Manager of IT

Allocor Tech; Crozet (VA); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Top-tier medical

HSA plan

Dental & Vision

Unlimited PTO

11 paid holidays

401(k) match

Parental leave

Disability insurance

Life insurance

Equity opportunities

Job summary

Allocor Tech seeks a Manager of IT to own enterprise information systems and cybersecurity. You will manage identity, endpoints, network, and collaboration tools, including Fishbowl, while coordinating with a third-party IT vendor.

You will drive the Google Workspace to Microsoft 365/Azure migration and maintain ongoing operation with strong security controls and on-site availability across sites.

Qualifications

• Must have a bachelor’s degree in a related field or equivalent experience.
• 5–8 years administering enterprise productivity and infrastructure platforms with hands-on ownership.
• Proven migration experience from Google Workspace to Microsoft 365 / Azure with records.
• Working knowledge of Entra ID, Exchange Online, SharePoint/OneDrive, Teams, Intune.
• Demonstrated ownership of cybersecurity controls; not advisory-only.
• Experience managing an MSP or third-party IT provider with a written SOW.
• Familiarity with AS9100 / ISO 9001 for infrastructure and documentation.

Responsibilities

• Own infrastructure for processes, identity, endpoints, network, backup, and apps.
• Control documented information in IT systems: access, retention, protection, and disposal.
• Define and record competence for IT administration and privileged access.
• Plan migration from Google Workspace to Microsoft 365 and Azure; keep cutover records.
• Stand up and administer Fishbowl with Operations; govern inventory systems.
• Provide infrastructure for QMS when selected; do not substitute with shared drives.
• Own cybersecurity: MFA, CA, least-privilege, endpoint protection, logging, incident response.

Skills

MS 365 migration

Azure administration

Vendor management

Access control

Entra ID

Audit readiness

ITAR compliance

Education

Bachelor’s in information systems, computer science, engineering, or equivalent experience

Tools

Entra ID

Exchange Online

SharePoint/OneDrive

Teams

Intune

Conditional Access

Fishbowl

Job description

Why This Role Exists

Allocortech is implementing AS9100 and raising production rate. Infrastructure that stores design records, test records, inventory, and controlled technical data can no longer be an implicit founder-plus-vendor arrangement.

The company currently runs Google Workspace and a third-party managed service provider. It is moving to Microsoft 365 and Azure. Fishbowl is being stood up for inventory and manufacturing control. There is no QMS application in place. Additional sites and an approximate doubling of headcount are planned. Identity, access, backup, and change of those systems are not documented to a standard an auditor or customer can sample.

AS9100 Clause 7.1.3 requires infrastructure suitable for operation of processes. Clause 7.5 requires control of documented information. Clause 7.2 requires competence for work that affects product conformity — including who may administer systems that hold design, test, and production records. Without a named owner, those obligations sit in an unmanaged vendor queue.

This role exists to put a competent, authorized owner on IT infrastructure and cybersecurity so systems that hold product and quality information remain available, controlled, and auditable as volume and sites increase.

Role Summary

The Manager of IT is the process owner for enterprise information technology and cybersecurity. The role administers identity, endpoints, network, collaboration platforms, and the applications Operations and Engineering depend on, including Fishbowl. The role manages the existing third-party IT vendor, executes the Google Workspace to Microsoft 365 / Azure migration, and remains hands‑on. Authority is operational and security control of company systems — not product design release.

