IT Security Administrator

National Association of State Procurement Official; Lexington (KY); Hybrid; USD 94,000 - 115,000; Full time

Job summary

NASPO (National Association of State Procurement Officials) in Lexington, KY seeks an IT Security Administrator to oversee daily security operations, monitor events, and maintain secure configurations across cloud and on-premises systems.

The role collaborates with the IT Operations team to strengthen controls, respond to incidents, and implement security improvements. Hybrid work with travel for events may be required.

Qualifications

• At least 3 years of IT administration, cybersecurity, or related role.
• Working knowledge of Microsoft 365 administration and security concepts.
• Experience supporting Windows endpoints and enterprise IT environments.
• Understanding of identity and access management concepts, including MFA and RBAC.
• Familiarity with endpoint protection, antivirus, EDR, or similar security tech.
• Ability to review logs and security alerts and perform basic investigation.
• Understanding of basic networking (TCP/IP, DNS, firewalls).
• Strong troubleshooting, documentation, and communication skills.

Responsibilities

• Administer, maintain, and secure organizational security platforms, including Microsoft 365 security technologies and Defender; verify policy deployment and coverage.
• Maintain endpoint, identity, and cloud security controls; coordinate changes across systems.
• Monitor and investigate security alerts, logs, and events; document findings and escalate as needed.
• Support incident response and recovery activities under supervision of the Director of IT Operations.
• Identify vulnerabilities and coordinate remediation with system owners; track issues to resolution.
• Maintain current documentation of security configurations, procedures, investigations, and remediation.
• Support security awareness initiatives by sharing lessons learned.
• Stay current on threats and best practices; recommend improvements to security controls.

Skills

Microsoft 365 administration

Windows endpoints

IAM basics

EDR/antivirus

Log review

Networking basics

Troubleshooting

Tools

Microsoft Defender

Bitdefender

PowerShell

Microsoft Entra ID

Job description

Description

JOB TITLE:

IT Security Administrator

EMPLOYER:

NASPO (National Association of State Procurement Officials)

DEPARTMENT:

Technology

LOCATION:

Hybrid - Local to Lexington KY

REPORTS TO:

Director of IT Operations

GRADE:

29

SALARY RANGE:

$93,850 - $114,950

Job Summary

The IT Security Administrator supports the day-to-day operation, monitoring, and continuous improvement of the organization’s cybersecurity environment. Working closely with other members of the IT Operations team, this position administers security platforms, investigates security events, responds to security-related support requests, and helps maintain secure configurations across cloud services, endpoints, identities, and other technology systems.

This is a hands-on technical role intended for an IT professional with foundational experience in systems administration and cybersecurity who is interested in continuing to develop security expertise.

Essential Functions:

• Administer, maintain, and secure organizational security platforms, including Microsoft 365 security technologies, Microsoft Defender, Bitdefender, and related tools; monitor agent coverage, log availability, and policy deployment to verify that controls operate as intended.
• Maintain and strengthen endpoint, identity, and cloud security controls, including multifactor authentication, Conditional Access, privileged access, and periodic access reviews; coordinate changes to shared platforms with the administrators responsible for those systems.
• Monitor and investigate security alerts, logs, authentication activity, and security-related service requests involving phishing, suspicious email, account compromise, and endpoint events; document findings and escal
• Support incident response and security-related recovery activities by maintaining assigned procedures and participating in testing, exercises, and response efforts under the direction of the Director of IT Operations.
• Identify vulnerabilities, insecure configurations, outdated software, and other security risks; coordinate remediation with system owners, track issues through resolution, and verify corrective actions.
• Maintain clear, current documentation of security configurations, operational procedures, investigations, and remediation activities.
• Support security awareness initiatives by providing practical guidance and contributing lessons learned from recurring incidents and support requests.
• Stay current on relevant threats and recommended best practices and recommend improvements to security controls and operational resilience.

Skills, Experience, and Qualifications:

• At least three years of experience in IT administration, cybersecurity, systems administration, or a related technical role, or an equivalent combination of education and practical experience.
• Working knowledge of Microsoft 365 administration and security concepts.
• Experience supporting Windows endpoints and enterprise IT environments.
• Understanding of identity and access management concepts, including MFA and role-based access.
• Familiarity with endpoint protection, antivirus, EDR, or similar security technologies.
• Ability to review logs and security alerts and perform basic investigation and troubleshooting.
• Understanding of fundamental networking concepts including TCP/IP, DNS, firewalls, and common network services.
• Strong troubleshooting, documentation, and communication skills.

Preferred qualifications include:

• Experience administering Microsoft Defender, Bitdefender, or another enterprise endpoint security/EDR platform; experience with Microsoft Entra ID, Microsoft Intune, or Microsoft Sentinel is also valuable.
• Experience with PowerShell or other scripting/automation technologies.
• Familiarity with vulnerability management and security configuration frameworks.
• Relevant Microsoft or cybersecurity certifications such as Security+, SC-200, SC-300, or equivalent experience.

Travel Requirements:

• Intermittent travel to company events will be required.

Physical Requirements:

• Occasionally required to stand.
• Occasionally required to walk.
• Continually required to sit.
• Continually required to use hand and finger dexterity.
• Continually required to talk or hear.
• Continually required to use visual acuity to operate equipment, read technical information, and use a keyboard.
• Occasionally required to lift or move up to 40 pounds.
• Air travel and overnight stays will be required.