Location: Longmont, CO (onsite)
Experience: 5+ years System Administration experience across Windows Server, AD, M365, and core networking.
Minimum Education: Associate degree in Information Technology or related field is required.
Compensation: $80,000-$120,000 depending on experience.
Who We Are
nLIGHT-DEFENSE Systems, Inc. is one of the nation’s leading developers of Directed Energy systems, which is a top modernization priority of the Department of Defense. Our High Energy Laser (HEL) systems, Adaptive Optical (AO) systems, and Acquisition / Pointing / Tracking (APT) solutions are designed to overcome the most difficult challenges facing the deployment of high energy laser solutions to the United States military and our allies. Located in Longmont, Colorado, nLIGHT-DEFENSE Systems, Inc. is a vertically integrated business that leverages internal capabilities – from semiconductor device through target identification – to develop systems that are both high-performance and cost-effective. We continue to invest in capabilities, facilities and technology to bring leading edge HEL solutions to the warfighter. This is a great opportunity to work at a company that is on the leading edge of the HEL industry and provides a culture of excellence and commitment to delivering solutions to the warfighter and our country.
Headquartered in Camas, Washington, nLIGHT is a publicly listed company (NASDAQ: LASR).
Summary:
The System Administrator supports and enhances the company’s IT infrastructure across servers, networks, virtualization, identity services, and endpoint platforms. This role partners closely with the Senior System Administrator to maintain reliable operations, strengthen security posture, manage image and patch lifecycles, and act as a Tier 2/3 escalation point. The ideal candidate is hands-on, detail driven, security‑minded, and comfortable working across Windows and Linux environments.
All applicants must possess or be qualified to obtain a U.S. DoD Personnel Security Clearance. Preference will be given to candidates with an existing U.S. DoD Personnel Security Clearance. Further information on requirements to obtain a security clearance is available at:
https://www.dcsa.mil/mc/pv/mbi/gicp/. Please review this information before applying.
Responsibilities:
- Manage Windows and Linux servers; maintain Hyper‑V/VMware environments.
- Build, maintain, and secure Windows and Linux images, understanding key Linux variances (distros, package managers, service frameworks, SELinux/AppArmor, kernel modules).
- Support LAN/WAN networking, VPN, VLANs, DNS/DHCP, and general connectivity.
- Participate in maintenance windows and on‑call rotations.
- Apply CIS/ STIG hardening across Windows & Linux server and endpoint images.
- Lead OS patch cycles and vulnerability review, performing threat analysis using CVE feeds, vendor advisories, and exploit intelligence.
- Ensure alignment with CMMC, DFARS 252.204‑7012, NIST 800‑171, and internal security controls.
- Support audit preparation through proper documentation (configs, change records, test results).
- Administer Active Directory, Azure AD, Group Policy, and Microsoft 365 services.
- Enforce least‑privilege, manage privileged accounts, and support access reviews.
- Manage service accounts, licensing, and lifecycle tasks (onboarding/offboarding).
- Serve as Tier 2/3 escalation for complex incidents and root‑cause investigations.
- Maintain standard Windows/Linux endpoint images and patch baselines.
- Produce and maintain documentation (runbooks, SOPs, diagrams).
- Provide advanced support for Windows endpoints, A/V systems, VPN, and executive users.
Required Experience / Capability:
- Commitment to Excellence. Attention to Detail. Pride in Workmanship.
- 5+ years System Administration experience across Windows Server, AD, M365, and core networking.
- Hands‑on experience with Hyper‑V and/or VMware.
- Practical Linux administration experience including building, securing, and maintaining OS images across different distributions.
- Experience performing patch management and threat analysis (CVE evaluation, prioritization, and remediation planning.
- Strong troubleshooting, documentation skills, and customer‑service mindset.
- PowerShell scripting; automation/orchestration tools (Ansible, Packer, etc.).
- Exposure to identity governance, DUO, Keeper, or endpoint management platforms.
- Familiarity with GCC High, FortiGate, Dynamics 365, or manufacturing/cleanroom environments.
Benefits Summary:
- 4 weeks of Paid Time Off per year
- 11 paid Holidays
- Employee Stock Purchase Plan
- Tuition Assistance Program
- Health (ACA Gold Plan), Vision and Dental Care paid by employer 100% for Employee and 75% for Dependents
- Paid Family Leave, Short and Long Term Disability paid by employer 100%
- Competitive 401k with company match and immediate vesting
Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or age. For more information about our commitment to equal employment opportunity, please see this government poster: Know Your Rights: Workplace Discrimination is Illegal. If you are an individual with a disability and need a reasonable accommodation in the application or hiring process, please contact Human Resources at [email protected]. 