Security Administrator

The Microsoft System Administrator is responsible for administering and supporting Microsoft 365, Azure, Endpoint, identity and security platforms to protect organizational systems, data, and users. This role monitors security posture, supports compliance requirements, responds to security alerts, maintains secure configurations, and partners with IT teams to ensure reliable and secure technology services across Centers for Independence. This role also supports on-premises servers., (Reasonable accommodation may be made to enable individuals with disabilities to perform these essential functions.)

• Administer Microsoft Entra ID, conditional access, MFA, sign-in risk policies, identity protection, service accounts, app registrations, managed identities, access reviews, align platform with least privilege access model, enforce (PIM) Privileged Identify Management, and identity access management configuration.
• Administer Microsoft Defender for Office 365, anti-phishing protections, Safe Links, Safe Attachments, Microsoft Purview DLP, retention policies, and external sharing governance for email, Teams, SharePoint, and related collaboration platforms.
• Manage Intune security baselines, endpoint onboarding, encryption, firewall settings, device compliance, alert response, endpoint reporting, vulnerability exposure, and patch prioritization.
• Monitor Microsoft Secure Score and Defender for Cloud recommendations; manage Azure secure score, Azure role assignments, Azure Policy compliance, network security groups, firewall rules, Key Vault access policies, and related cloud security remediation.
• Monitor security alerts, investigate potential threats, coordinate response activities, document findings, escalate risks, and support timely remediation with internal teams and external partners.

• Maintain documentation of security configurations, access reviews, remediation activities, compliance controls, and audit evidence; prepare reports for leadership on security status, trends, risks, and progress.

• Provide systems administration support for security-related platforms, assist with configuration changes, troubleshoot access and device compliance issues, support infrastructure projects, and collaborate with IT teams to maintain secure and reliable technology services.
• Participate in the IT on-call rotation to provide after-hours support, respond to urgent system or security issues, escalate incidents as appropriate, and support continuity of technology services.
• Server Management on Windows Operating Systems, working with active directory and group policies
• Perform other job-related duties as assigned to support departmental goals, organizational priorities, and the overall mission of Centers for Independence.

Required Education, Experience, Certifications, Licensure and Credentials: (Where appropriate, education and/or experience may be substituted)

Minimum Required Education: Associate degree in information technology, cybersecurity, computer science, or a related field; equivalent education, training, or experience may be considered.

Minimum Required Experience: a combination of education, certificates, or hands on experience totaling 7 years in administering Microsoft 365 and Azure security technologies, including Entra ID, conditional access, MFA, privileged access management, Microsoft Defender, Intune endpoint compliance, Purview DLP and retention, SharePoint/Teams external sharing governance, vulnerability management, Azure role assignments, Azure Policy, and Key Vault access controls., Microsoft security, identity, or cloud certifications strongly preferred.

Travel Type (local): Less than 10%

Required Valid Driver’s License: Valid driver’s license, * Working knowledge of Microsoft Entra ID, conditional access, MFA, identity protection, privileged access management, and least privilege security practices.

• Ability to perform access reviews, identify stale or excessive permissions, and support secure identity and access governance.
• Knowledge of service accounts, app registrations, managed identities, authentication methods, and secure permission management.
• Experience with Microsoft Defender security tools, including Defender for Office 365, endpoint alert response, anti-phishing protections, Safe Links, and Safe Attachments.
• Knowledge of Microsoft Purview capabilities, including data loss prevention, retention policies, compliance support, and eDiscovery-related controls.

• Ability to configure, monitor, and report on Intune security baselines, endpoint compliance, encryption, firewall settings, and device remediation activities.

• Knowledge of SharePoint and Teams external sharing controls and the ability to audit access against organizational policies.
• Ability to review Microsoft Secure Score and Defender for Cloud recommendations, prioritize security improvements, and track progress over time.
• Knowledge of Azure security controls, including role assignments, Azure Policy compliance, network security groups, firewall rules, Key Vault access policies, and vulnerability remediation.
• Strong analytical, documentation, communication, and follow-through skills with the ability to escalate risks, report status, and coordinate remediation with technical teams.

Physical Requirements, Visual Acuity, and Work Conditions:

Physical Requirements: Ability to sit for extended periods while working at a computer workstation; regularly view and work from a computer screen; use hands and fingers for keyboarding, mouse use, and related computer tasks; and occasionally lift, carry, push, or pull equipment or materials weighing up to 50 pounds.

Visual Acuity: The worker is required to have close visual acuity to perform an activity such as preparing and analyzing data and figures; transcribing; viewing a computer terminal.