Director of Information Technology

FedGeek has a different kind of culture. We value passion, collaboration, creativity, and action. We hold ourselves to a higher standard and bring a rare energy and commitment to our projects. We are an Woman-Owned Small Business (WOSB) with a 19-year track record of excellence. Supporting multiple agencies across the federal landscape, we deliver specialized program management, application development, science and technology services.

The Role

FedGeek is seeking a hands-on Information Technology Director to own the day-to-day IT function for an organization of approximately 150 employees. This is first and foremost a hands-on corporate IT operations role - not an ISSO, cybersecurity policy, or compliance-only position. Approximately 70% of the role involves day-to-day IT administration and employee support, including onboarding, offboarding, account administration, endpoint management, Microsoft 365 administration, licensing, asset management, troubleshooting, and vendor coordination. Approximately 30% involves maintaining the technical environment and evidence needed to support CMMC Level 2 compliance.

This employee will personally administer our corporate systems, support users, manage employee onboarding and offboarding, maintain endpoints and accounts, oversee software and hardware assets, coordinate vendors, and keep our Microsoft 365 and Google Workspace environments operating securely and reliably.

*The position also serves as the technical owner for maintaining an environment aligned with CMMC Level 2 and NIST SP 800-171 requirements. We need someone who understands how compliance requirements translate into actual system configurations, operating procedures, technical evidence, and repeatable day-to-day IT practices*

Day-to-Day Corporate IT Responsibilities

• Serve as the primary owner of FedGeek’s day-to-day corporate IT operations and the first escalation point for employee technology issues.
• Administer Microsoft 365, Entra ID, Google Workspace, email, user accounts, groups, permissions, licenses, shared resources, and other corporate applications.
• Manage the complete employee IT lifecycle, including new-hire setup, account and license provisioning, equipment deployment, access changes, troubleshooting, and timely offboarding.
• Provide responsive remote and hands‑on technical support for approximately 150 employees, including executives, corporate staff, and employees working at government locations nationwide.
• Configure, deploy, inventory, maintain, recover, and securely dispose of company laptops, mobile devices, and other IT assets.
• Manage endpoint configuration and compliance, including disk encryption, MFA, endpoint detection and response, patching, device policies, and remote-management tools.
• Troubleshoot Windows devices, Microsoft 365, email, identity, permissions, VPNs, collaboration applications, printers, and connectivity issues.
• Manage software licensing, hardware procurement, warranties, renewals, vendor relationships, and accurate IT asset records.
• Maintain practical IT procedures, system documentation, knowledge‑base materials, and repeatable onboarding and offboarding checklists.
• Evaluate and implement technology improvements, automation, and appropriate AI-enabled tools that improve service quality, security, and efficiency.

Cybersecurity and CMMC Responsibilities

• Translate CMMC and NIST SP 800-171 requirements into technical configurations, recurring IT processes, and verifiable evidence.
• Maintain the technical portions of the System Security Plan and support the tracking and closure of Plans of Action and Milestones in coordination with leadership and outside compliance resources, as applicable.
• Administer and monitor identity, access, MFA, conditional access, least‑privilege, encryption, endpoint protection, logging, vulnerability management, and patch‑management controls.
• Support the secure configuration and administration of Microsoft 365 GCC or GCC High, Entra ID, Intune, Defender, Purview, and related services, as applicable to FedGeek’s environment.
• Maintain technical evidence and system records needed for internal reviews, customer inquiries, and third‑party assessments.
• Support incident response, logging, investigation, escalation, and required reporting in coordination with company leadership and legal or compliance advisors.
• Coordinate with managed service providers, security vendors, assessors, and other specialists while retaining internal ownership of systems, configurations, and follow‑through.
• Help ensure that CUI and other sensitive information remain within approved systems and are handled in accordance with company policy and applicable contractual requirements.

Required Qualifications

• At least five years of progressively responsible, hands‑on experience in corporate IT, systems administration, IT operations, or a closely related role.
• Recent experience personally administering Microsoft 365 and Entra ID in a small or midsized organization.
• Hands‑on experience with user provisioning, onboarding and offboarding, endpoint deployment, identity and access management, MFA, device security, encryption, patching, and technical support.
• Experience supporting Windows laptops and a geographically distributed workforce.
• Experience managing IT assets, software licenses, hardware procurement, vendors, and technical documentation.
• Working knowledge of CMMC, NIST SP 800-171, or a comparable security framework, with the ability to connect requirements to technical configurations and operating practices.
• Ability and willingness to personally resolve routine employee IT issues rather than functioning solely as a manager, auditor, policy writer, or security advisor.
• Strong judgment, responsiveness, documentation habits, and the ability to communicate technical risks and recommendations to company leadership.
• Ability to work independently and take ownership of issues through resolution in a lean corporate environment.

Preferred Qualifications

• Experience supporting a federal government contractor or other organization handling regulated or sensitive information.
• Experience with Microsoft 365 GCC or GCC High, Intune, Defender for Endpoint, Purview, data‑loss prevention, and related Microsoft security tools.
• Experience supporting a CMMC readiness effort, formal assessment, remediation program, or similar security‑compliance initiative.
• Familiarity with SSPs, POA&Ms, technical evidence collection, incident‑response documentation, and security‑control implementation.
• Relevant Microsoft administrator certification, CompTIA Security+, CCP, CISSP, or comparable credential. Certifications are valued but do not replace recent hands‑on IT administration experience.
• Experience working with both Microsoft 365 and Google Workspace environments.

Compensation: $130,000 – $150,000 / year

This role offers a competitive base salary between $130,000 and $150,000 per year, with final compensation determined by experience, qualifications, and core technical skills.