Sr. Security and Systems Admin

Position Summary:  The Senior Security and Systems Administrator plans, implements, administers, monitors, and continuously improves cybersecurity and enterprise technology services across SAC Group companies. The role combines hands-on security engineering and systems administration with regional governance, project execution, incident readiness, risk reduction, subsidiary support, and executive-level reporting. It works closely with company IT leaders, Sekisui HQ and regional teams, business stakeholders, managed service providers, and strategic technology partners to advance Zero Trust, protect confidential information, strengthen resilience, standardize controls, and support Sekisui Vision 2030 and the objective of Zero Serious Incidents.

Key Responsibilities:

--Cybersecurity and Incident Response Readiness

· Monitor and administer security platforms, alerts, vulnerabilities, exposure indicators, and control effectiveness across supported environments.

· Perform initial investigation, triage, containment coordination, evidence collection, incident documentation, and escalation with the SOC, vendors, Microsoft, company IT teams, and leadership.

· Maintain incident-response procedures, contact paths, reporting templates, lessons learned, and follow-up remediation tracking.

· Review threat intelligence and emerging attack techniques, translate them into actionable controls, and communicate risks in business terms.

· Coordinate remediation of critical vulnerabilities, security findings, misconfigurations, and overdue actions across supported companies.

--Identity, Access, and Zero Trust

· Administer and improve Microsoft Entra ID controls, Conditional Access, multifactor authentication, authentication methods, external identities, guest access, and cross-tenant collaboration.

· Support privileged access governance, including Privileged Identity Management, emergency access accounts, role review, separation of duties, time-bound elevation, and phishing-resistant authentication.

· Assess identity risk, application consent, enterprise applications, OAuth permissions, service principals, and third-party integrations.

· Advance Zero Trust initiatives across identity, endpoints, applications, data, and network infrastructure.

--Endpoint, Mobile Device

· Administer Microsoft Intune, Windows Autopilot, device compliance, security baselines, configuration profiles, application deployment, update rings, enrollment, and remote support workflows.

· Coordinate endpoint visibility, vulnerability remediation, patching, inventory, and lifecycle management using Microsoft Defender, Tanium, Cortex XDR, and related platforms.

· Support mobile device management and application protection for company-owned and approved personal devices, including rollout communications and user support.

· Develop repeatable onboarding, offboarding, provisioning, recovery, and secure configuration standards for endpoints and mobile devices.

--Data Security, Compliance, and Governance

· Implement and support Microsoft Purview capabilities, including data discovery, sensitivity labels, encryption, data loss prevention, auto-labeling, audit, retention, eDiscovery, and policy testing.

· Partner with Legal, HR, Compliance, Finance, and business owners to translate information-management requirements into practical technical controls and user guidance.

· Identify overshared or exposed information, coordinate remediation, and validate internal and external sharing scenarios.

· Support secure adoption and governance of Microsoft 365 Copilot, Security Copilot, agents, and approved AI tools, including permissions hygiene, data protection, lifecycle controls, and responsible-use guidance.

--Network, Cloud and Email Security

· Administer and support secure-access and network-security services such as Prisma Access, GlobalProtect, firewalls, secure web controls, VPN, segmentation, and network policy changes.

· Coordinate network and cloud security changes with HQ, IIJ, managed providers, business-unit technology teams, and local IT contacts.

· Improve email and domain security through Microsoft Defender for Office 365, anti-phishing controls, mail-flow review, SPF, DKIM, DMARC, domain cleanup, and secure SMTP or relay configurations.

· Support secure Microsoft 365 services, Azure resources, enterprise applications, integrations, and tenant-to-tenant operational requirements.

--Governance, Risk, Metrics

· Perform security assessments, control reviews, risk analyses, and validation testing against corporate requirements and recognized frameworks.

· Maintain dashboards, metrics, action plans, change records, risk registers, project status, Secure Score, exposure and vulnerability measures, and remediation evidence.

