IT Manager, Security & Compliance (CMMC/GCC High)

Heven Drones Ltd; Sterling, Northern (VA, KY); Hybrid; USD 125,000 - 170,000; Full time

Benefits offered by this job

Retirement plans

Paid time off

Disability insurance

Dental and vision coverage

Job summary

Heven AeroTech seeks an IT Manager to own and operate the U.S. IT environment, including Microsoft 365, Entra ID, and endpoint management. This hands-on leadership role works in a co-managed setup with MSP/MSSP partners to ensure security, reliability, and regulatory compliance for a defense contractor.

You will drive CMMC Level 2 readiness, implement NIST SP 800-171-aligned controls, manage IAM and device lifecycle, and help scale the internal IT function as the company grows.

Qualifications

• 5+ years in IT administration/engineering with 2+ years in a leadership role.
• Experience with NIST 800-171 and/or CMMC in regulated environments.
• Strong identity/access management and endpoint security foundations.
• S. person status under 22 CFR 120.15 for ITAR/export-controlled work.
• Excellent communication with technical and non-technical stakeholders.

Responsibilities

• Administer Microsoft 365 (including GCC High), Entra ID, Intune, and endpoint management for the U.S. environment.
• Own cross-tenant configuration and directory visibility between domains.
• Manage full device lifecycle, procurement, imaging, deployment, and asset tracking.
• Provide responsive end-user support and operate a U.S. help desk.
• Drive CMMC Level 2 readiness and support the assessment.
• Implement security controls aligned to NIST SP 800-171.
• Oversee IAM, MFA, conditional access, and least-privilege practices.
• Collaborate with Legal/Compliance on ITAR data handling and enclave integrity.
• Serve as the primary liaison with MSP/MSSP and manage service levels.
• Establish IT policies, runbooks, and onboarding/offboarding workflows.

Skills

IT administration

Leadership

NIST 800-171 / CMMC

Identity & access management

Security controls

Communication

Tools

GCC High

Entra ID

Intune / M365 admin

Job description

Heven AeroTech seeks an IT Manager to own and operate the U.S. IT environment, including Microsoft 365, Entra ID, and endpoint management. This hands-on leadership role works in a co-managed setup with MSP/MSSP partners to ensure security, reliability, and regulatory compliance for a defense contractor.

You will drive CMMC Level 2 readiness, implement NIST SP 800-171-aligned controls, manage IAM and device lifecycle, and help scale the internal IT function as the company grows.