Core Responsibilities

• Own infrastructure required for operation of processes (Clause 7.1.3): identity, endpoints, network, file and collaboration systems, backup, and the hosting or tenant arrangements for business applications.
• Control documented information residing in IT systems (Clause 7.5): access, retention, retrieval, protection from unintended alteration or loss, and disposition of obsolete electronic records.
• Define and record competence for IT administration and privileged access (Clause 7.2): who may grant accounts, who may change production or inventory system configuration, what training records Quality can pull.
• Plan and execute the migration from Google Workspace to Microsoft 365 and Azure (Entra ID, Exchange Online, SharePoint/OneDrive, Teams, Intune). Keep cutover records. Do not leave dual‑uncontrolled repositories of design or quality files.
• Stand up and administer Fishbowl with Operations. Operations owns inventory and manufacturing process. IT owns platform availability, identity integration, backup, access model, and vendor coordination.
• Do not substitute SharePoint or shared drives for a QMS. When Quality selects a QMS application, provide infrastructure, identity, backup, and access control so Clause 7.5 can be demonstrated.
• Own cybersecurity for company systems: MFA and Conditional Access, least‑privilege identity, endpoint protection, logging, incident response, and protection of ITAR‑controlled technical data in mail, files, and endpoints.
• Establish joiner–mover–leaver, access review, and offboarding so departed personnel cannot reach design, test, or production records.
• Manage the third‑party IT vendor: statement of work, SLA, architectural control retained by Allocortech, and the decision of what remains outsourced.
• Publish a site‑IT standard that can be applied when additional locations come online — same identity, access, backup, and support pattern.
• Maintain an asset inventory and a lightweight change‑control practice for systems that hold product or quality records. Avoid process theater.
• Represent IT and cybersecurity at management review with evidence an auditor can sample: access reviews, backup restore tests, vendor performance, incidents, and infrastructure fitness.

Required Qualifications

• Bachelor’s in information systems, computer science, engineering, or equivalent experience.
• 5–8 years administering enterprise productivity and infrastructure platforms, including hands‑on ownership rather than ticket dispatch only.
• Demonstrated Google Workspace to Microsoft 365 / Azure migration, or an equivalent identity‑mail‑file‑endpoint cutover, with records of the change.
• Working knowledge of Entra ID, Exchange Online, SharePoint/OneDrive, Teams, Intune, and Conditional Access.
• Demonstrated ownership of cybersecurity controls for an organization — policy plus implementation, not advisory‑only.
• Experience managing an MSP or equivalent third‑party IT provider, including a written statement of work.
• Working familiarity with AS9100 or ISO 9001 obligations that touch infrastructure and documented information (Clauses 7.1.3, 7.2, 7.5), or equivalent regulated‑manufacturing practice.
• Able to perform the work on‑site with flexibility and to travel to other company sites as required.
• Must be a U.S. Person as defined under ITAR 22 C.F.R. § 120.15.

Preferred Qualifications

• Microsoft certification at administrator level, or equivalent demonstrated skill.
• Implementation or administration of Fishbowl or a comparable SMB manufacturing inventory / MRP system.
• NIST SP 800‑171 / CMMC exposure or a written system security plan for CUI / export‑controlled data.
• Security certification (Security+, CISSP, CISM) or equivalent program ownership.Prior IT ownership during a period of rapid headcount or multi‑site growth.
• Direct participation in an AS9100 or ISO 9001 implementation or customer information‑security review.

Why Allocortech

Just over 50 people. Revenue has tripled. Founders from Kitty Hawk/Cora, Google, Rockwell Collins, and Lockheed. Small enough that your board flies. Serious enough that the architecture holds up in the air and on the water. American‑made. Mountains out the window.

This position may require prolonged periods of sitting, standing, walking, computer work, and occasional exposure to moderate levels of noise, dust, and fumes in production and lab areas.

Level and base salary will be determined on a case‑by‑case basis and may vary based on the following considerations: job‑related knowledge and skills, education, and experience. Base salary is just one component of our total rewards package. Employees may receive equity opportunities and/or cash bonus, and have access to a robust benefits package including: top tier medical HMO, PPO & a 100% company‑sponsored HSA plan option, dental and vision coverage, unlimited PTO, 11 paid holidays per year, flexible spending and dependent care savings accounts, paid parental leave, disability insurance, life insurance, and access to a 401(k) retirement plan with company match. Eligibility for benefits may vary based on employment status; please check with your recruiter for a comprehensive list of the benefits available for this role. Benefit programs are subject to change at the company’s discretion.

Important Information

FOR CANDIDATES SEEKING TO WORK IN US OFFICES ONLY:

To conform to U.S. Government technology export regulations, including the International Traffic in Arms Regulations (ITAR), Allocor.Tech Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable.

Allocor.tech provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment at Allocor.Tech, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.