Internship Cmmc Jobs in Silver Spring, MD (NOW HIRING)

One of Inc 5000's fastest growing companies, come join us!  Our work environment is limitless, you matter to us, your great work will be recognized, and there are many opportunities for advancement. Davis Unlimited Information Technologies, Inc (DUIT) wants you! We have an opening for a System Administrator SkillBridge intern in our office headquarters. 

Davis Unlimited Information Technologies (DUIT)'s SkillBridge program is developed so the Service member not only obtain Industry skill sets, but also the skill sets required to meet customer's needs after completion of the SkillBridge program. We are looking to not only have the service member gain industry knowledge but also the knowledge required to employ them upon completion. 

The Path

At our headquarters office in Maryland, we will assist retiring or transitioning Military Service members. DUIT has developed extensive SkillBridge job training and career development programs in the following career fields to enhance the opportunities for separating Service members:

• Program Manager
• Program Integrator
• Hardware Technician
• Acquisition Professional
• Network Engineer
• Software Engineer
• Cybersecurity Engineering
• IT Staffing​

All Applicants must have the following: approval from command and able to follow training plan requirements . All information provided is subject to verification. 

What you will get to do:

System administrator: will get to use PowerShell Scripting, work within Microsoft Entra ID, Microsoft Azure, Microsoft Intune, and Microsoft Defender.  The system administrator will learn security frameworks such as NIST SP 800-171 and CMMC.

Requirements 

• 5+ years administering Microsoft environments; 2–3+ years in Microsoft 365 GCC (GCC or GCC High) and Azure Government
• Strong PowerShell scripting for automation (Exchange Online, Entra ID, Intune, SharePoint, Graph)
• Hands-on with hybrid identity (Entra ID/Azure AD), Entra Connect/Cloud Sync, Conditional Access, MFA, PIM
• Endpoint management with Intune (Gov): device compliance, app protection, BitLocker, Autopilot, Windows Update for Business
• Email/collab: Exchange Online (mail flow, EOP, DKIM/DMARC/SPF), Teams (GCC nuances), SharePoint/OneDrive governance
• Security stack: Microsoft Defender for Endpoint/Office/Identity, Defender for Cloud/Cloud Apps, Sentinel basics (KQL)
• Azure (Gov): subscriptions/management groups, RBAC, VNets/NSGs, private endpoints, Key Vault, Storage/SAS, Backup/ASR
• Governance & compliance: Azure Policy, blueprints/landing zones (Gov), tagging, cost management, least-privilege design
• Backup/DR and change management (ITIL fundamentals); solid documentation skills

GCC/Government Cloud Specifics

• Understanding of GCC vs GCC High boundaries, FedRAMP/NIST 800-171 alignment, and feature parity limitations
• Data residency/sovereignty and egress controls; third-party app restrictions in Gov tenants
• S/MIME, and certificate lifecycle basics

CMMC (v2.0) Knowledge & Practices

• Working knowledge of CMMC Levels 1–2 and mapping to NIST SP 800-171/172 requirements
• Experience implementing and operating:
  • Access control: role-based access, Conditional Access, device compliance, session controls
  • Identification & authentication: MFA everywhere.
  • Audit & logging: unified audit log, retention, Sentinel/Log Analytics queries & alerting; evidence collection. Splunk, Datadog or equivalent.
  • Configuration management: secure baselines (STIG-informed), change tracking, policy as code (Azure Policy)
  • Incident response: response procedures, post-incident reporting
  • Data protection: Purview sensitivity labels, DLP (Exchange/SharePoint/Teams/endpoints), Information Barriers, eDiscovery
  • Vulnerability & patch management across servers, endpoints, and cloud resources
• Contributing to SSPs, POA&Ms, and control evidence; supporting gap assessments and readiness for C3PAO audits
• Handling and safeguarding CUI, media protection, and secure file sharing within Gov boundaries

Networking & Infrastructure

• Site-to-site VPN/ExpressRoute concepts for Gov, private DNS, split-tunnel considerations
• Zero Trust segmentation principles; endpoint and identity as security perimeter

Automation & DevOps-Adjacent

• PowerShell modules (ExchangeOnlineManagement, Microsoft.Graph, Az, AzureAD/Entra), scheduled jobs, desired state configs
• CI/CD-style admin habits for scripts (version control, peer review), ARM/Bicep/Terraform (Gov aware) a plus

Soft Skills

• Clear technical writing for auditors and leadership; ability to translate controls into actionable configurations
• Cross-team collaboration (Security, Compliance, Networking), vendor coordination, and user communication/training

Certifications (Nice to Have)

• Microsoft: MS-102 (or MD-102), AZ-104, AZ-500, SC-200/300/400
• Compliance/Security: Security+, CySA+, CISSP
• CMMC ecosystem: CCP/CCL (or equivalent training), experience with RPO/C3PAO engagements