Senior Security Systems Administrator

Integrated Systems Corp.•Mequon, WI

14h•$110,000 - $140,000•Onsite

About The Position

The Senior Security Systems Administrator leads the administration, optimization, and continuous improvement of ISCorp’s security infrastructure and operational defense platforms across hosted customer environments and internal systems. This role serves as an advanced technical resource for the deployment, configuration, monitoring, hardening, and support of critical security technologies, including SIEM, EDR/XDR, identity controls, email security, vulnerability management, and incident response tooling. The Senior Security Systems Administrator operates with a high degree of independence and technical judgment, handling complex security events, driving remediation efforts, improving detection and response capabilities, and strengthening the security posture of production environments. This role partners closely with Infrastructure, Network, Engineering, Operations, and Compliance teams, and provides mentorship to less experienced administrators.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field; or equivalent work experience.
Minimum of 5–7 years of progressive experience in systems administration, security operations, or infrastructure security roles.
Strong hands-on experience with enterprise security tools, including SIEM, EDR/XDR, vulnerability management, and identity/access controls.
Advanced proficiency with Windows Server, Active Directory, Group Policy, and system hardening practices.
Strong understanding of virtualization, hosting, and production infrastructure technologies, including VMware, Hyper-V, and OpenShift.
Working knowledge of scripting and automation tools such as PowerShell, Bash, or Ansible.
Demonstrated ability to handle complex troubleshooting, incident response, documentation, and cross-functional coordination.

Nice To Haves

Experience with Linux administration and hybrid Windows/Linux environments.
Experience with cloud security in Azure, AWS, or Google Cloud environments.
Relevant certifications such as Security+, CySA+, CISSP, SC-200, AZ-500, or equivalent.
Familiarity with firewall administration, backup/security resilience controls, and enterprise security architecture concepts.
Exposure to ITIL, change management, or formal project leadership practices.

Responsibilities

Lead administration and optimization of security platforms, including SIEM, EDR/XDR, vulnerability management, log management, email security, and identity protection systems.
Investigate and respond to complex security alerts, incidents, and system anomalies, including containment, root cause analysis, recovery coordination, and post-incident improvements.
Design and refine alerting logic, dashboards, detection rules, and correlation use cases within SIEM and monitoring platforms.
Lead security hardening efforts across Windows systems, Active Directory, application platforms, and supporting infrastructure.
Oversee security patching strategy and coordination for servers, endpoints, and infrastructure platforms, especially for critical or high-risk vulnerabilities.
Serve as an escalation point for advanced endpoint protection, malware, ransomware, identity, and suspicious activity investigations.
Lead vulnerability management activities, including prioritization, remediation planning, validation, and trend analysis.
Administer and optimize Microsoft O365 security controls, including Defender, Conditional Access, MFA, Exchange security, and identity governance-related controls.
Partner with Compliance and leadership teams on audits, risk assessments, evidence collection, control maturity, and remediation planning.
Develop and maintain security standards, technical procedures, architecture documentation, and incident response playbooks.
Provide technical leadership on security initiatives, tool improvements, and cross-functional infrastructure projects.
Mentor Associate and intermediate-level administrators by providing guidance, review, and knowledge transfer.
Participate in and help coordinate high-severity on-call response and escalation activities.
Identify automation opportunities that improve visibility, consistency, response time, and operational resilience.