IT Systems Administrator

Surefire Cyber • Hanover, MD

15h • Remote

About The Position

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Their client-centric approach reduces stress and provides clients the confidence needed to prepare, respond, and recover from cyber incidents – and fortify their cyber resilience after an event. Surefire Cyber’s approach and delivery are designed by industry veterans who have worked shoulder-to-shoulder with law firms, insurance carriers, brokers, law enforcement, and impacted organizations in responding to cyber incidents. They are marshaling this experience to address the industry’s persistent challenges of efficiency, predictability, and transparency. The company is forging a culture of collaboration, innovation, and unwavering commitment to the needs of clients, partners, and colleagues, dedicated to fostering an environment where every member feels valued, empowered, and driven towards collective growth, with values of teamwork, tenacity, and empathy. The ideal candidate is early in their IT career, service-oriented, reliable, and calm under pressure. They communicate clearly with non-technical teammates, know when to solve a problem versus escalate, and bring an eye for process improvement. They are curious about automation and new tools, and excited about growing into a role that shapes modern, lean IT operations. As the IT Systems Administrator, this person will be the internal point person for all team members whenever they have technical issues, handling what they can and escalating when needed. They will help manage the Microsoft 365 environment, support identity and access management, maintain the device fleet, and interact with key technology vendors, partnering closely with the people team for smooth new hire and departing employee experiences.

Requirements

• 1–3 years of experience in an IT, systems administration, or helpdesk role supporting a remote or distributed workforce.
• Working knowledge of Microsoft 365: Exchange Online, Teams, SharePoint, OneDrive, and security & compliance tools.
• Familiarity with identity/directory/MDM platforms (e.g., JumpCloud, Intune, Okta, or similar).
• Familiarity with MFA tools (e.g., Duo, Microsoft Authenticator, or similar).
• Familiarity with endpoint security / EDR solutions (e.g., SentinelOne, CrowdStrike, Defender, or similar).
• Basic understanding of identity and access management, endpoint security, and networking fundamentals (VPN, DNS, firewalls).
• Ability to write clear documentation, runbooks, and end-user instructions.
• Strong communication and service orientation — comfortable supporting non-technical users and explaining tradeoffs.
• Ability to work independently, manage multiple priorities, and know when to escalate.

Nice To Haves

• Experience in a security-focused environment: MSP/MSSP, SOC, incident response, or similar.
• Scripting or automation skills (PowerShell, Python) for routine task optimization.
• Familiarity with security frameworks such as NIST CSF or CIS Controls.
• Exposure to AI platforms (e.g., ChatGPT, Claude, or similar) and leveraging AI agents to streamline workflows.

Responsibilities

• Serve as the internal point of contact for all team member technical issues — device problems, login access, troubleshooting, and “how do I…?” questions; resolve independently or escalate as appropriate.
• Manage and triage IT tickets, ensuring timely resolution and clear communication.
• Provide remote support across time zones: installations, connectivity, and access issues.
• Maintain internal IT documentation, FAQs, and how-to guides.
• Work with the people team to keep processes, policies, and operational documents current and communicated.
• Manage day-to-day administration of our Microsoft 365 environment — email, collaboration, and cloud productivity tools.
• Manage user accounts, groups, licenses, and roles across the M365 tenant.
• Implement and maintain policies for data loss prevention, retention, secure collaboration, and conditional access.
• Structure M365 resources to support collaboration while enforcing least-privilege access.
• Administer centralized identity, device management, and directory services.
• Manage MFA enrollment, enforcement, and troubleshooting.
• Monitor and triage third-party vendor SOC alerts, escalating as appropriate.
• Manage endpoint security: agent deployment, health monitoring, and alert triage.
• Implement and enforce access control standards — least privilege, role-based access, and regular access reviews.
• Maintain accurate asset inventory, reconciling against vendor records; manually track non-laptop assets such as monitors and other home office equipment.
• Partner with the internal technology team to support investigation of any potential internal anomalous behavior.
• Manage the lifecycle of company devices — primarily laptops — from procurement and provisioning through reuse and secure disposal.
• Standardize device build configurations aligned to security and compliance requirements.
• Ensure all devices meet required security baselines: disk encryption, EDR, OS patching, and local admin controls.
• Collaborate with the people team to deliver a consistent, high-quality onboarding experience for new hires.
• Prepare and ship devices; create accounts and assign role-based access.
• Enroll users and devices in required security and identity systems.
• Own the technical offboarding process: account disablement, access removal, data handoff, and device recovery.
• Maintain and regularly refine onboarding and offboarding checklists to reduce risk and ensure nothing falls through the cracks.
• Serve as an additional technology team contact for key IT and security vendors.
• Help manage the inventory of software licenses and SaaS subscriptions, ensuring the right number of seats and tiers.
• Identify and reclaim unused licenses; flag opportunities to consolidate or optimize tools.
• Track renewals and entitlements; support finance and leadership on budgeting and capacity planning.
• Maintain and update IT and InfoSec policies in collaboration with the CTO and the broader technology team.
• Ensure policies align with how the environment is actually configured, closing gaps between written policy and practice.
• Maintain clear, current documentation on architectures, standards, and procedures.
• Monitor the health of core IT systems and security controls; respond to alerts and anomalies.
• Identify recurring issues and drive root-cause fixes rather than one-off workarounds.
• Look for opportunities to automate repetitive tasks — through scripts, workflows, policy templates, or AI-assisted tools.
• Stay current on best practices for identity, endpoint security, and M365 administration.

Benefits

• Competitive compensation plan and total rewards package for team members.
• Remote workforce.
• Generous paid time off plan and floating holidays.
• Paid parental leave.
• Employer paid premiums for both team members and their dependents for medical, dental, and vision.
• Comprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits.
• Professional development and career advancement opportunities.
• We prioritize employee growth and development through a robust performance management platform to provide ongoing coaching, clear feedback, recognition, and opportunities for career growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed
• Number of Employees: 1-10 employees