IT Security Administrator
About The Position
The IT Security Administrator supports PMAT’s internal cybersecurity and IT operations, working with IT leadership to strengthen endpoint security, remediate vulnerabilities, support compliance initiatives, and maintain secure, reliable systems across Microsoft cloud and on-premises environments. The role focuses on security monitoring, vulnerability remediation, endpoint protection, CMMC compliance, and technical documentation. The administrator uses Microsoft Defender, Sentinel, Intune, Entra ID, and Microsoft 365 GCC High to investigate security alerts, address vulnerabilities, maintain endpoint compliance, and support audit readiness. The position also assists with escalated IT support and security-related tasks across Microsoft Azure, VMware ESXi/vCenter, and limited AWS environments. The role is onsite for the first three months, with eligibility for a hybrid schedule afterward, subject to performance, business needs, and management approval. Work may take place in PMAT offices and, in some cases, a government facility.
Requirements
- 1–3 years of experience in IT support, cybersecurity operations, systems administration, or a related technical role.
- Hands-on experience with Microsoft Defender for Endpoint, Microsoft Sentinel, Microsoft Intune, or Microsoft Defender for Office 365.
- Experience supporting Microsoft Azure, including basic administration, identity management, access controls, and troubleshooting.
- Experience with VMware ESXi/vCenter, including virtual machine management, monitoring, and basic troubleshooting.
- Working knowledge of Microsoft 365, Microsoft Entra ID, Active Directory, and Windows administration.
- Understanding of endpoint security, vulnerability management, patching, security monitoring, and incident response fundamentals.
- Experience troubleshooting technical issues and maintaining accurate technical documentation.
- Strong organizational skills and ability to independently manage assigned tasks.
- Associate degree or higher in Information Technology, Computer Science, Cybersecurity, or a related field.
- Current certification meeting DoD IAT Level II requirements at minimum, or ability to obtain it within six months of hire.
- Completion of at least one AWS or Microsoft Azure training course, or ability to complete one within six months of hire.
- U.S. citizenship required; dual citizenship is not permitted.
- No security clearance required.
Nice To Haves
- Knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, VPNs, and firewalls.
- Experience with Tenable or similar vulnerability management and remediation platforms.
- Exposure to CMMC, NIST SP 800-171, security audits, or regulated IT environments.
- Experience investigating phishing attempts, security incidents, and suspicious activity.
- Familiarity with AWS services, IAM, EC2, and cloud monitoring.
- Experience with PowerShell scripting, security automation, and remediation workflows.
- Experience with centralized logging, security event analysis, and incident tracking.
- CompTIA Security+, Network+, Microsoft security certifications, or equivalent technical knowledge.
- Experience supporting Microsoft 365 GCC High or environments handling Controlled Unclassified Information (CUI).
- Experience with IT ticketing and remote support platforms such as ConnectWise.
Responsibilities
- Monitor and investigate security alerts, phishing attempts, and suspicious activity using Microsoft Defender, Sentinel, and other security platforms.
- Perform initial incident triage, document findings, and coordinate incident response and remediation efforts.
- Identify, prioritize, and remediate security vulnerabilities using Tenable, Microsoft Defender, and other tools.
- Manage security updates, address configuration weaknesses, and track vulnerability findings through resolution.
- Support Microsoft Intune, Entra ID, and Microsoft 365 GCC High security operations, including device compliance, endpoint protection, access reviews, MFA, Conditional Access, and security policy enforcement.
- Assist with CMMC and NIST SP 800-171 compliance activities, including security assessments, audit evidence collection, control validation, remediation tracking, and maintaining audit readiness.
- Develop and maintain security procedures, SOPs, incident records, vulnerability reports, system inventories, and compliance documentation.
- Provide technical support and troubleshooting across cloud and on-premises environments, including Microsoft Azure, VMware ESXi/vCenter, and limited AWS resources.
- Assist with security automation, system hardening, and continuous improvement initiatives.
- Maintain accurate technical documentation and track remediation activities through completion.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
Associate degree
