Senior IT Systems Engineer

Senior IT Systems Engineer - Cloud Computing

About Us:

BlackSky is a real-time intelligence company. We own and operate the world's most advanced space-based intelligence platform and provide customers satellite imagery, automated analytics and high-frequency monitoring of strategic locations, economic assets and events from around the globe. BlackSky is trusted by the most demanding allied military and intelligence organizations and commercial companies to deliver foresight into critical matters that affect national security and the economy. BlackSky's data enables governments and businesses to see, understand and anticipate change as it happens, giving them the ultimate strategic advantage so they can act quickly. Our global team works with cutting-edge technology to make a difference around the world and prides itself on being people-first, customer-focused and fun.

This a hybrid role based out of Seattle, WA and will report to the Director of IT. As part of the IT  team, you will provide advanced technical leadership across our on‑premises and cloud infrastructures. This role will guide the ongoing modernization of core identity, compute, and security services, support hybrid cloud operations in AWS GovCloud and Azure, and ensure our systems meet current regulatory and cybersecurity requirements. This position will serve as the senior technical resource for the team, overseeing the health, configuration, and interoperability of the enterprise environment, partnering with Information Security Engineering to drive secure configuration baselines, and supporting business operations across all locations. The engineer will also lead efforts related to infrastructure resiliency, system hardening, and compliance readiness while providing expert-level support for servers, identity services, and cloud platforms.

Responsibilities:

• Supports corporate infrastructure across U.S, as well as AWS GovCloud / MSFT Azure.
• Supports hybrid cloud for Active Directory and Entra ID identity services. (ADDS, Entra Connect/Cloud Sync, etc.).
• Supports Windows Server 2019/2025 and Linux systems.
• Builds and supports Hyper-V virtual environments.
• Identity & Access Management (including Conditional Access).
• Supports Microsoft 365.
• Supports authentication infrastructure (NPS, RADIUS, Kerberos, PRT/WAM, SAML/OpenID/OAuth for SSO, SCIM).
• Ensures systems meet NIST 800-171 and FedRAMP Moderate requirements.
• Develops and maintains GPOs and secure configuration baselines.
• Provides day-to-day support for Servers, Windows 11, macOS, and Linux.
• Supports desktop and laptop imaging via Intune and Autopilot.
• Manages vendor relationships and internal cross-functional collaboration.
• Remediation of vulnerabilities across infrastructure (Network and servers/clients).
• Supports AWS (EC2, Route 53, VPC, SGs, NACLs, and cloud security best practices).
• Create & maintain infrastructure documentation.
• BCP/DR Planning and Implementation.
• Some after-hours and weekend support may be needed.
• Other relevant duties assigned.

Required Qualifications:

• Bachelor's degree in a relevant field of study or relevant experience.
• At least seven (7) years of enterprise engineering experience.
• Must have in-depth expertise in on prem AD, ADDS, PKI, DHCP, DNS, etc.
• Minimum of five (5) years of cloud IT engineering (AWS and Microsoft) experience.
• MCSE required.
• Basic to Intermediate Networking experience.
• Cisco Firepower experience.
• RHCSA or Linux+ (or equivalent).
• Hands-on experience implementing all 14 NIST 800-171 families.
• Technical implementation of CMMC Level 2 readiness
• At least five (5) years of PowerShell/Bash scripting experience.
• Available for after-hours and weekend support.

Preferred Qualifications:

• Experience with CrowdStrike (User/host troubleshooting, IT monitoring, and alerting purposes).
• Able to troubleshoot and correct user OS and application issues with Windows 11, Mac, Linux, iOS and Android.
• Strong ability to write clear technical documentation, from basic configuration documentation to service level a