While there may be reason to investigate Sussmann, there is still little basis to believe that Joffe's work was part of a grand scheme to smear Trump.
As the Times' Charlie Savage noted, the White House data allegedly "mined" from the White House was targeted before Trump took office.
Additionally, the incitement alleges that Joffe's company "had come to access and maintain dedicated servers for the EOP [Executive Office of the President] as part of a sensitive arrangement whereby it provided DNS resolution services to the EOP." So if Joffe's firm did record the web addresses of White House users, the Post's Glenn Kessler noted, then that may have simply been part of a pre-arranged contract rather than a politically-motivated breach of conduct.