· Prepare clear technical and executive reporting for SAC leadership, company presidents, ITLC, ITST, HPPC, HQ, auditors, and other governance forums.

· Support internal, customer, cybersecurity, privacy, financial, and operational audits by gathering evidence, explaining controls, documenting gaps, and coordinating corrective actions.

· Contribute to regional and global policies, standards, procedures, architecture decisions, and technology roadmaps.

--Regional Collaboration, Shared Services

· Provide hands-on technical support and consulting to SAC and supported group companies, especially organizations with limited internal IT resources. 

· Support endpoint hardware/software upgrades, troubleshooting, and support for our smaller organizations.

· Coordinate cross-company implementations, assessments, pilots, testing, migrations, licensing decisions, vendor engagements, and operational handoffs.

· Facilitate knowledge sharing among IT leaders and administrators through recurring forums, workshops, documentation, demonstrations, and peer support.

· Develop employee-facing security communications, phishing simulations, awareness materials, lunch-and-learn content, and role-based guidance.

· Promote standardized, supportable, cost-conscious solutions while recognizing business, regulatory, and operational differences among group companies.

Skills and Competencies

· Strong analytical, troubleshooting, prioritization, documentation, and project-coordination skills.

· Ability to independently investigate unfamiliar technical issues, assess risk, develop options, test changes, and communicate recommendations.

· Working knowledge of some or all of these: Microsoft 365 administration and security, including Entra ID, Intune, Defender XDR, Defender for Office 365, Defender for Cloud Apps, Purview, Exchange Online, SharePoint, OneDrive, Teams, and Copilot administration.

· Experience with endpoint security, vulnerability management, SIEM/SOC operations, secure access service edge, firewalls, VPN technologies, mobile device management (Intune), privileged access (Entra), and data protection (Purview).

· Understanding of Zero Trust, least privilege, defense in depth, identity security, secure configuration, incident response, business continuity, and change management.

· Excellent verbal and written communication skills with the ability to brief executives, collaborate with technical teams, and create clear employee guidance.

· High level of integrity, discretion, accountability, attention to detail, and sound judgment when handling confidential information and security events.

· Knowledge of Windows operating systems, endpoint system configuration and setup, and asset management

· Ability to work effectively across multiple companies, cultures, time zones, vendors, and matrixed stakeholder groups.

Education and Experience

· Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Information Management, or a related discipline, or equivalent relevant experience.

· Five to seven years of progressively responsible experience in systems administration, cybersecurity, cloud administration, endpoint management, or a related IT role.

· Experience supporting Microsoft 365 and cloud-based enterprise environments in a multi-company or distributed organization is strongly preferred.

· Experience with recognized security and compliance frameworks such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, SOX, PCI DSS, ITAR, or comparable corporate standards.

· Relevant certifications such as Microsoft Security, Compliance, and Identity; Microsoft 365; Azure; CISSP; CISM; Security+; GIAC; or vendor-specific security certifications are preferred.

Success Metrics

· Timely identification, escalation, containment, documentation, and remediation of security risks and incidents.

· Measurable reduction in vulnerabilities, configuration gaps, excessive access, data exposure, and overdue security actions.

· Consistent implementation and adoption of approved security, endpoint, data protection, and governance standards across supported companies.

· Accurate, timely, and actionable reporting for leadership and governance teams.

· Reliable delivery of projects, changes, audits, shared services, and user communications with minimal business disruption.

· Effective collaboration, knowledge transfer, and continuous improvement across the SAC Group IT community.

Physical and Working Requirements

· Prolonged periods of sitting at a desk and working on a computer.

· Must be able to lift up to 15 pounds at times.

· Occasional travel, after-hours support, or participation in incident response and planned technology changes may be required.

This job description is intended to describe the general nature and level of work performed. It is not an exhaustive list of all responsibilities, duties, skills, or working conditions. Responsibilities may be adjusted as business needs, technology, regulations, and security risks evolve. This document does not constitute a contract of employment.