IT Systems and Security Administrator

The Security System Administrator is responsible for managing and securing CAIRE's global IT infrastructure, with a strong focus on cybersecurity, Microsoft 365, Azure, Microsoft Intune, and identity and access management.

Working closely with the Global VP of IT, this position supports enterprise security technologies, vulnerability management, compliance initiatives, and cloud administration while providing day-to-day technical support to ensure reliable and secure IT operations across CAIRE's global locations.

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Cybersecurity and Threat Management

• Administer and maintain enterprise security platforms, including CrowdStrike, BeyondTrust, Microsoft security solutions, and other cybersecurity technologies.
• Monitor security alerts, investigate potential threats, and coordinate incident response and remediation activities.
• Perform vulnerability assessments, manage security patching, and implement system hardening across global infrastructure.
• Maintain endpoint protection, network security controls, and security monitoring solutions.
• Identify cybersecurity risks and recommend improvements to strengthen CAIRE's security posture.

Microsoft 365, Azure, and Intune Administration

• Administer and support Microsoft 365 services, including Exchange Online, Teams, SharePoint, OneDrive, and associated security and compliance settings.
• Manage Microsoft Entra ID, including user identities, security groups, MFA, Conditional Access, and privileged access controls.
• Administer Microsoft Intune for endpoint enrollment, device configuration, compliance policies, application deployment, and security enforcement.
• Manage Windows Autopilot, endpoint provisioning, device lifecycle management, and standardized workstation configurations.
• Support Microsoft Azure infrastructure, cloud resources, virtual machines, networking, and hybrid identity integration.
• Monitor Microsoft 365 and Azure security alerts, service health, access controls, and configuration compliance.
• Implement Microsoft security’s best practices to strengthen cloud security, data protection, and endpoint management.

Security Compliance and Risk Management

• Support the Global VP of IT with cybersecurity initiatives, risk assessments, and security improvement projects.
• Assist with HITRUST, JSOX, and other cybersecurity audits and compliance requirements.
• Maintain security documentation, audit evidence, vulnerability reports, and corrective action plans.
• Implement and enforce IT security policies, standards, and industry best practices.
• Provide regular updates on cybersecurity risks, incidents, and remediation progress.

Network and Infrastructure Security

• Administer and secure Windows Server, Active Directory, VMware, and enterprise infrastructure.
• Support Fortinet firewalls, VPNs, network segmentation, and secure network configurations.
• Maintain security configurations, operating system updates, and infrastructure security standards.
• Support secure backup, disaster recovery, and business continuity solutions.
• Troubleshoot infrastructure issues and maintain system reliability and availability.

Day-to-Day End User Support

• Provide daily technical support to employees across CAIRE's global locations, including hardware, software, connectivity, and application issues.
• Monitor, prioritize, and resolve IT Service Desk tickets in accordance with established service levels.
• Troubleshoot Microsoft 365, Windows, VPN, workstation, printer, and network connectivity issues.
• Support employee onboarding and offboarding, including account provisioning, equipment setup, and access management.
• Install, configure, maintain, and troubleshoot end-user devices and business applications.
• Coordinate with IT team members and vendors to resolve escalated technical issues.

Security Operations and Continuous Improvement

• Investigate security incidents, document findings, and implement preventive measures.
• Coordinate with external cybersecurity vendors and global IT teams to address security concerns.
• Participate in Microsoft cloud improvements, endpoint management enhancements, security technology implementations, and infrastructure upgrades.
• Develop and maintain PowerShell scripts and automation to improve administrative efficiency and security.
• Maintain accurate technical documentation, security configurations, and operational procedures.

Competencies / Success Factors

• Strong knowledge of Microsoft 365, Azure, Entra ID, Intune, and enterprise cloud administration.
• Experience with cybersecurity, endpoint protection, vulnerability management, and incident response.
• Strong understanding of identity management, Conditional Access, MFA, and cloud security.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Ability to independently manage technical issues, security risks, and assigned projects.
• Strong communication, customer service, documentation, and teamwork skills.

Supervisory Responsibility

This position has no supervisory responsibilities.

Work Environment

This is an on-site position requiring regular attendance at the assigned CAIRE facility to provide hands-on IT support, maintain infrastructure, and address daily operational and cybersecurity needs.

Occasional nights, weekends, and after-hours support may be required for security incidents and scheduled maintenance.

Physical Demands

Frequent sitting, standing, and walking. Occasional bending, crawling, and lifting of IT equipment up to 50 pounds.

Travel

Up to 10%.

Required Education and Experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent work experience.
• Minimum of 6 years of relevant IT experience, including at least 3 years in systems administration or cybersecurity.
• Strong hands-on experience administering Microsoft 365, Azure, Microsoft Entra ID, and Microsoft Intune.
• Experience with Exchange Online, SharePoint, Teams, Conditional Access, MFA, device compliance, and endpoint management.
• Experience with security monitoring, vulnerability management, incident response, and endpoint protection.
• Strong knowledge of Windows Server, Active Directory, Group Policy, and enterprise networking.
• Experience with Fortinet firewalls, VPNs, and network security controls.
• Experience providing end-user technical support in a corporate IT environment.
• Familiarity with cybersecurity audits, compliance requirements, and security best practices.

Preferred Qualifications

• Microsoft 365 Administrator Expert, Azure Administrator Associate, or Endpoint Administrator Associate certification.
• CompTIA Security+, CySA+, or equivalent cybersecurity certification.
• Fortinet FCA/FCP or Microsoft Security certification.
• Experience with CrowdStrike, BeyondTrust, Microsoft Defender, SIEM, and vulnerability management platforms.
• Knowledge of HITRUST, NIST, ISO 27001, and JSOX compliance requirements.
• Experience with PowerShell scripting, Microsoft Graph, and security automation.

Additional Eligibility Qualifications

None required for this position.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

CAIRE is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status, or membership in any other class protected by federal, state, or local law.