Senior Security & Systems Administrator

A U.S. holding company of a major global chemical manufacturer, overseeing multiple affiliated companies across the United States, is seeking a Senior Security & Systems Administrator to join its Information Technology team.

This is a hands-on role combining cybersecurity, systems administration, Microsoft 365 security, and IT governance across the U.S. group companies. The position works closely with subsidiary IT teams, corporate and regional technology teams, managed service providers, and business stakeholders to strengthen security, standardize technology controls, reduce risk, and support the technology needs of affiliated companies.

The successful candidate will have a strong foundation in systems administration and cybersecurity, particularly within Microsoft 365 environments, along with strong analytical and problem-solving skills.

Key Responsibilities

Cybersecurity & Incident Response

• Monitor and administer security platforms, alerts, vulnerabilities, and security controls across supported environments.
• Investigate and triage security events and coordinate containment, escalation, documentation, and remediation with internal teams, vendors, and security providers.
• Maintain and support incident-response procedures and follow-up remediation activities.
• Review emerging security threats and translate identified risks into practical technical controls.
• Coordinate remediation of critical vulnerabilities, security findings, and configuration issues.
• Participate in incident response activities, including occasional after-hours support when required.

Identity & Access Management

• Administer and enhance Microsoft Entra ID, including Conditional Access, multifactor authentication, external identities, guest access, and related identity controls.
• Support privileged access management, role reviews, separation of duties, and secure authentication practices.
• Assess identity and application risks, including enterprise applications, permissions, service principals, and third-party integrations.
• Support Zero Trust initiatives across identity, endpoints, applications, data, and infrastructure.

Endpoint & Device Management

• Administer and support Microsoft Intune, Windows Autopilot, device compliance, security baselines, application deployment, updates, and endpoint configuration.
• Coordinate endpoint security, vulnerability remediation, patching, inventory, and lifecycle management.
• Support mobile device management and application protection for company-owned and approved personal devices.
• Help develop standardized onboarding, offboarding, provisioning, recovery, and secure endpoint configuration processes.

Microsoft 365, Data & Cloud Security

• Support Microsoft 365 security and administration, including Defender XDR, Defender for Office 365, Defender for Cloud Apps, Purview, Exchange Online, SharePoint, OneDrive, and Teams.
• Support data protection initiatives including sensitivity labeling, encryption, Data Loss Prevention (DLP), audit, retention, and secure information sharing.
• Identify and help remediate overshared or exposed information.
• Support secure adoption and governance of approved AI and Microsoft Copilot technologies.
• Support Microsoft 365 services, Azure resources, enterprise applications, and system integrations.

Network & Email Security

• Support network and secure-access technologies, including firewalls, VPN, secure web access, segmentation, and related network security controls.
• Coordinate network and cloud security changes with internal teams and external service providers.
• Support email and domain security, including anti-phishing controls, mail-flow security, SPF, DKIM, DMARC, and secure email configurations.

Governance, Risk & Compliance

• Participate in security assessments, control reviews, risk analysis, and security validation activities.
• Maintain security metrics, dashboards, risk registers, remediation tracking, project status, and supporting documentation.
• Prepare clear technical and management reporting on security risks, projects, vulnerabilities, and remediation activities.
• Support internal and external audits by gathering evidence, documenting controls and gaps, and coordinating corrective actions.
• Contribute to IT and security policies, standards, procedures, and technology roadmaps.

Regional IT Support & Projects

• Provide hands-on technical support and consulting to affiliated companies, including organizations with limited internal IT resources.
• Assist with endpoint hardware/software upgrades, troubleshooting, and other systems administration needs.
• Coordinate cross-company technology implementations, migrations, assessments, pilots, testing, licensing, and vendor activities.
• Work with IT leaders and administrators across affiliated companies to share technical knowledge and establish consistent, supportable solutions.
• Support employee security awareness initiatives, communications, and training.
• Participate in occasional travel to support affiliated companies, projects, and technology initiatives as needed.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Information Management, or a related field, or equivalent relevant professional experience.
• Approximately 5–7 years of progressively responsible experience in systems administration, cybersecurity, cloud administration, endpoint management, or a related IT role.
• Hands-on experience supporting Microsoft 365 and Windows-based enterprise environments.
• Experience in several of the following areas:
  • Microsoft Entra ID / Azure AD
  • Microsoft Intune
  • Microsoft Defender
  • Microsoft Purview
  • Microsoft 365 administration and security
  • Endpoint security and vulnerability management
  • Identity and access management
  • Firewalls, VPN, and network security
  • Incident response / SOC operations
  • Mobile device management
  • Data protection and information security
• Understanding of cybersecurity concepts including Zero Trust, least privilege, defense in depth, identity security, secure configuration, incident response, and change management.
• Strong analytical, troubleshooting, documentation, prioritization, and project coordination skills.
• Ability to independently investigate unfamiliar technical issues, assess risk, evaluate options, and implement practical solutions.
• Strong written and verbal communication skills with the ability to work effectively with technical teams, business users, vendors, and management.
• High level of integrity, discretion, accountability, and sound judgment when handling confidential information and security matters.
• Ability to work effectively across multiple companies, locations, technology environments, and stakeholder groups.
• Experience supporting Microsoft 365 and cloud-based environments within a multi-company or distributed organization is preferred.
• Experience with security and compliance frameworks such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, SOX, PCI DSS, or comparable corporate standards is preferred.
• Relevant certifications such as Microsoft Security, Compliance and Identity; Microsoft 365; Azure; CISSP; CISM; Security+; GIAC; or related certifications are preferred.
• Experience with technologies such as Prisma Access, GlobalProtect, Tanium, Cortex XDR, or comparable security platforms is a plus.
• Candidates are not expected to have experience in every technology or functional area listed above. Candidates who meet many of the requirements and demonstrate strong technical aptitude, initiative, and a willingness to learn and expand their capabilities will be considered.