IT Manager

Deterrence; Fremont (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Deterrence Defense is seeking a hands-on corporate IT Manager to own and scale our IT infrastructure, cloud environment, and cyber risk posture. You will directly oversee system design, endpoint management, security protocols, and RMF activities in a fast-growing defense tech startup.

As our first dedicated IT leader, you will balance strategic vision with hands-on execution, driving policy development, vendor management, and continuous improvement to meet DoD compliance.

Qualifications

• 7+ years progressive IT experience with 2-3 years in an IT Manager or Lead role.
• Deep AWS experience (IAM, EC2, VPC, S3, security groups, compliance features).
• Advanced Microsoft 365 administration including Exchange Online, Teams, SharePoint, Intune, Defender and Purview.
• Corporate networking setup, configuration, management and administration
• Strong compliance experience with frameworks such as NIST 800-171, CMMC, ISO 27001, SOC 2 audits.
• Hands-on skills in endpoint management, identity management, and network/security configuration.
• Strong documentation, process-building, and cross-functional communication skills.
• Experience leading IT audits, government inspections, system hardening, and security monitoring.
• U.S. citizenship with the ability to obtain a Security Clearance.

Responsibilities

• Infrastructure Ownership: Manage, scale, and secure AWS cloud infrastructure.
• Microsoft 365 Administration: Oversee Exchange, SharePoint, Teams, Intune, compliance.
• Endpoint & Device Management: Deploy and manage Intune across Windows, macOS, iOS.
• Identity & Access Management: Provisioning, SSO, MFA, role-based access.
• Policy & Documentation: Develop IT policies and compliance docs for audits.
• Vendor & Tooling Management: Evaluate and manage IT vendors and SaaS.
• Team Enablement: Provide day-to-day IT support while scaling the function.
• Security & Compliance: Implement and improve security practices for DoD frameworks.
• Incident Response & Risk Management: Lead response planning and DR readiness.
• Information Assurance: Support CMMC Level 2 and prepare for accreditation.

Skills

AWS architecture

MS 365 admin

RMF/NIST compliance

DoD compliance

Identity management

Endpoint management

Incident response

Vendor management

Cloud security

Documentation

Tools

Intune

Exchange Online

SharePoint

Purview

MFA/SSO

Job description

We are a fast-growing Defense Technology startup seeking a hands-on corporate IT Manager to own and scale our IT infrastructure, cloud environment, and cyber risk compliance posture. This role requires deep experience in AWS cloud architecture, Microsoft Office 365 administration, and information assurance compliance frameworks (NIST 800-171, NIST 800-53, CMMC, etc.) relevant to the DoD ecosystem.

The IT Manager will balance strategic leadership with technical execution, directly overseeing system design, endpoint management, security protocols, IT operations, and risk management framework (RMF) activities in a high-stakes, compliance-driven environment.

This role is both tactical and strategic—you will be our first dedicated IT leader, building the IT function from the ground up while ensuring security, reliability, and compliance across the company.

Responsibilities

• Infrastructure Ownership: Manage, scale, and secure AWS cloud infrastructure supporting development, manufacturing, and corporate operations.
• Microsoft 365 Administration: Oversee enterprise-wide Microsoft 365 environment (Exchange, SharePoint, Teams, Intune, compliance center).
• Endpoint & Device Management: Deploy and manage device management tools (Intune, MDM) across Windows, macOS, and iOS endpoints.
• Identity & Access Management: Own provisioning, SSO, MFA, and role-based access controls for all internal and external systems.
• Policy & Documentation: Develop and maintain IT policies, SOPs, and compliance documentation to support audits and certifications.
• Vendor & Tooling Management: Evaluate, implement, and manage IT vendors, SaaS platforms, and external support partners.
• Team Enablement: Provide day-to-day IT support as needed, while also setting strategy for scaling IT as the company grows.
• Security & Compliance: Implement, monitor, and continuously improve IT security practices aligned to DoD compliance frameworks (NIST 800-171, NIST 800-53, CMMC, etc.).
• Incident Response & Risk Management: Lead incident response planning and mitigation efforts; maintain business continuity and disaster recovery readiness.
• Information Assurance: Maintain Final Certificate of CMMC Level 2 Status in accordance with 32 CFR Part 170, support FedRAMP efforts, and prepare the company for classified system accreditation.
• Threat Protection: Harden IT infrastructure to defend against external cyber threats.

Requirements & Qualifications

• 7+ years of progressive IT experience, with at least 2-3 years in an IT Manager or Lead role.
• Deep AWS experience (IAM, EC2, VPC, S3, security groups, compliance features).
• Advanced Microsoft 365 administration experience, including Exchange Online, Teams, SharePoint, Intune, Microsoft Defender and Microsoft Purview.
• Corporate networking setup, configuration, management and administration
• Strong compliance experience with frameworks such as NIST 800-171, CMMC, ISO 27001, and SOC 2 audits.
• Hands-on skills in endpoint management, identity management, and network/security configuration.
• Strong documentation, process-building, and cross-functional communication skills.
• Experience leading IT audits, government inspections, system hardening, and security monitoring.
• Ability to balance tactical execution with strategic planning in a fast-paced startup environment.
• U.S. citizenship with the ability to obtain a Security Clearance.

Preferred Experience

• DoD 8140-compliant professional certification.
• Supporting DoD or defense-related missions.
• Implementing the 7-Step RMF Cycle as defined by NIST 800-37.
• Performing ISSM or ISSO duties within classified environments.
• Familiarity with NIST 800-53, DAAPM, CNSSI 1253, ICD 503, and/or JSIG frameworks.
• Maintaining Authority-to-Operate (ATO) artifacts, such as a System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Plan of Action and Milestones (POA&M), and Risk Assessment Reports (RARs).
• Conducting assured file transfers (AFT) and leveraging cross-domain solutions (CDS).
• Acquaintance with export-control regulations (ITAR and EAR).
• Experience with Cisco and Cisco Meraki-based corporate networks.

Deterrence Defense is an Equal Opportunity/Affirmative Action Employer and is committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, national origin, ancestry, age, disability, genetic information, veteran or military status, or any other characteristic protected by federal, state, or local law.

As a federal contractor, we actively recruit qualified individuals with disabilities and protected veterans. We are committed to providing reasonable accommodations to individuals with disabilities and disabled veterans. If you need assistance or an accommodation due to a disability, please contact us at [e-mail].