Network System Administrator

Network System AdministratorThe Network System Administrator will administer and maintain the reliability of Lynk's corporate network and core infrastructure — connecting Chevy Chase, MD and Chantilly, VA and supporting a globally distributed, mission-critical operation. This role is responsible for network administration, server and systems infrastructure, and the security/compliance posture of Lynk's infrastructure stack, including maintaining endpoint compliance in support of Lynk's CMMC Level 2 requirements. The role also serves as an escalation point for basic end-user IT support. This position is based in our Chevy Chase, MD office and will require some travel to our Chantilly, VA office as needed (Hybrid: 2–3 days onsite per week).Lynk Global is the inventor of satellite direct-to-device (D2D) technology and holds the world's only commercial license from the FCC to operate a commercial D2D system. Today, Lynk allows mobile network operators' subscribers to send and receive text messages to and from space via standard, unmodified mobile devices. Lynk's service has been tested and proven on all seven continents, has regulatory approvals in more than 30 countries, and is currently being deployed commercially under more than 40 MNO commercial service contracts covering approximately 50 countries.Our technology will enable all 8 billion people on the planet to stay connected with the phone already in their pocket. Everywhere. No matter what.By joining Lynk, you will have the opportunity to directly touch the lives of billions. Your mission will be to bring mobile broadband to billions, pull hundreds of millions out of poverty, and save countless lives.Duties & ResponsibilitiesConfigure, deploy, and maintain LAN/WAN, wireless, VPN, and firewall infrastructure across Lynk office and lab locationsAdminister network segmentation, routing, and VLANs, and support capacity planning as the company scalesAdminister and harden core infrastructure: Microsoft Entra ID (Azure AD), Conditional Access, DNS/DHCP, Office 365, and endpoint security (ESET, Microsoft Defender) at the systems-administration levelManage endpoint and device compliance through Microsoft Intune and MDM platforms (e.g., NinjaOne), including policy design, patch management, and fleet-wide enforcementDeploy, monitor, and maintain security posture via Microsoft Defender (Endpoint/365) — threat detection, alerting, and remediationManage server infrastructure (physical and virtual), including provisioning, patching, backup, and lifecycle managementMonitor network and infrastructure health; lead incident response and root-cause analysis for outages and performance issuesImplement and maintain infrastructure security controls (firewalls, VPN, MFA, network segmentation, endpoint protection) in line with ITAR and export-control obligationsSupport Lynk's CMMC Level 2 compliance program — maintain endpoint compliance (patching, configuration baselines, encryption, access control) across the device fleet and evidence controls for auditsMonitor and remediate endpoint compliance drift via Intune/NinjaOne and Microsoft Defender to keep the environment aligned with NIST SP 800-171 control requirementsPartner with security/compliance stakeholders on System Security Plans (SSPs), POA&Ms, and audit readiness for CMMC assessmentsDocument network topology, infrastructure configuration, and disaster recovery/business continuity proceduresBasic End-User IT SupportServe as a secondary/escalation point of contact for basic end-user technical issues (hardware, software, connectivity, account access)Provision and configure end-user hardware (laptops, peripherals) in line with security and compliance baselinesTroubleshoot common Windows/macOS and Office 365 issues for staff as neededSupport onboarding/offboarding from an infrastructure and access-management perspective (accounts, device enrollment, permissions)Qualifications4+ years of experience in network engineering, systems administration, or infrastructure managementHands-on experience administering and maintaining LAN/WAN, VPN, firewall, and wireless network infrastructureStrong Windows Server and macOS environment administration experienceExperience managing Microsoft Entra ID (Azure AD), Conditional Access, and Office 365 at an administrative/architectural levelHands-on experience with Microsoft Intune for device/endpoint management and compliance policyExperience with MDM platforms such as NinjaOne, ManageEngine, or similarExperience deploying and managing Microsoft Defender (Endpoint/365) or comparable endpoint security/EDR toolingUnderstanding of network security fundamentals: firewalls, segmentation, VPN, and endpoint protectionFamiliarity with CMMC Level 2 / NIST SP 800-171 control requirements and experience maintaining endpoint compliance in a regulated environmentComfortable providing basic end-user technical support alongside infrastructure dutiesStrong documentation, troubleshooting, and incident-response skillsRelevant certification preferred (e.g., CompTIA Network+/Security+, CCNA, Microsoft Certified: Intune/Endpoint Manager, or equivalent experience)BonusExperience with PowerShell or other scripting/automation toolsDirect experience preparing for or supporting a CMMC Level 2 assessment (SSP/POA&M development, C3PAO audit support)Experience supporting infrastructure in a regulated or export-controlled (ITAR) environmentPrevious startup experience is a strong plusITAR RequirementsTo comply with U.S. Government export control regulations (ITAR), applicants must be one of the following: (i) a U.S. citizen or national, (ii) a lawful permanent resident (green card holder), (iii) a refugee under 8 U.S.C. § 1157, or (iv) an asylee under 8 U.S.C. § 1158. Individuals who do not meet these criteria must be eligible to obtain the necessary authorizations from the U.S. Department of State.Learn about ITAR here: LocationChevy Chase, MD — Hybrid (2–3 days onsite per week)