Security Administrator

Children's Hospital Association; Lenexa (KS); Hybrid; USD 82,000 - 166,000; Full time

Benefits offered by this job

Medical insurance

Retirement savings contribution

Health Savings Account with company**

Wellness program

Paid time off and personal days

Job summary

Children's Hospital Association in Lenexa, Kansas is seeking a Security Administrator to lead day-to-day security operations across on‑premises and cloud environments, helping to advance a safer digital ecosystem for the organization.

You will implement integrations and automation between security tools, support identity and access governance, manage vulnerabilities, and contribute to AI governance and cloud security modernization while maintaining regulatory compliance and strong documentation

Qualifications

• Bachelor's degree in information security, IT, or related field or equivalent experience.
• 3+ years in IT or information security administration, including 2+ years in a security-focused role.
• Hands-on experience with Microsoft 365 security administration (Entra ID, Conditional Access, Purview, Defender) in cloud or hybrid environments.
• Experience integrating systems and security tools using APIs, SSO, SCIM, and connectors; scripting or automation skills (PowerShell, Python, or low-code workflows).
• Working knowledge of NIST CSF, HIPAA, and/or ISO 27001, plus experience reviewing SOC2 evidence.
• Experience with vulnerability management, endpoint management, patching, and change management.
• Strong communication, documentation, and project management skills.

Responsibilities

• Implement, administer, and continuously improve integrations, automation, and workflows between security tools and enterprise systems to improve efficiency, visibility, and audit readiness.
• Support identity and access governance activities, including access reviews, least-privilege controls, password management, and external/vendor access administration.
• Support security risk management activities, including vendor assessments, technology reviews, audit readiness efforts, and data protection initiatives.
• Monitor vulnerability management, endpoint security, security awareness training, and operational security controls to help maintain a proactive security posture.
• Contribute to emerging security initiatives such as AI governance, Shadow IT management, and cloud security modernization efforts.
• Develop documentation, standards, and security processes that support consistency, scalability, and regulatory compliance across the organization.
• Collaborate cross-functionally to troubleshoot issues, implement improvements, and support ongoing security projects.

Skills

Security administration

Cloud security

Vulnerability management

Identity and access governance

Scripting/automation

Communication and documentation

Project management

Education

Bachelor's degree in information security, IT, or related field

Equivalent experience

Tools

PowerShell

Python

Low-code workflows

APIs

SSO

SCIM

Connectors

Microsoft 365 Defender

Entra ID

Job description

Security Administrator

Hybrid in Lenexa, KS

Join us in shaping a healthier future for kids. At Children's Hospital Association, we unite more than 200 member hospitals to put children first—advancing care, informing policy, and driving progress together.

Where You'll Work

This position is based in our Lenexa, Kansas office. We leverage a hybrid working model working three days in the office, two days optional remote work.

What You'll Do

The Security Administrator is responsible for the day-to-day administration and continuous improvement of the information security control environment, with a primary focus on integrating information systems and security tools across on-premises and cloud environments. This role owns the recurring operational workload of the Information Security & Risk team, including identity and access governance, data protection, security awareness training, vulnerability and endpoint management, vendor/third-party risk assessment, and Shadow IT/AI governance.

• Implement, administer, and continuously improve integrations, automation, and workflows between security tools and enterprise systems to improve efficiency, visibility, and audit readiness.
• Support identity and access governance activities, including access reviews, least-privilege controls, password management, and external/vendor access administration.
• Support security risk management activities, including vendor assessments, technology reviews, audit readiness efforts, and data protection initiatives.
• Monitor vulnerability management, endpoint security, security awareness training, and operational security controls to help maintain a proactive security posture.
• Contribute to emerging security initiatives such as AI governance, Shadow IT management, and cloud security modernization efforts.
• Develop documentation, standards, and security processes that support consistency, scalability, and regulatory compliance across the organization.
• Collaborate cross-functionally to troubleshoot issues, implement improvements, and support ongoing security projects.

What You'll Bring to CHA

Any combination of education and experience providing the required skill and knowledge is qualifying:

• Bachelor's degree in information security, IT, or related field, or equivalent experience.
• 3+ years in IT or information security administration, including at least 2 years in a security-focused role.
• Hands-on experience with Microsoft 365 security administration (Entra ID, Conditional Access, Purview, Defender) in a cloud or hybrid environment.
• Experience integrating systems and security tools using APIs, SSO, SCIM, and connectors; scripting or automation skills (PowerShell, Python, or low-code workflows).
• Working knowledge of NIST CSF, HIPAA, and/or ISO 27001, plus experience reviewing SOC2 evidence.
• Experience with vulnerability management, endpoint management, patching, and change management.
• Strong communication, documentation, and project management skills.

Preferred Qualifications

• Security certifications such as Security+, SSCP, CySA+, SC-300, SC-401, or AZ-500.
• Experience with third-party risk management or GRC platforms.
• Familiarity with AI governance, Shadow IT/SaaS discovery, and AI risk frameworks.
• Knowledge of incident response, disaster recovery, and business continuity practices.
• Experience building security metrics and dashboards.
• Training and facilitation skills.

Our Perks and Benefits

• Medical, dental and vision insurance
• Retirement Savings program with generous company contribution
• Health Savings Account with company contribution
• Wellness program
• Paid time off and personal days9paid holidays
• And more!

More About CHA

This pay rangeshown isa guideline. Min:$82,000 - $166,000 Compensation is based on factors such as qualifications, skill level, and competencies; compensation is based on therole'slocation and is subject to change based on work location.

Diversity, Equity and Inclusion

CHA is committed to advancing diversity, equity and inclusion within our organization, our membership, the care delivery of children’s hospitals and their communities and through the federal policymaking environment. With children’s hospitals we strive to ensure organizational cultures where everyone feels valued and actively participates in the mission of our organizations. Racism stands firmly in the way of improving children’s health. We remain vigilant in our quest for a diverse and inclusive community and in standing against racism and discrimination wherever it exists.

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin, and protected veteran status, or disability status.

Visa sponsorship is not available for this position.

#LI-Hybrid