IT Manager

Deterrence Defense, Inc.; Fremont (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Deterrence Defense, Inc. is seeking an IT Manager to own and scale our AWS cloud, Microsoft 365, and RMF-based security posture. You will lead IT design, endpoint management, and risk controls in a fast-paced defense tech startup.

You will drive policy formation, vendor management, and audits while building the IT function from the ground up and ensuring compliance with NIST, CMMC, and FedRAMP requirements.

Qualifications

• 7+ years of progressive IT experience with 2–3 years in an IT Manager/Lead role.
• Deep AWS experience including IAM, EC2, VPC, S3 and security controls.
• Advanced Microsoft 365 administration: Exchange Online, Teams, SharePoint, Intune, Defender, Purview.
• Strong compliance exposure with NIST 800-171, CMMC, ISO 27001, SOC 2 audits.
• Hands-on endpoint, identity, network and security configuration skills.
• Proven documentation, process-building, and cross-functional communication.
• Experience leading IT audits and government inspections; security monitoring.
• Ability to balance tactical work with strategic startup growth plans.
• U.S. citizenship with ability to obtain Security Clearance; security certs a plus.

Responsibilities

• Infrastructure ownership: scale AWS cloud for development, manufacturing, and operations.
• Microsoft 365 administration across Exchange, SharePoint, Teams, Intune, and compliance.
• Endpoint and device management across Windows, macOS, iOS.
• Identity and access management including SSO and MFA provisioning.
• Develop IT policies, SOPs, and prepare compliance docs for audits.
• Evaluate and manage IT vendors, SaaS platforms, and external partners.
• Provide day-to-day IT support while setting scalable IT strategy.
• Lead incident response planning and risk management; ensure BCM/DR readiness.
• Support FedRAMP efforts and prepare for classified system accreditation.

Skills

AWS cloud architecture

Microsoft 365 administration

Information security

NIST 800-171 compliance

CMMC

RMF

Endpoint management

Identity & access management

Documentation & process

Education

Bachelor’s degree in IT or related field

Tools

IAM

EC2

VPC

S3

Security groups

Job description

IT Manager

About the Role

We are a fast-growing Defense Technology startup seeking a hands-on corporate IT Manager to own and scale our IT infrastructure, cloud environment, and cyber risk compliance posture. This role requires deep experience in AWS cloud architecture, Microsoft Office 365 administration, and information assurance compliance frameworks (NIST 800-171, NIST 800-53, CMMC, etc.) relevant to the DoD ecosystem.

The IT Manager will balance strategic leadership with technical execution, directly overseeing system design, endpoint management, security protocols, IT operations, and risk management framework (RMF) activities in a high-stakes, compliance-driven environment.

This role is both tactical and strategic—you will be our first dedicated IT leader, building the IT function from the ground up while ensuring security, reliability, and compliance across the company.

Responsibilities

Corporate IT Management

• Infrastructure Ownership : Manage, scale, and secure AWS cloud infrastructure supporting development, manufacturing, and corporate operations.


• Microsoft 365 Administration : Oversee enterprise-wide Microsoft 365 environment (Exchange, SharePoint, Teams, Intune, compliance center).


• Endpoint & Device Management : Deploy and manage device management tools (Intune, MDM) across Windows, macOS, and iOS endpoints.


• Identity & Access Management : Own provisioning, SSO, MFA, and role-based access controls for all internal and external systems.


• Policy & Documentation : Develop and maintain IT policies, SOPs, and compliance documentation to support audits and certifications.


• Vendor & Tooling Management : Evaluate, implement, and manage IT vendors, SaaS platforms, and external support partners.


• Team Enablement : Provide day-to-day IT support as needed, while also setting strategy for scaling IT as the company grows.


• Security & Compliance : Implement, monitor, and continuously improve IT security practices aligned to DoD compliance frameworks (NIST 800-171, NIST 800-53, CMMC, etc.).


• Incident Response & Risk Management : Lead incident response planning and mitigation efforts; maintain business continuity and disaster recovery readiness.


• Information Assurance: Maintain Final Certificate of CMMC Level 2 Status in accordance with 32 CFR Part 170, support FedRAMP efforts, and prepare the company for classified system accreditation.


• Threat Protection: Harden IT infrastructure to defend against external cyber threats.

Requirements & Qualifications

• 7+ years of progressive IT experience, with at least 2-3 years in an IT Manager or Lead role.


• Deep AWS experience (IAM, EC2, VPC, S3, security groups, compliance features).


• Advanced Microsoft 365 administration experience, including Exchange Online, Teams, SharePoint, Intune, Microsoft Defender and Microsoft Purview.


• Corporate networking setup, configuration, management and administration


• Strong compliance experience with frameworks such as NIST 800-171, CMMC, ISO 27001, and SOC 2 audits.


• Hands-on skills in endpoint management, identity management, and network/security configuration.


• Strong documentation, process-building, and cross-functional communication skills.


• Experience leading IT audits, government inspections, system hardening, and security monitoring.


• Ability to balance tactical execution with strategic planning in a fast-paced startup environment.


• U.S. citizenship with the ability to obtain a Security Clearance.


• IT certifications a plus (AWS Solutions Architect, Microsoft 365 Enterprise Administrator, CISSP, Security+, etc.).

Preferred Experience

• DoD 8140-compliant professional certification.


• Supporting DoD or defense-related missions.


• Implementing the 7-Step RMF Cycle as defined by NIST 800-37.


• Performing ISSM or ISSO duties within classified environments.


• Familiarity with NIST 800-53, DAAPM, CNSSI 1253, ICD 503, and/or JSIG frameworks.


• Maintaining Authority-to-Operate (ATO) artifacts, such as a System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Plan of Action and Milestones (POA&Ms), and Risk Assessment Reports (RARs).


• Conducting assured file transfers (AFT) and leveraging cross-domain solutions (CDS).


• Acquaintance with export-control regulations (ITAR and EAR).


• Experience with Cisco and Cisco Meraki-based corporate networks.

Equal Employment Opportunity

Deterrence Defense is an Equal Opportunity/Affirmative Action Employer and is committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, national origin, ancestry, age, disability, genetic information, veteran or military status, or any other characteristic protected by federal, state, or local law.

As a federal contractor, we actively recruit qualified individuals with disabilities and protected veterans. We are committed to providing reasonable accommodations to individuals with disabilities and disabled veterans. If you need assistance or an accommodation due to a disability, please contact us at [e-mail].