Cybersecurity and Network Administrator

Carnegie Endowment for International Peace•Washington, DC

2d•Hybrid

About The Position

The Carnegie Endowment for International Peace is seeking a full-time Cybersecurity and Network Administrator (CNA) to manage and secure its technology infrastructure and equip staff with cybersecurity best practices. This position will be responsible for addressing the day-to-day notifications generated by our cyber security and infrastructure systems, for assisting end-users who have been compromised, and for ensuring that any known threats and security gaps are remediated. The CNA will work under the supervision of the Senior Technology and Cybersecurity Manager and will also work closely with Carnegie's outsourced Tier 3 network engineers to ensure that all infrastructure systems are performing as expected. The Cybersecurity and Network Administrator will also be responsible for day-to-day operations of the security solutions as well as the identification, investigation, and resolution of security breaches detected by those systems. The CNA will monitor, assess, and enhance our security infrastructure, ensuring compliance with industry standards and safeguarding sensitive data, and will also provide occasional end-user training and create documentation around security best practices. This position is also responsible for managing our network infrastructure both in Washington DC and our international centers. This includes overseeing the on-premise and cloud systems and infrastructure, including Meraki switches, wireless access points, and firewalls. This position will also assist with tier 2 helpdesk tickets, especially those related to security and networking. This position will work with other IT team members to ensure end users receive proper support and access to electronic resources as necessary.

Requirements

4+ years of related experience.
Bachelor's degree in computer science, cybersecurity, or information technology, or the equivalent combination of education and experience.
Knowledge of firewall configuration.
Knowledge of PowerShell scripting.

Nice To Haves

Experience with CrowdStrike, Rapid7 (SIEM and vulnerability management), Avanan Checkpoint, KnowBe4, Cisco Secure Access, and Azure's tools such as Defender (Advanced Threat Protection), Security Center, and Purview.
Experience with network design and architecture.
Experience managing Cloud infrastructure-as-a-service environments, preferably in Azure.
Experience managing SaaS business productivity tools, particularly Microsoft 365.
Prior M365 administration.
Experience running M365 for a similar environment with 300+ users using Outlook, MS Office, Teams, SharePoint and other M365 tools.
Exposure to Claude Enterprise and other AI tools and MCP configurations.
Certifications in IT infrastructure or networking, especially related to Microsoft, Cisco, or Cisco Meraki.
Interest in international relations or political science.
Experience organizing and managing projects.
Experience producing documentation.
Excellent communication skills.
Time management skills.
Critical thinking.
Attention to detail.

Responsibilities

Addressing day-to-day notifications generated by cyber security and infrastructure systems.
Assisting end-users who have been compromised.
Ensuring that any known threats and security gaps are remediated.
Day-to-day operations of security solutions.
Identification, investigation, and resolution of security breaches.
Monitoring, assessing, and enhancing security infrastructure.
Ensuring compliance with industry standards and safeguarding sensitive data.
Providing occasional end-user training and creating documentation around security best practices.
Managing network infrastructure both in Washington DC and international centers.
Overseeing on-premise and cloud systems and infrastructure, including Meraki switches, wireless access points, and firewalls.
Assisting with tier 2 helpdesk tickets, especially those related to security and networking.
Working with other IT team members to ensure end users receive proper support and access to electronic resources.