> Markdown version of [/jobs/ext/4211312-it-security-administrator](https://www.wearedevelopers.com/jobs/ext/4211312-it-security-administrator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Administrator - **Company:** National Association Of State Procurement Officials, Inc. - **Location:** Lexington, KY, United States - **Experience:** Experienced - **Salary:** $93,850.0 - $114,950.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Cloud Computing Security, CompTIA Security+, Cyber Security, Computer Networks, Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, IT Management, Information Technology Operations, Network Service, Windows PowerShell, Azure Active Directory, Cloud Services, Anti-Phishing, TCP/IP, Software Vulnerability Management, Software Troubleshooting, Firewalls (Computer Science), Microsoft InTune, Microsoft Sentinel - **Published:** October 27, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=4b19d1b1a7488baa ## About the Role * At least three years of experience in IT administration, cybersecurity, systems administration, or a related technical role, or an equivalent combination of education and practical experience. * Working knowledge of Microsoft 365 administration and security concepts. * Experience supporting Windows endpoints and enterprise IT environments. * Understanding of identity and access management concepts, including MFA and role-based access. * Familiarity with endpoint protection, antivirus, EDR, or similar security technologies. * Ability to review logs and security alerts and perform basic investigation and troubleshooting. * Understanding of fundamental networking concepts including TCP/IP, DNS, firewalls, and common network services. * Strong troubleshooting, documentation, and communication skills. Preferred qualifications include: * Experience administering Microsoft Defender, Bitdefender, or another enterprise endpoint security/EDR platform; experience with Microsoft Entra ID, Microsoft Intune, or Microsoft Sentinel is also valuable. * Experience with PowerShell or other scripting/automation technologies. * Familiarity with vulnerability management and security configuration frameworks. * Relevant Microsoft or cybersecurity certifications such as Security+, SC-200, SC-300, or equivalent experience. Travel Requirements: * Intermittent travel to company events will be required. Physical Requirements: * Occasionally required to stand. * Occasionally required to walk. * Continually required to sit. * Continually required to use hand and finger dexterity. * Continually required to talk or hear. * Continually required to use visual acuity to operate equipment, read technical information, and use a keyboard. * Occasionally required to lift or move up to 40 pounds. * Air travel and overnight stays will be required. ## Description The IT Security Administrator supports the day-to-day operation, monitoring, and continuous improvement of the organization's cybersecurity environment. Working closely with other members of the IT Operations team, this position administers security platforms, investigates security events, responds to security-related support requests, and helps maintain secure configurations across cloud services, endpoints, identities, and other technology systems., * Administer, maintain, and secure organizational security platforms, including Microsoft 365 security technologies, Microsoft Defender, Bitdefender, and related tools; monitor agent coverage, log availability, and policy deployment to verify that controls operate as intended. * Maintain and strengthen endpoint, identity, and cloud security controls, including multifactor authentication, Conditional Access, privileged access, and periodic access reviews; coordinate changes to shared platforms with the administrators responsible for those systems. * Monitor and investigate security alerts, logs, authentication activity, and security-related service requests involving phishing, suspicious email, account compromise, and endpoint events; document findings and escalate significant incidents as appropriate. * Support incident response and security-related recovery activities by maintaining assigned procedures and participating in testing, exercises, and response efforts under the direction of the Director of IT Operations. * Identify vulnerabilities, insecure configurations, outdated software, and other security risks; coordinate remediation with system owners, track issues through resolution, and verify corrective actions. * Maintain clear, current documentation of security configurations, operational procedures, investigations, and remediation activities. * Support security awareness initiatives by providing practical guidance and contributing lessons learned from recurring incidents and support requests. * Stay current on relevant threats and recommended best practices and recommend improvements to security controls and operational resilience.