IT Security Administrator
About The Position
As an IT Security Administrator at PMAT, you will support internal cybersecurity and IT operations alongside IT leadership. The role focuses on security monitoring, vulnerability remediation, endpoint protection, CMMC compliance, and technical documentation across Microsoft cloud and on-premises environments. You will primarily use Microsoft Defender, Intune, Entra ID, and Microsoft 365 GCC High to investigate alerts, address vulnerabilities, maintain endpoint compliance, and support audit readiness. You will also assist with escalated IT support and security-related work involving Microsoft Azure, VMware ESXi/vCenter, and limited AWS environments. You will help implement security improvements, maintain accurate documentation, and track remediation activities through completion. The position is onsite for the first three months, with eligibility for a hybrid schedule afterward, subject to performance, business needs, and management approval. The work is based at PMAT’s San Diego office; work at a government facility may sometimes be required. The posting states no travel is required, while the work-environment section notes that travel may be required for customer engagement, team coordination, and potentially business development. U.S. citizenship is required; dual citizenship is not permitted. No clearance is required. Candidates must have an Associate degree or higher in a relevant field and meet DoD IAT Level II certification requirements or be able to obtain a qualifying certification within six months of hire. They must also have completed an AWS or Microsoft Azure training course or be able to complete one within six months of hire.
Requirements
- 1–3 years of experience in IT support, cybersecurity operations, systems administration, or a related technical role.
- Hands-on experience with Microsoft Defender for Endpoint, Microsoft Sentinel, Microsoft Intune, or Microsoft Defender for Office 365.
- Experience supporting Microsoft Azure, including basic administration, identity management, access controls, and troubleshooting.
- Experience with VMware ESXi/vCenter, including virtual machine management, monitoring, and basic troubleshooting.
- Working knowledge of Microsoft 365, Microsoft Entra ID, Active Directory, and Windows administration.
- Understanding of endpoint security, vulnerability management, patching, security monitoring, and incident response fundamentals.
- Experience troubleshooting technical issues and maintaining accurate technical documentation.
- Strong organizational skills and ability to independently manage assigned tasks.
- Associate degree or higher in Information Technology, Computer Science, Cybersecurity, or a related field.
- Current certification meeting DoD IAT Level II requirements, at minimum, or ability to obtain it within six months of hire.
- Completion of at least one AWS or Microsoft Azure training course, or ability to complete one within six months of hire.
- U.S. citizenship required; dual citizenship is not permitted.
Nice To Haves
- Knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, VPNs, and firewalls.
- Experience with Tenable or similar vulnerability management and remediation platforms.
- Exposure to CMMC, NIST SP 800-171, security audits, or regulated IT environments.
- Experience investigating phishing attempts, security incidents, and suspicious activity.
- Familiarity with AWS services, IAM, EC2, and cloud monitoring.
- Experience with PowerShell scripting, security automation, and remediation workflows.
- Experience with centralized logging, security event analysis, and incident tracking.
- CompTIA Security+, Network+, Microsoft security certifications, or equivalent technical knowledge.
- Experience supporting Microsoft 365 GCC High or environments handling Controlled Unclassified Information (CUI).
- Experience with IT ticketing and remote support platforms such as ConnectWise.
Responsibilities
- Monitor and investigate security alerts, phishing attempts, and suspicious activity using Microsoft Defender, Sentinel, and other security platforms.
- Perform initial incident triage, document findings, and coordinate incident response and remediation efforts.
- Identify, prioritize, and remediate vulnerabilities using Tenable, Microsoft Defender, and other tools.
- Manage security updates, address configuration weaknesses, and track vulnerability findings through resolution.
- Support Microsoft Intune, Entra ID, and Microsoft 365 GCC High security operations, including device compliance, endpoint protection, access reviews, MFA, Conditional Access, and security policy enforcement.
- Assist with CMMC and NIST SP 800-171 compliance activities, including security assessments, audit evidence collection, control validation, remediation tracking, and maintaining audit readiness.
- Develop and maintain security procedures, SOPs, incident records, vulnerability reports, system inventories, and compliance documentation.
- Provide technical support and troubleshooting across cloud and on-premises environments, including Microsoft Azure, VMware ESXi/vCenter, and limited AWS resources.
- Assist with security automation, system hardening, and continuous improvement initiatives.
- Maintain accurate technical documentation and track assigned remediation activities through completion.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
Associate degree
