Manager of IT

Allocor Tech•Crozet, VA

9d•$115,000 - $145,000•Onsite

About The Position

Allocortech is implementing AS9100 and raising production rate. The company is moving to Microsoft 365 and Azure, and standing up Fishbowl for inventory and manufacturing control. There is no QMS application in place, and additional sites and an approximate doubling of headcount are planned. This role exists to put a competent, authorized owner on IT infrastructure and cybersecurity so systems that hold product and quality information remain available, controlled, and auditable as volume and sites increase. The Manager of IT is the process owner for enterprise information technology and cybersecurity. The role administers identity, endpoints, network, collaboration platforms, and the applications Operations and Engineering depend on, including Fishbowl. The role manages the existing third-party IT vendor, executes the Google Workspace to Microsoft 365 / Azure migration, and remains hands-on.

Requirements

Bachelor’s in information systems, computer science, engineering, or equivalent experience.
5–8 years administering enterprise productivity and infrastructure platforms, including hands-on ownership rather than ticket dispatch only.
Demonstrated Google Workspace to Microsoft 365 / Azure migration, or an equivalent identity-mail-file-endpoint cutover, with records of the change.
Working knowledge of Entra ID, Exchange Online, SharePoint/OneDrive, Teams, Intune, and Conditional Access.
Demonstrated ownership of cybersecurity controls for an organization — policy plus implementation, not advisory-only.
Experience managing an MSP or equivalent third-party IT provider, including a written statement of work.
Working familiarity with AS9100 or ISO 9001 obligations that touch infrastructure and documented information (Clauses 7.1.3, 7.2, 7.5), or equivalent regulated-manufacturing practice.
Able to perform the work on-site with flexibility and to travel to other company sites as required.
Must be a U.S. Person as defined under ITAR 22 C.F.R. § 120.15.

Nice To Haves

Microsoft certification at administrator level, or equivalent demonstrated skill.
Implementation or administration of Fishbowl or a comparable SMB manufacturing inventory / MRP system.
NIST SP 800-171 / CMMC exposure or a written system security plan for CUI / export-controlled data.
Security certification (Security+, CISSP, CISM) or equivalent program ownership.
Prior IT ownership during a period of rapid headcount or multi-site growth.
Direct participation in an AS9100 or ISO 9001 implementation or customer information-security review.

Responsibilities

Own infrastructure required for operation of processes (Clause 7.1.3): identity, endpoints, network, file and collaboration systems, backup, and the hosting or tenant arrangements for business applications.
Control documented information residing in IT systems (Clause 7.5): access, retention, retrieval, protection from unintended alteration or loss, and disposition of obsolete electronic records.
Define and record competence for IT administration and privileged access (Clause 7.2): who may grant accounts, who may change production or inventory system configuration, what training records Quality can pull.
Plan and execute the migration from Google Workspace to Microsoft 365 and Azure (Entra ID, Exchange Online, SharePoint/OneDrive, Teams, Intune). Keep cutover records. Do not leave dual-uncontrolled repositories of design or quality files.
Stand up and administer Fishbowl with Operations. Operations owns inventory and manufacturing process. IT owns platform availability, identity integration, backup, access model, and vendor coordination.
Do not substitute SharePoint or shared drives for a QMS. When Quality selects a QMS application, provide infrastructure, identity, backup, and access control so Clause 7.5 can be demonstrated.
Own cybersecurity for company systems: MFA and Conditional Access, least-privilege identity, endpoint protection, logging, incident response, and protection of ITAR-controlled technical data in mail, files, and endpoints.
Establish joiner–mover–leaver, access review, and offboarding so departed personnel cannot reach design, test, or production records.
Manage the third-party IT vendor: statement of work, SLA, architectural control retained by Allocortech, and the decision of what remains outsourced.
Publish a site-IT standard that can be applied when additional locations come online — same identity, access, backup, and support pattern.
Maintain an asset inventory and a lightweight change-control practice for systems that hold product or quality records. Avoid process theater.
Represent IT and cybersecurity at management review with evidence an auditor can sample: access reviews, backup restore tests, vendor performance, incidents, and infrastructure fitness.