> Markdown version of [/jobs/ext/506115-internal-it](https://www.wearedevelopers.com/jobs/ext/506115-internal-it). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Internal IT - **Company:** TRAILHEAD BIOSYSTEMS INC. - **Location:** Beachwood, OH, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Microsoft Online Services, Business Software, Software as a Service, Cyber Security, Data Infrastructure, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Information Lifecycle Management, Information Technology Operations, Networking Hardware, Network Connections, Phishing, Microsoft SharePoint, Virtual Local Area Networks, Wi-Fi Technology, Data Classification, Microsoft InTune, Computer Equipment, Sender Policy Framework (SPF), Information Technology, Patch Management, Casper Suite, Cloud Optimization, Firewall Services Module, User Administration - **Published:** June 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=19c6dcfc09b5cc83 ## About the Role Do you have experience in Vendor relationship building?, * 3-5 years of hands-on IT experience in a generalist role * Microsoft 365 administration: Entra ID, Exchange Online, SharePoint, Intune/MDM * Endpoint security: patch management, MFA/conditional access, Defender for Business or equivalent * Experience managing network hardware: switches, enterprise Wi-Fi, firewall rules * MDM deployment and administration experience (Intune, Jamf, or Kandji) * Strong documentation discipline * Clear communicator with both non-technical staff and external technical partners ## Description End-User Support & IT Operations * Primary internal point of contact for all hardware, software, connectivity, and access issues across on-site and remote employees * Own the MSP relationship: define what goes to them, hold them to SLAs, and escalate appropriately - you are the bridge, not the bottleneck * Manage the full device lifecycle: procurement, imaging, deployment, and decommissioning across a ~45-device corporate fleet * Administer Microsoft 365: Entra ID, Exchange Online, SharePoint, Teams, OneDrive, and associated licenses * Own IT onboarding and offboarding workflows, account provisioning, device assignment, access revocation, and litigation hold procedures; this process must be airtight and documented * Maintain a current IT asset inventory Cybersecurity & Information Security * Own the organization's day-to-day security posture; engage the MSP for complex security projects and escalations * Administer endpoint protection, patch management, MFA enforcement, and conditional access policies * Monitor M365 security and compliance tooling: Purview, Defender for Business, audit logs * Conduct periodic access reviews and permission audits; produce findings reports for COO * Lead first-response on security incidents , containment first, investigation second and coordinate MSP escalation where needed; this includes employee departure scenarios involving potential data exfiltration * Manage email authentication controls (SPF, DKIM, DMARC) and anti-phishing policies Lab & Instrument IT * Maintain network connectivity for laboratory instruments and manage isolated VLANs where required * Serve as the IT interface for lab instrument vendors and cloud-connected instrument platforms * Keep instrument computing hardware and software licenses current in coordination with R&D and Manufacturing Access & Device Governance * Deploy and administer an MDM solution across the full device fleet * Own permissions governance for end-user systems: M365, SharePoint, shared drives, and SaaS applications * Conduct quarterly access audits; report findings to COO * Manage data lifecycle for off-boarded employees including legal preservation requirements Cloud Cost & Vendor Management * Monitor cloud and SaaS spend; surface optimization opportunities and eliminate unused licenses * Manage all software subscriptions across office and lab environments, licenses, renewals, utilization tracking, and vendor relationships for both business software and laboratory-specific applications * Coordinate with the Data Infrastructure Engineer on cloud access provisioning - you manage who has access, they manage the architecture * Track IT vendor contracts and MSP deliverables; flag renewal dates and surface consolidation opportunities IT Policy & Documentation * Develop and maintain core IT policies: Acceptable Use, Data Classification, Password Policy, BYOD * Document processes and configurations well enough that someone else could operate them ## Related Videos - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) - [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume)