SENIOR IT SYSTEMS & SECURITY ENGINEER- Atlanta, Georgia

ERMI•Atlanta, GA

18d•Onsite

About The Position

Ermi is seeking an experienced, hands-on Senior IT Systems & Security Engineer to take responsibility for the technology environment supporting its medical device organization. This technical role combines day-to-day IT operations with broader technology initiatives and provides ownership across cybersecurity, infrastructure, cloud technology, Google Workspace, Microsoft technologies, networking, enterprise applications, and healthcare information security. The position is full-time and in person in Atlanta, Georgia; it is not remote or hybrid. The engineer will administer, secure, maintain, troubleshoot, and improve business technology and will directly implement and support systems, applications, networks, and security controls. The role includes supporting technology used to handle PHI and ePHI in accordance with applicable HIPAA and HITECH requirements, maintaining backup and recovery capabilities, and collaborating with internal departments and external technology partners. Candidates must have substantial direct implementation experience; experience limited primarily to oversight, policy, consulting recommendations, or theory is insufficient. Ermi has focused for more than 30 years on helping patients recover from severe motion loss. The role offers broad technical ownership and the opportunity to strengthen the systems, security, infrastructure, and practices supporting a growing medical device organization. Ermi, LLC is an Equal Opportunity Employer and provides reasonable accommodations to qualified individuals with disabilities in accordance with applicable law.

Requirements

At least 5 years of progressively responsible, hands-on IT experience involving systems administration, infrastructure, cybersecurity, networking, cloud technology, enterprise applications, or related technical responsibilities.
Demonstrated hands-on experience administering and securing Google Workspace.
Hands-on experience supporting Microsoft and Windows-based enterprise environments.
Hands-on experience configuring and troubleshooting networks, Wi-Fi, firewalls, VPNs, routers, switches, DNS, DHCP, and related infrastructure.
Hands-on experience administering identity and access management, including user provisioning, permissions, multifactor authentication, and account security.
Experience directly implementing or maintaining endpoint protection, email security, vulnerability remediation, patch management, encryption, security monitoring, or comparable cybersecurity controls.
Experience troubleshooting complex technical problems across endpoints, networks, applications, accounts, authentication, and cloud services.
Experience maintaining backup and recovery technologies and verifying restoration capabilities.
Working knowledge of HIPAA and HITECH and understanding of translating healthcare privacy and security requirements into practical IT controls for PHI and ePHI.
Experience working with confidential, sensitive, or regulated information.
Strong technical documentation, troubleshooting, problem-solving, organization, and communication skills.
Ability to work independently and recognize when specialized security, compliance, regulatory, legal, or technical expertise should be engaged.
Ability to work effectively with employees, business leaders, vendors, and cross-functional teams.
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Computer Engineering, or a related field, or an equivalent combination of relevant education, certifications, training, and substantial professional experience.
Ability to work full-time in person in Atlanta, Georgia.
Candidates must be able to discuss specific technology they personally configured, administered, implemented, troubleshot, secured, or restored; oversight, vendor management, policy development, consulting recommendations, or theoretical knowledge without direct technical implementation does not meet the requirements.

Nice To Haves

Experience in a medical device, healthcare, pharmaceutical, life sciences, or other regulated environment.
Familiarity with FDA-regulated technology environments.
Familiarity with the FDA Quality Management System Regulation under 21 CFR Part 820 and ISO 13485:2016.
Familiarity with 21 CFR Part 11 requirements for applicable electronic records and electronic signatures.
Experience supporting regulated systems in partnership with Quality, Compliance, Regulatory, or Legal teams.
Experience supporting computer software assurance, system validation, change control, data integrity, or other regulated technology processes.
Experience with AWS, Microsoft Azure, Google Cloud Platform, or comparable cloud technologies.
Experience supporting CRM, quality management, patient support, analytics, ERP, or other enterprise business platforms.
Understanding of APIs, application integrations, databases, authentication methods, data flows, and enterprise system dependencies.
Experience troubleshooting application integrations or interconnected enterprise systems.
Experience with SIEM, endpoint detection and response, vulnerability management, data loss prevention, identity governance, or security monitoring technologies.
Experience with CI/CD, source control, deployment automation, configuration automation, or DevOps practices.
Experience developing architecture diagrams, technical standards, system documentation, or technology roadmaps.
Experience evaluating or implementing enterprise AI technologies with appropriate privacy, security, and data governance controls.
Relevant professional certifications, including CISSP, CISM, CCSP, CHPS, CompTIA Security+, CompTIA Network+, or relevant Google Workspace, Microsoft, AWS, Azure, Google Cloud, Cisco, cybersecurity, cloud, or networking certifications. Certifications are valued but not required; equivalent demonstrated professional experience is considered.

Responsibilities

Administer, maintain, secure, and improve business technology, endpoints, networks, cloud services, and enterprise systems.
Provide direct technical support for Windows and Mac computers, mobile devices, applications, printers, conference room technology, user accounts, and related employee technology.
Administer and secure Google Workspace, including Gmail, Drive, Shared Drives, Admin Console, Vault, Groups, users, permissions, security settings, retention, and sharing controls.
Support Microsoft and Windows technologies, including Microsoft 365, Entra ID, Intune, Defender, Teams, SharePoint, and related services as applicable.
Configure and troubleshoot Wi-Fi, routers, switches, firewalls, VPNs, DNS, DHCP, network connectivity, and secure remote access.
Implement and maintain cybersecurity controls, including multifactor authentication, identity and access management, endpoint protection, email security, encryption, patching, vulnerability remediation, logging, and monitoring.
Manage employee technology onboarding and offboarding, including accounts, permissions, devices, authentication, and system access.
Maintain systems handling PHI or ePHI in accordance with applicable HIPAA and HITECH requirements.
Support security risk assessments, vulnerability reviews, remediation efforts, incident response, business continuity, and disaster recovery activities.
Maintain and test backup and recovery capabilities for critical systems and company data.
Monitor system availability, performance, capacity, security, and operational health, and resolve recurring technology problems at their source.
Participate directly in implementing, configuring, testing, and improving enterprise applications and cloud-based technologies.
Work with software vendors, managed service providers, telecommunications providers, consultants, and other technology partners while retaining sufficient internal technical knowledge to evaluate their work.
Maintain accurate system documentation, network information, inventories, configurations, procedures, and administrative records.
Collaborate with Compliance, Quality, Legal, Operations, and other departments when technology intersects with privacy, regulatory, or business requirements.