Cybersecurity & IT Support Administrator

The Cybersecurity & IT Support Administrator is responsible for developing, implementing, and maintaining the company’s information security program to support compliance with Cybersecurity Maturity Model Certification (CMMC) requirements and other applicable government and customer cybersecurity standards. This position serves as the primary internal resource for cybersecurity, information assurance, and IT systems administration.

As a member of a small organization, this role also provides day-to-day technical support to employees, including hardware, software, network, and user account administration. The successful candidate will balance strategic cybersecurity initiatives with hands-on IT support and systems maintenance., Cybersecurity / CMMC Responsibilities

• Lead the implementation, documentation, and maintenance of the company’s CMMC compliance program.
• Develop, maintain, and enforce cybersecurity policies, procedures, standards, and work instructions.
• Conduct security assessments, risk analyses, and gap analyses against CMMC, NIST SP 800-171, and other applicable cybersecurity requirements.
• Maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), asset inventories, and supporting compliance documentation.
• Coordinate cybersecurity audits, assessments, and customer reviews.
• Monitor systems and networks for security events, vulnerabilities, and compliance issues.
• Administer security tools including endpoint protection, multi-factor authentication, vulnerability management, security monitoring, and access controls.
• Investigate and respond to cybersecurity incidents and coordinate corrective actions.
• Ensure proper security configuration and management of Microsoft 365, Azure, servers, workstations, and other information systems.
• Develop and deliver cybersecurity awareness training for employees.
• Support the protection of Controlled Unclassified Information (CUI) and other sensitive company and customer information.
• Assist with the development of disaster recovery, incident response, and business continuity plans.

Information Technology Responsibilities

• Provide Tier I and Tier II technical support to employees.
• Install, configure, maintain, and troubleshoot desktop and laptop computers, printers, mobile devices, and peripherals.
• Administer user accounts, permissions, passwords, and access controls.
• Support Microsoft 365 applications including Outlook, Teams, SharePoint, OneDrive, and related technologies.
• Configure and maintain network equipment including firewalls, switches, wireless access points, and VPN connectivity.
• Manage software deployments, updates, patches, and licensing.
• Maintain accurate IT asset inventories and system documentation.
• Coordinate with third-party IT vendors and service providers.
• Assist employees with technology-related issues and provide excellent customer service.
• Participate in technology projects, system upgrades, and infrastructure improvements.

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field preferred.
• Equivalent combination of education, training, certifications, and experience may be considered.

Experience

• Minimum 3-5 years of experience in information technology, systems administration, cybersecurity, or related roles.
• Experience implementing or supporting cybersecurity compliance frameworks preferred.
• Experience with Microsoft 365 administration and Windows environments required.
• Experience supporting end users in a help desk or IT support capacity required.
• Experience with government contractors, defense industry requirements, or regulated environments preferred.

Certifications (Preferred)

One or more of the following:

• Security+
• CySA+
• CISSP
• CISM
• Microsoft Security Certifications
• Certified CMMC Professional (CCP)
• Certified Information Systems Auditor (CISA)

Knowledge, Skills, and Abilities

• Strong understanding of CMMC and NIST SP 800-171 requirements.
• Knowledge of cybersecurity best practices, risk management, and security controls.
• Proficiency with Microsoft 365, Azure, Active Directory, and Windows operating systems.
• Understanding of networking concepts, firewalls, VPNs, and endpoint security.
• Ability to analyze technical problems and implement effective solutions.
• Strong documentation and technical writing skills.
• Excellent organizational and project management abilities.
• Exceptional customer service and communication skills.
• Ability to manage multiple priorities and work independently.
• Ability to maintain confidentiality and protect sensitive information.

Other Requirements

• Must be eligible to access information subject to applicable U.S. export control regulations, including ITAR and EAR, when required by assigned duties.
• Must be able to pass background screening requirements applicable to company and customer work.
• Must maintain strict confidentiality of company, customer, and employee information.
• Ability to work outside normal business hours, when necessary, to support system maintenance, cybersecurity incidents, or business needs.

Pulled from the full job description

• 401(k)
• Health insurance
• Paid time off
• Vision insurance
• Dental insurance
• Profit sharing, Competitive compensation package, including:
• Medical, dental, and vision insurance
• Supplemental insurance options
• 5 weeks of time off per year (PTO + Holidays)
• 401(k) with profit sharing