Senior IT Security Specialist

Job Overview:

We are seeking a highly skilled IT professional to serve as the primary administrator for our internal IT infrastructure while establishing and enforcing comprehensive security policies.

This dual-role position combines hands-on technical support with strategic security implementation, making it ideal for a technical professional who wants to impact both day-to-day operations and long-term security posture.

Key Responsibilities:

• First-Level Technical Support: Provide immediate resolution for hardware, software, and network issues across all departments
• Desktop & Device Management: Administer employee workstations, laptops, mobile devices, and peripheral equipment
• Network Infrastructure: Manage internal networking components including switches, routers, and access points
• Microsoft Environment Administration:
  • Manage Microsoft Entra ID (Azure AD) user accounts, groups, and permissions
  • Administer SharePoint sites, document libraries, and collaboration spaces
  • Oversee OneDrive deployment, storage policies, and file sharing protocols
  • Handle Exchange Online mailbox management, distribution lists, and email security

Security & Compliance:

• Firewall Management: Configure and maintain physical firewall policies and rules
• Security Policy Development: Create, implement, and enforce comprehensive security policies across all systems and processes
• Asset & Software Management:
  • Maintain accurate inventory of all IT assets
  • Monitor and control software installations and licenses
  • Implement endpoint protection and mobile device management (MDM) solutions
  • Audit & Compliance Support:
    • Participate in InfoSec audits and regulatory compliance assessments
    • Ensure adherence to internal and external security standards
    • Conduct regular access reviews and permission audits

Strategic & Educational Activities:

• Cost Management: Assist in budget planning, license optimization, and vendor negotiations
• Security Training: Educate teams on security best practices, policies, and threat awareness
• Documentation: Maintain comprehensive documentation for all systems, processes, and security procedures
• Continuous Improvement: Stay current with security threats, technology trends, and industry best practices

Required Qualifications:

• Technical Skills -
  • Experience: 3+ years in IT support and security administration
  • Microsoft Ecosystem: Proven experience with Microsoft 365, Entra ID, SharePoint, and Exchange Online
  • Network Security: Strong understanding of network protocols, firewalls, and security architectures
  • Operating Systems: Proficiency in Windows (Server and Desktop), with Mac and Linux knowledge preferred

Certifications (Preferred):

• Microsoft 365 Certified: Administrator Expert
• CompTIA Security+
• Sophos Certified Engineer
• CISSP, CISM, or similar security certifications

Soft Skills:

• Communication: Excellent verbal and written communication skills for technical and non-technical audiences
• Problem-Solving: Strong analytical and troubleshooting capabilities
• Project Management: Ability to manage multiple priorities and deadlines effectively
• Training & Mentoring: Comfortable conducting training sessions and creating educational materials

Preferred Qualifications:

• Firewall Expertise: Hands-on experience with Sophos firewall configuration and management
• Cloud Security: Experience with Azure security services and cloud infrastructure protection
• Automation: Knowledge of PowerShell, scripting, or automation tools
• ITSM Tools: Familiarity with ticketing systems and IT service management platforms
• Industry Experience: Background in similar industry or regulatory environment

What We Offer:

• Competitive salary commensurate with experience
• Professional development opportunities and certification support
• Modern technology stack and tools
• Collaborative work environment with growth opportunities

Reporting Structure:

This role reports to the Chief Information Security Officer/ DevSecOps Lead and works closely with Security and DevOps teams.