IT Specialist - Security Clearance Eligibility Required

AVT Simulation; Orlando (FL); On-site; USD 60,000 - 90,000; Full time

Job summary

AVT Simulation in Orlando, FL is seeking an IT Specialist to maintain the daily health of the IT infrastructure, provide end‑user and back‑end support, and ensure compliance with NIST 800-171 and CMMC Level 2. This full‑time, on‑site role reports to the IT Manager and covers Active Directory, M365 GCC High, patching, VMware, NAS, and security tooling.

You will document activities and support a fast‑paced environment.

Qualifications

• Bachelor’s degree in IT/Related field OR 4+ years of professional IT experience.
• 2–4 years in a Help Desk or System Admin role, preferably in a regulated industry.

Responsibilities

• Active Directory & M365 management (GCC High)
• Automated patching using PDQ Deploy and ThreatLocker
• VMware vSphere and Synology NAS maintenance
• Hardware lifecycle provisioning and tech refresh

Job description

Job Summary

The IT Specialist is a hands‑on role responsible for the daily health, maintenance, and support of the company’s IT infrastructure. This position balances end‑user support with back‑end systems administration and proactive infrastructure patching. Reporting to the IT Manager, the Specialist ensures that all hardware and software are functional, updated, and aligned with the rigorous documentation standards required for NIST 800-171 and CMMC Level 2 compliance.

This is a full‑time, on‑site position based in Orlando, FL.

Responsibilities and Duties

Systems Support and Maintenance

• Active Directory & M365: Manage user lifecycles (onboarding/offboarding), group memberships, and mailbox permissions within Active Directory and Microsoft 365 (GCC High).
• Automated Patching: Oversee the deployment of OS and third‑party software updates using PDQ Deploy and ThreatLocker, ensuring all endpoints meet compliance timelines for vulnerability management.
• Virtualization & Storage: Perform routine health checks and resource allocation within the VMware vSphere environment and Synology NAS units.
• Hardware Lifecycle: Provision, image, and deploy workstations, servers, and peripherals; assist in the "Tech Refresh" rotation to phase out aging equipment.

IT HelpDesk and User Experience

• Tier 1-3 Support: Act as the primary technical point of contact for onsite and remote staff, resolving issues related to hardware, software, connectivity, and simulation‑specific tools.
• Remote Management: Utilize ScreenConnect to provide efficient remote assistance while maintaining secure connection protocols.
• Network Connectivity: Troubleshoot basic LAN/WAN issues, including VPN client connectivity and VLAN port assignments on Cisco hardware.

Compliance Operations (NIST 800-171 / CMMC)

• Artifact Management: Maintain accurate, real‑time documentation for all IT activities, including hardware inventories, maintenance logs, and software baseline changes.
• Configuration Control: Ensure all systems are configured according to established security baselines; monitor for "configuration drift" using ThreatLocker and Wazuh.
• Backup Integrity: Manage and test Veeam backups regularly to ensure data resilience and meet recovery time objectives (RTO).
• Software Whitelisting: Manage application requests and "ringfencing" policies within ThreatLocker to prevent unauthorized software execution.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for the job. Duties, responsibilities and activities may change at any time with or without notice.

Qualifications

Technical Requirements

• Education: Bachelor’s degree in IT/Related field OR 4+ years of professional IT experience.
• Experience: 2–4 years in a Help Desk or System Admin role, preferably within a regulated industry (Defense, Aerospace, or Finance).
• Core Technical Stack:
  • Virtualization: Competency in VMware vSphere (vCenter management).
  • Infrastructure: Experience with Windows Server (2019/2022) and Active Directory/GPO.
  • Tools: Proficiency with PDQ Deploy/Inventory, Veeam, ThreatLocker and PRTG.
  • Networking: Basic understanding of Cisco switching and Firepower firewalls.
• Certifications: CompTIA A+ or Network+ required; Security+ CE highly preferred for compliance requirements.

Soft Skills & Physical

• Documentation Discipline: High attention to detail; understands that "if it isn't documented, it didn't happen" in a CMMC environment.
• Communication: Ability to explain technical solutions to non‑technical staff clearly and professionally.
• Physical: Ability to lift up to 50lbs and perform tasks under desks or in server racks.
• Clearance: Must be a U.S. Person capable of obtaining a Security Clearance.

Essential Mental Requirements

• Excellent written and spoken communication skills for documentation, intra‑team, and interdisciplinary communication.
• Able to work in a fast‑paced production environment with ability to handle multiple competing tasks and demands simultaneously.
• Demonstrates a high level of professionalism when engaging with coworkers, customers and external partners in the conduct of duties.
• Able to interpret tasks and do work without instruction; set, maintain, and report project schedule.

Essential Physical Requirements

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use hands to finger, handle, or feel objects, tools or controls; reach with hands and arms; talk or hear. The employee must occasionally lift or move office products and supplies, up to 20 pounds. Must be able to travel to customer locations to support contractual commitments including source data collection, database reviews, database deliveries, and installations.

Equipment/Software/Tools Used

• Management: PDQ Deploy, PDQ Inventory, ScreenConnect, PRTG Network Monitor.
• Productivity: M365 (GCC High), SharePoint, Atlassian (Jira/Confluence/Bitbucket/Bamboo).
• Infrastructure: VMware vSphere, Synology, Veeam, Cisco Firepower/Catalyst.
• Security/Compliance: ThreatLocker, Bitdefender, Wazuh.

EOE - Equal Opportunity Employer-Vet/Disability

Qualified individuals with a disability have the right to request a reasonable accommodation. If you are unable or limited in your ability to use or access our careers website as a result of your disability, request a reasonable accommodation by visiting www.avtsim.com/careers and follow the instructions at the bottom.