IT Manager

IT Operations & Infrastructure (approx. 60%)

• Administer all company systems end to end: Microsoft 365 [GCC High / commercial tenant], Entra ID (Azure AD), Windows endpoints and servers, network infrastructure (firewalls, switching, Wi-Fi, VPN), and backup systems.
• Provide Tier 1-3 technical support for all staff; own helpdesk intake, onboarding/offboarding, hardware lifecycle, and provisioning/deprovisioning of accounts and equipment.
• Implement and operate security tooling: endpoint detection & response (EDR), patch and vulnerability management, MFA and conditional access, email security, logging and monitoring with retention per DFARS 252.204-7012, and backup / disaster recovery.
• Manage IT vendors, procurement, licensing, and the IT budget; recommend and execute an infrastructure roadmap appropriate to a growing defense contractor.
• Maintain network diagrams, hardware/software asset inventory, and configuration baselines.

Access Control & Identity Management (approx. 15%)

• Design and administer identity and access management: role-based least-privilege access, privileged account controls, MFA enforcement, quarterly access reviews, and segregation of duties.
• Administer physical access control systems - badging/credentialing, visitor management, alarms, and surveillance - in coordination with the Facility Security Officer (FSO); maintain access rosters tied to clearance status and need-to-know.
• Install, configure, and maintain video surveillance/CCTV systems - camera placement and mounting, Cat6/PoE cabling and termination, NVR/recorder configuration, and video retention aligned to policy.
• Install and commission door access control panels and hardware - access panels/controllers (e.g., Lenel, UniFi Access), credential readers, electric strikes/locks, and door position devices - including hands-on low-voltage installation work.
• Ensure logical and physical access policies meet NIST SP 800-171 and NISPOM-aligned expectations and are audit-ready.

CMMC & Compliance Program (approx. 25%)

• Own the company’s CMMC 2.0 compliance program for CUI environments: implement, document, and maintain the applicable NIST SP 800-171 controls and DFARS clause requirements (252.204-7012, -7019, -7020, and -7021 as applicable).
• Author and keep current the System Security Plan (SSP), Plan of Action & Milestones (POA&M), policies and procedures, data-flow diagrams, and assessment evidence repository.
• Calculate and maintain the company’s NIST SP 800-171 self-assessment score in SPRS; run internal and mock assessments and drive remediation to closure.
• Track evolving DoD CMMC implementation guidance - including the current phased rollout and any changes to C3PAO certification requirements - and brief leadership on impacts, timelines, and budget.
• Coordinate external assessors, Registered Provider Organizations (RPOs), or C3PAOs as needed; support customer, prime contractor, and government audits and flow-down reviews.
• Develop and deliver security awareness, insider threat, and CUI handling/marking training; maintain the incident response plan and report incidents per the DFARS 72-hour requirement (DIBNet).
• Support the FSO on IT touchpoints of industrial security (cleared-roster systems, DD Form 254 reviews for IT requirements, JDIG as applicable).

• 5+ years of progressive IT experience (systems administration / IT management), including 2+ years supporting a DoD, defense, or similarly regulated (CUI / FAR / DFARS) environment.
• Deep hands-on expertise with Microsoft 365, Entra ID, Windows endpoint and server administration, and core networking (firewall, VPN, DNS, switching).
• Working command of NIST SP 800-171, DFARS 252.204-7012, and the CMMC 2.0 framework; direct experience authoring or maintaining an SSP and POA&Ms.
• Experience deploying and operating security tools: EDR, vulnerability management, MFA / conditional access, SIEM or log management, and backup/DR solutions.
• Hands-on familiarity with commercial access control and video surveillance platforms - e.g., Lenel (OnGuard/NetBox) and Ubiquiti UniFi Access/Protect - including administering, installing, and troubleshooting them.
• Excellent documentation skills; able to translate technical controls into auditor-ready evidence and executive-level reporting.
• Strong prioritization and self-direction in a small-team environment where this role is the in-house IT authority., * Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience.
• Certifications such as Security+, CISSP, CISM, CCNA, or Microsoft role-based certifications (e.g., MD-102, SC-100).
• CMMC Certified Professional (CCP) - or Certified CMMC Assessor (CCA) - strongly preferred, or willingness to obtain within [12 months] of hire.
• Experience with Microsoft 365 GCC High / Azure Government, Intune/Autopilot, and CUI enclave tooling (e.g., GCC High SharePoint, PreVeil or similar).
• Familiarity with NISPOM and supporting an FSO; experience with SPRS scoring and DIBNet incident reporting.

• Onsite at the Summit Point, WV facility; physical presence required for physical access control and endpoint support duties.

• Occasional travel ([X-Y]% - vendor sites, training, assessments).

• Occasionally lifts and moves computer and network equipment up to [30-50] lbs.

• Performs occasional physical installation work (cameras, access panels, cabling) - ladders, ceiling spaces, and mechanical rooms.

Compensation & Benefits

• Salary range: $75,000 - $95,000 annually, commensurate with experience.

• Medical, dental, and vision insurance; 401(k) plan; [list any additional benefits - e.g., paid time off, holidays]., * 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Retirement plan
• Vision insurance