.
• Produce audit-ready documentation supporting CMMC/NIST/ITGC controls. • Occasional travel to Karman sites
EDUCATION AND EXPERIENCE
• 5+ years required experience in IT, 10 years preferred; 4–6 years in systems/cloud infrastructure (Azure required; GCC High/Azure Gov preferred).
• Strong experience with identity/security (Entra ID, Intune, Conditional Access, MFA, Defender, Sentinel).
• Solid networking foundation: VLANs/VRFs, L2/L3 switching, DNS/DHCP, VPN/ExpressRoute, Private Endpoints, and load balancing.
• Firewall experience (FortiGate or equivalent) including IPsec, SD-WAN, HA, and SIEM/Sentinel log forwarding.
• Wi-Fi and access control knowledge: 802.1X/NAC, WPA2/3-Enterprise, segmentation.
• Windows Server administration and Azure Backup/ASR experience.
• Strong automation skills: PowerShell required; Bash/Python and Git workflows preferred.
• Experience migrating from on-prem AD/GPO to cloud-first baselines.
• Ability to produce clear, audit-ready documentation.
ITAR REQUIREMENTS
To conform to U.S. Government export regulations , certain positions may require applicant s to be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
TRAVEL REQUIREMENTS
No travel required for this position.
PHYSICAL REQUIREMENTS
As a federal contractor, Karman Space & Defense is committed to compliance with all federal employment eligibility requirements. We participate in E-Verify, a web-based system that allows enrolled employers to confirm the eligibility of their employees to work in the United States. As an E-Verify employer, federal compliance mandates that we require documentation to verify your identity and employment authorization upon hire.
EQUAL OPPORTUNITY EMPLOYER
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities. The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.
Karman is committed to equal employment opportunity. We will not discriminate against employees or applicants for employment on any legally recognized basis (“protected class”) including, but not limited to race; color; religion; genetic information; national origin; sex; pregnancy, childbirth, or related medical conditions; age; disability; citizenship status; uniform servicemember status; or any other protected class under federal, state, or local law.Our management is dedicated to ensuring the fulfillment of this policy with respect to hiring, placement, promotion, transfer, demotion, layoff, termination, recruitment advertising, pay, and other forms of compensation, training, and general treatment during employment.
💡 Quick Summary
Seeking a career-building opportunity? The IT Systems Engineer III- post position is now open for candidates interested in the IT Engineer & Developer Jobs sector. This role in Los Angeles offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in IT Engineer & Developer Jobs is a plus.
