Cybersecurity and Network Administrator

Carnegie Endowment for International Peace•Washington, DC

9d•$82,500 - $92,500•Hybrid

About The Position

The Carnegie Endowment for International Peace is seeking a full-time Cybersecurity and Network Administrator (CNA) to manage and secure its technology infrastructure and equip staff with cybersecurity best practices. This position will be responsible for addressing day-to-day notifications from cybersecurity and infrastructure systems, assisting end-users who have been compromised, and ensuring remediation of known threats and security gaps. The CNA will report to the Senior Technology and Cybersecurity Manager and collaborate with outsourced Tier 3 network engineers to ensure optimal performance of infrastructure systems. The role involves daily operations of security solutions, including the identification, investigation, and resolution of security breaches. The CNA will monitor, assess, and enhance security infrastructure, ensuring compliance with industry standards and safeguarding sensitive data. Additionally, the position will provide occasional end-user training and create documentation on security best practices. The role also encompasses managing network infrastructure in Washington DC and international centers, overseeing on-premise and cloud systems including Meraki switches, wireless access points, and firewalls. Knowledge of firewall configuration and PowerShell scripting is optimal. Experience with specific systems like CrowdStrike, Rapid7, Avanan Checkpoint, KnowBe4, Cisco Secure Access, and Azure tools (Defender, Security Center, Purview) is preferred. Experience with network design and architecture is a plus. The ideal candidate will also have experience managing Cloud Infrastructure-as-a-Service (IaaS) environments, preferably Azure, and SaaS business productivity tools, particularly Microsoft 365. Prior M365 administration is highly desired, especially for environments with 300+ users utilizing Outlook, MS Office, Teams, and SharePoint. Exposure to Claude Enterprise, AI tools, and MCP configurations is also beneficial. The position will also assist with tier 2 helpdesk tickets, focusing on security and networking issues, and collaborate with IT team members to ensure proper end-user support and access to electronic resources.

Requirements

4+ years of related experience.
Related degree such as a bachelor's in computer science, cybersecurity, or information technology, or the equivalent combination of education and experience.
Knowledge of firewall configuration.
Knowledge of PowerShell scripting.
Experience managing Cloud infrastructure-as-a-service environments, preferably in Azure.
Experience managing SaaS business productivity tools, particularly Microsoft 365.
Experience running M365 for a similar environment with 300+ users using Outlook, MS Office, Teams, SharePoint and other M365 tools.
Self-motivated.
Curious to learn.
Love troubleshooting.
Always looking for the best long-term solution.
Experience organizing and managing projects.
Experience producing documentation.
Excellent communication skills.
Time management skills.
Critical thinking.
Attention to detail.

Nice To Haves

Experience with CrowdStrike, Rapid7 (SIEM and vulnerability management), Avanan Checkpoint, KnowBe4, Cisco Secure Access, and Azure's tools such as Defender (Advanced Threat Protection), Security Center, and Purview.
Experience with network design and architecture.
Prior M365 administration.
Exposure to Claude Enterprise and other AI tools.
MCP configurations.
Certifications in IT infrastructure or networking, especially related to Microsoft, Cisco, or Cisco Meraki.
Interest in international relations or political science.

Responsibilities

Manage and secure technology infrastructure.
Equip staff with cybersecurity best practices.
Address day-to-day notifications generated by cybersecurity and infrastructure systems.
Assist end-users who have been compromised.
Ensure remediation of known threats and security gaps.
Manage day-to-day operations of security solutions.
Identify, investigate, and resolve security breaches detected by security systems.
Monitor, assess, and enhance security infrastructure.
Ensure compliance with industry standards.
Safeguard sensitive data.
Provide occasional end-user training.
Create documentation around security best practices.
Manage network infrastructure in Washington DC and international centers.
Oversee on-premise and cloud systems and infrastructure, including Meraki switches, wireless access points, and firewalls.
Assist with tier 2 helpdesk tickets, especially those related to security and networking.
Work with other IT team members to ensure end users receive proper support and access to electronic resources.