> Markdown version of [/jobs/ext/4296599-it-manager](https://www.wearedevelopers.com/jobs/ext/4296599-it-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Manager - **Company:** CIE Defense LLC - **Location:** Summit Point, WV, United States - **Experience:** Experienced - **Salary:** $78,900.0 - $95,200.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Microsoft Azure, CompTIA Security+, Cyber Security, Desktop Computing, Disaster Recovery, Domain Name System (DNS), Multi-Factor Authentication, Data Flow Control, Identity and Access Management, IT Management, Virtual Private Networks (VPN), Network Architecture, Network Diagrams, Azure Active Directory, Server Administration, Microsoft SharePoint, Security Information and Event Management, Software Vulnerability Management, Backup and Restore, Wi-Fi Technology, Data Logging, Information Security Management System, Computer Network Technologies, Lenel, Firewalls (Computer Science), Microsoft InTune, Information Technology, Deployment Automation, National Industrial Security Program Operating Manual (NISPOM), Network Server, Plan of Action and Milestones - **Published:** October 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=d490101b82a1bce7 ## About the Role * 5+ years of progressive IT experience (systems administration / IT management), including 2+ years supporting a DoD, defense, or similarly regulated (CUI / FAR / DFARS) environment. * Deep hands-on expertise with Microsoft 365, Entra ID, Windows endpoint and server administration, and core networking (firewall, VPN, DNS, switching). * Working command of NIST SP 800-171, DFARS 252.204-7012, and the CMMC 2.0 framework; direct experience authoring or maintaining an SSP and POA&Ms. * Experience deploying and operating security tools: EDR, vulnerability management, MFA / conditional access, SIEM or log management, and backup/DR solutions. * Hands-on familiarity with commercial access control and video surveillance platforms - e.g., Lenel (OnGuard/NetBox) and Ubiquiti UniFi Access/Protect - including administering, installing, and troubleshooting them. * Excellent documentation skills; able to translate technical controls into auditor-ready evidence and executive-level reporting. * Strong prioritization and self-direction in a small-team environment where this role is the in-house IT authority., * Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience. * Certifications such as Security+, CISSP, CISM, CCNA, or Microsoft role-based certifications (e.g., MD-102, SC-100). * CMMC Certified Professional (CCP) - or Certified CMMC Assessor (CCA) - strongly preferred, or willingness to obtain within [12 months] of hire. * Experience with Microsoft 365 GCC High / Azure Government, Intune/Autopilot, and CUI enclave tooling (e.g., GCC High SharePoint, PreVeil or similar). * Familiarity with NISPOM and supporting an FSO; experience with SPRS scoring and DIBNet incident reporting. ## Description IT Operations & Infrastructure (approx. 60%) * Administer all company systems end to end: Microsoft 365 [GCC High / commercial tenant], Entra ID (Azure AD), Windows endpoints and servers, network infrastructure (firewalls, switching, Wi-Fi, VPN), and backup systems. * Provide Tier 1-3 technical support for all staff; own helpdesk intake, onboarding/offboarding, hardware lifecycle, and provisioning/deprovisioning of accounts and equipment. * Implement and operate security tooling: endpoint detection & response (EDR), patch and vulnerability management, MFA and conditional access, email security, logging and monitoring with retention per DFARS 252.204-7012, and backup / disaster recovery. * Manage IT vendors, procurement, licensing, and the IT budget; recommend and execute an infrastructure roadmap appropriate to a growing defense contractor. * Maintain network diagrams, hardware/software asset inventory, and configuration baselines. Access Control & Identity Management (approx. 15%) * Design and administer identity and access management: role-based least-privilege access, privileged account controls, MFA enforcement, quarterly access reviews, and segregation of duties. * Administer physical access control systems - badging/credentialing, visitor management, alarms, and surveillance - in coordination with the Facility Security Officer (FSO); maintain access rosters tied to clearance status and need-to-know. * Install, configure, and maintain video surveillance/CCTV systems - camera placement and mounting, Cat6/PoE cabling and termination, NVR/recorder configuration, and video retention aligned to policy. * Install and commission door access control panels and hardware - access panels/controllers (e.g., Lenel, UniFi Access), credential readers, electric strikes/locks, and door position devices - including hands-on low-voltage installation work. * Ensure logical and physical access policies meet NIST SP 800-171 and NISPOM-aligned expectations and are audit-ready. CMMC & Compliance Program (approx. 25%) * Own the company's CMMC 2.0 compliance program for CUI environments: implement, document, and maintain the applicable NIST SP 800-171 controls and DFARS clause requirements (252.204-7012, -7019, -7020, and -7021 as applicable). * Author and keep current the System Security Plan (SSP), Plan of Action & Milestones (POA&M), policies and procedures, data-flow diagrams, and assessment evidence repository. * Calculate and maintain the company's NIST SP 800-171 self-assessment score in SPRS; run internal and mock assessments and drive remediation to closure. * Track evolving DoD CMMC implementation guidance - including the current phased rollout and any changes to C3PAO certification requirements - and brief leadership on impacts, timelines, and budget. * Coordinate external assessors, Registered Provider Organizations (RPOs), or C3PAOs as needed; support customer, prime contractor, and government audits and flow-down reviews. * Develop and deliver security awareness, insider threat, and CUI handling/marking training; maintain the incident response plan and report incidents per the DFARS 72-hour requirement (DIBNet). * Support the FSO on IT touchpoints of industrial security (cleared-roster systems, DD Form 254 reviews for IT requirements, JDIG as applicable).