Manager of IT

allocortech inc.; Charlottesville (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Allocor.Tech is seeking a Manager of IT to own enterprise IT and cybersecurity, overseeing identity, endpoints, network, and collaboration platforms including Fishbowl. You will manage the current MSP, drive the Google Workspace to Microsoft 365 / Azure migration, and stay hands‑on while ensuring secure, auditable access to production and quality records.

The role requires on‑site work with potential travel to other sites, and a focus on governance, documentation, and system reliability in a

Qualifications

• Bachelor’s in information systems, computer science, engineering, or equivalent experience.
• 5–8 years administering enterprise productivity and infrastructure platforms, including hands‑on ownership.
• Experience migrating Google Workspace to Microsoft 365 / Azure with records of the change.
• Working knowledge of Entra ID, Exchange Online, SharePoint/OneDrive, Teams, Intune, and Conditional Access.
• Owned cybersecurity controls for an organization — policy plus implementation, not advisory‑only.
• Experience managing an MSP or equivalent third‑party IT provider with a written statement of work.
• Familiarity with AS9100 / ISO 9001 obligations touching infrastructure and documented information.
• On‑site work with travel to other sites as required.
• Must be a U.S. Person under ITAR.

Responsibilities

• Own infrastructure for operation of processes (identity, endpoints, network, backup, and collaboration systems).
• Control documented information in IT systems: access, retention, retrieval, protection, and disposition.
• Define and record competence for IT administration and privileged access.
• Plan and execute migration from Google Workspace to Microsoft 365 and Azure; keep cutover records.
• Stand up and administer Fishbowl with Operations; ensure IT ownership for platform availability and access.
• Avoid replacing QMS with shared drives; support integration of a future QMS app with proper infrastructure.
• Own cybersecurity: MFA, conditional access, least‑privilege identity, endpoint protection, logging, incident response, and protection of ITAR data.
• Establish joiner–mover–leaver, access reviews, and offboarding.
• Manage the third‑party IT vendor: SOW, SLA, retained architectural control, outsourcing decisions.
• Publish site‑IT standard for future locations with consistent patterns.
• Maintain asset inventory and light change‑control for systems holding product or quality records.
• Represent IT and cybersecurity with evidence for audits (access reviews, backups, incidents, vendor performance).

Skills

MS 365 administration

Identity & access management

Cybersecurity controls

Vendor management

Education

Bachelor's in information systems or computer science

Tools

Google Workspace to Microsoft 365 migration

Entra ID

Exchange Online

SharePoint/OneDrive

Teams

Intune

MFA / Conditional Access

Job description

Why This Role Exists

Allocortech is implementing AS9100 and raising production rate. Infrastructure that stores design records, test records, inventory, and controlled technical data can no longer be an implicit founder-plus-vendor arrangement.

Why This Role Exists

Allocortech is implementing AS9100 and raising production rate. Infrastructure that stores design records, test records, inventory, and controlled technical data can no longer be an implicit founder-plus-vendor arrangement. The company currently runs Google Workspace and a third-party managed service provider. It is moving to Microsoft 365 and Azure. Fishbowl is being stood up for inventory and manufacturing control. There is no QMS application in place. Additional sites and an approximate doubling of headcount are planned. Identity, access, backup, and change of those systems are not documented to a standard an auditor or customer can sample. AS9100 Clause 7.1.3 requires infrastructure suitable for operation of processes. Clause 7.5 requires control of documented information. Clause 7.2 requires competence for work that affects product conformity — including who may administer systems that hold design, test, and production records. Without a named owner, those obligations sit in an unmanaged vendor queue. This role exists to put a competent, authorized owner on IT infrastructure and cybersecurity so systems that hold product and quality information remain available, controlled, and auditable as volume and sites increase.

Role Summary

The Manager of IT is the process owner for enterprise information technology and cybersecurity. The role administers identity, endpoints, network, collaboration platforms, and the applications Operations and Engineering depend on, including Fishbowl. The role manages the existing third-party IT vendor, executes the Google Workspace to Microsoft 365 / Azure migration, and remains hands‑on. Authority is operational and security control of company systems — not product design release.

