IT Systems & Compliance Administrator

We are seeking a proactive, autonomous IT Systems & Compliance Administrator to assist in managing our core IT infrastructure and meeting our corporate compliance requirements. In this versatile generalist role, you will hold two primary assignments: maintaining, integrating, and securing our cloud environments, and actively driving the creation, decision-making, and enforcement of our IT policies and documentation.

The ideal candidate is a true \"jack-of-all-trades\" who enjoys the technical side of back-end cloud administration just as much as organizing data governance and preparing the organization for external compliance audits. Based in the Huntsville defense hub, this role requires a solid foundational knowledge of CMMC and NIST 800-171 frameworks to protect our digital perimeter and ensure continuous audit readiness.

Key Responsibilities

1. Cloud Administration & Security (approx. 60%)

• Microsoft Cloud Ecosystem: Manage, configure, and maintain back-end environments across Microsoft 365, Azure, Exchange Online, and SharePoint Online.
• Device & Endpoint Governance: Design, deploy, and enforce mobile device and laptop configuration profiles utilizing Microsoft Intune.
• Advanced Security & Monitoring: Leverage Microsoft cloud security technologies, including Microsoft Defender for endpoint protection and Microsoft Sentinel for SIEM log monitoring and threat detection.
• App Integration: Configure secure enterprise application integrations within Azure, managing API permissions, single sign-on (SSO), and Entra ID identity governance.
• Infrastructure Operations: Maintain core hybrid IT systems health, troubleshoot back-end infrastructure escalations, and assist with occasional Linux server management or troubleshooting.
• Emerging Tech Adoption: Assist with the safe, compliant integration of Enterprise AI tools into the existing company workflow.

2. Compliance, Policy & Data Governance (approx. 40%)

• Framework Alignment: Direct daily IT configurations to explicitly meet NIST 800-171 controls and prepare the company for upcoming CMMC assessments.
• Policy & Documentation Ownership: Author, update, and organize critical compliance artifacts, including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and internal IT policies.
• Information Protection: Deploy and manage Microsoft Purview for data classification, data loss prevention (DLP), and corporate data retention rules.
• Audit Readiness & Enforcement: Lead internal vulnerability scans, log reviews, and access audits to ensure staff compliance and smooth external audit operations.

Qualifications & Skills

Required Technical & Compliance Experience:

• 3–5+ years of hands-on experience in IT Systems Administration or Cloud Administration with a generalist skill set.
• Core proficiency in administering Azure, M365, SharePoint, Intune, and Exchange Online .
• Working knowledge of CMMC and NIST 800-171 security controls within a corporate or defense contractor environment.
• Direct experience or strong conceptual understanding of Microsoft Purview, Sentinel, and Defender suites.
• Proven ability to write clear corporate IT policies, standard operating procedures (SOPs), and technical documentation.

Preferred Certifications & Industry Credentials:

• CompTIA Security+
• CompTIA Network+
• CompTIA Cloud+
• ISC² CISSP
• ISC² SSCP
• Certified Cloud Security Professional (CCSP)
• Microsoft 365 Certified: Administrator Expert
• Microsoft Certified: Azure Administrator Associate
• Microsoft Certified: Security, Compliance, and Identity Operations Analyst
• Microsoft Certified: Cybersecurity Architect Expert
• AWS Certified SysOps Administrator

Other Preferred Qualifications (Great to Have):

• Experience managing or troubleshooting Linux environments.
• Exposure to Enterprise AI integration , AI risk frameworks, or LLM security policies.
• Prior experience in the defense industrial base (DIB) or working within Azure GCC High.