Core Responsibilities

• Own infrastructure required for operation of processes (Clause 7.1.3): identity, endpoints, network, file and collaboration systems, backup, and the hosting or tenant arrangements for business applications.
• Control documented information residing in IT systems (Clause 7.5): access, retention, retrieval, protection from unintended alteration or loss, and disposition of obsolete electronic records.
• Define and record competence for IT administration and privileged access (Clause 7.2): who may grant accounts, who may change production or inventory system configuration, what training records Quality can pull.
• Plan and execute the migration from Google Workspace to Microsoft 365 and Azure (Entra ID, Exchange Online, SharePoint/OneDrive, Teams, Intune). Keep cutover records. Do not leave dual-uncontrolled repositories of design or quality files.
• Stand up and administer Fishbowl with Operations. Operations owns inventory and manufacturing process. IT owns platform availability, identity integration, backup, access model, and vendor coordination.
• Do not substitute SharePoint or shared drives for a QMS. When Quality selects a QMS application, provide infrastructure, identity, backup, and access control so Clause 7.5 can be demonstrated.
• Own cybersecurity for company systems: MFA and Conditional Access, least‑privilege identity, endpoint protection, logging, incident response, and protection of ITAR‑controlled technical data in mail, files, and endpoints.
• Establish joiner–mover–leaver, access review, and offboarding so departed personnel cannot reach design, test, or production records.
• Manage the third‑party IT vendor: statement of work, SLA, architectural control retained by Allocortech, and the decision of what remains outsourced.
• Publish a site‑IT standard that can be applied when additional locations come online — same identity, access, backup, and support pattern.
• Maintain an asset inventory and a lightweight change‑control practice for systems that hold product or quality records. Avoid process theater.
• Represent IT and cybersecurity at management review with evidence an auditor can sample: access reviews, backup restore tests, vendor performance, incidents, and infrastructure fitness.

Required Qualifications

• Bachelor’s in information systems, computer science, engineering, or equivalent experience.
• 5–8 years administering enterprise productivity and infrastructure platforms, including hands‑on ownership rather than ticket dispatch only.
• Demonstrated Google Workspace to Microsoft 365 / Azure migration, or an equivalent identity‑mail‑file‑endpoint cutover, with records of the change.
• Working knowledge of Entra ID, Exchange Online, SharePoint/OneDrive, Teams, Intune, and Conditional Access.
• Demonstrated ownership of cybersecurity controls for an organization — policy plus implementation, not advisory‑only.
• Experience managing an MSP or equivalent third‑party IT provider, including a written statement of work.
• Working familiarity with AS9100 or ISO 9001 obligations that touch infrastructure and documented information (Clauses 7.1.3, 7.2, 7.5), or equivalent regulated‑manufacturing practice.
• Able to perform the work on‑site with flexibility and to travel to other company sites as required.
• Must be a U.S. Person as defined under ITAR 22 C.F.R.
• 120.15.

Preferred Qualifications

• Microsoft certification at administrator level, or equivalent demonstrated skill.
• Implementation or administration of Fishbowl or a comparable SMB manufacturing inventory / MRP system.
• NIST SP 800-171 / CMMC exposure or a written system security plan for CUI / export‑controlled data.
• Security certification (Security+, CISSP, CISM) or equivalent program ownership.
• Prior IT ownership during a period of rapid headcount or multi‑site growth.
• Direct participation in an AS9100 or ISO 9001 implementation or customer information‑security review.

Why Allocortech

Just over 50 people. Revenue has tripled. Founders from Kitty Hawk/Cora, Google, Rockwell Collins, and Lockheed. Small enough that your board flies. Serious enough that the architecture holds up in the air and on the water. American‑made. Mountains out the window.

This position may require prolonged periods of sitting, standing, walking, computer work, and occasional exposure to moderate levels of noise, dust, and fumes in production and lab areas. Level and base salary will be determined on a case‑by‑case basis and may vary based on the following considerations: job‑related knowledge and skills, education, and experience. Base salary is just one component of our total rewards package. Employees may receive equity opportunities and/or cash bonus, and have access to a robust benefits package including: top tier medical HMO, PPO & a 100% company‑sponsored HSA plan option, dental and vision coverage, unlimited PTO, 11 paid holidays per year, flexible spending and dependent care savings accounts, paid parental leave, disability insurance, life insurance, and access to a 401(k) retirement plan with company match. Eligibility for benefits may vary based on employment status; please check with your recruiter for a comprehensive list of the benefits available for this role. Benefit programs are subject to change at the company’s discretion.

Important Information

For Candidates Seeking To Work In Us Offices Only

To conform to U.S. Government technology export regulations, including the International Traffic in Arms Regulations (ITAR), Allocor.Tech Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable.

Allocor.tech provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment at Allocor.Tech, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.