Security Administrator

Centers for Independence; Milwaukee (WI); On-site; USD 90,000 - 130,000; Full time

Job summary

Centers for Independence is seeking a Senior Microsoft System Administrator to lead security architecture across Microsoft 365, Azure, Intune, and on-premises servers. You will implement least-privilege access, manage Defender and Purview controls, and coordinate with IT teams to keep systems secure and compliant.

The role includes on-call support, documenting configurations and remediation efforts, and delivering leadership reports on risk and progress to optimize organizational security

Qualifications

• Associate degree in information technology, cybersecurity, computer science, or a related field; equivalent education, training, or experience may be considered.
• 7 years of experience in administering Microsoft 365 and Azure security technologies, including Entra ID, conditional access, MFA, privileged access management, Defender, Intune, Purview DLP and retention, external sharing governance, vulnerability management, Azure role assignments, Azure Policy, Key Vault controls.
• Microsoft security, identity, or cloud certifications strongly preferred.

Responsibilities

• Administer Microsoft Entra ID, conditional access, MFA, sign-in risk policies, identity protection, service accounts, app registrations, managed identities, access reviews, align platform with least privilege access model, enforce (PIM) Privileged Identify Management, and identity access management configuration.
• Administer Microsoft Defender for Office 365, anti-phishing protections, Safe Links, Safe Attachments, Microsoft Purview DLP, retention policies, and external sharing governance for email, Teams, SharePoint, and related collaboration platforms.
• Manage Intune security baselines, endpoint onboarding, encryption, firewall settings, device compliance, alert response, endpoint reporting, vulnerability exposure, and patch prioritization.
• Monitor Microsoft Secure Score and Defender for Cloud recommendations; manage Azure secure score, Azure role assignments, Azure Policy compliance, network security groups, firewall rules, Key Vault access policies, and related cloud security remediation.
• Monitor security alerts, investigate potential threats, coordinate response activities, document findings, elevate risks, and support timely remediation with internal teams and external partners.
• Maintain documentation of security configurations, access reviews, remediation activities, compliance controls, and audit evidence; prepare reports for leadership on security status, trends, risks, and progress.

Skills

Microsoft Entra ID

Conditional Access

MFA

Privileged Access Management

Defender for Office 365

Intune Endpoint Compliance

Purview DLP

SharePoint/Teams external sharing

Azure Policy

Education

2 Year Degree or Equivalent Experience

Tools

Microsoft Defender

Intune

Azure

SharePoint

Teams

Job description

Position Type Full Time

Education Level 2 Year Degree or Equivalent Experience

Travel Percentage Minimal; Less than 10%

Category Information Technology

Description

Job Purpose:

The Microsoft System Administrator is responsible for administering and supporting Microsoft 365, Azure, Endpoint, identity and security platforms to protect organizational systems, data, and users. This role monitors security posture, supports compliance requirements, responds to security alerts, maintains secure configurations, and partners with IT teams to ensure reliable and secure technology services across Centers for Independence. This role also supports on-premises servers.

Essential Job Functions:

(Reasonable accommodation may be made to enable individuals with disabilities to perform these essential functions.)

• Administer Microsoft Entra ID, conditional access, MFA, sign-in risk policies, identity protection, service accounts, app registrations, managed identities, access reviews, align platform with least privilege access model, enforce (PIM) Privileged Identify Management, and identity access management configuration.

• Administer Microsoft Defender for Office 365, anti-phishing protections, Safe Links, Safe Attachments, Microsoft Purview DLP, retention policies, and external sharing governance for email, Teams, SharePoint, and related collaboration platforms.

• Manage Intune security baselines, endpoint onboarding, encryption, firewall settings, device compliance, alert response, endpoint reporting, vulnerability exposure, and patch prioritization.

• Monitor Microsoft Secure Score and Defender for Cloud recommendations; manage Azure secure score, Azure role assignments, Azure Policy compliance, network security groups, firewall rules, Key Vault access policies, and related cloud security remediation.

• Monitor security alerts, investigate potential threats, coordinate response activities, document findings, elevate risks, and support timely remediation with internal teams and external partners.

• Maintain documentation of security configurations, access reviews, remediation activities, compliance controls, and audit evidence; prepare reports for leadership on security status, trends, risks, and progress.

• Provide systems administration support for security-related platforms, assist with configuration changes, troubleshoot access and device compliance issues, support infrastructure projects, and collaborate with IT teams to maintain secure and reliable technology services.

• Participate in the IT on-call rotation to provide after-hours support, respond to urgent system or security issues, elevate incidents as appropriate, and support continuity of technology services.

• Server Management on Windows Operating Systems, working with active directory and group policies

• Perform other job-related duties as assigned to support departmental goals, organizational priorities, and the overall mission of Centers for Independence.

Qualifications

Required Education, Experience, Certifications, Licensure and Credentials:

(Where appropriate, education and/or experience may be substituted)

Minimum Required Education:

Associate degree in information technology, cybersecurity, computer science, or a related field; equivalent education, training, or experience may be considered.

Minimum Required Experience:

a combination of education, certificates, or hands on experience totaling 7 years in administering Microsoft 365 and Azure security technologies, including Entra ID, conditional access, MFA, privileged access management, Microsoft Defender, Intune endpoint compliance, Purview DLP and retention, SharePoint/Teams external sharing governance, vulnerability management, Azure role assignments, Azure Policy, Key Vault access controls.

Required License – Certification – Registration:

Microsoft security, identity, or cloud certifications strongly preferred.

Travel Type (local): Less than 10%

Required Valid Driver’s License: Valid driver’s license

Required Auto Insurance: Vehicle liability insurance in accordance with Agency policy

Knowledge, Skills, & Abilities:

• Working knowledge of Microsoft Entra ID, conditional access, MFA, identity protection, privileged access management, and least privilege security practices.

• Ability to perform access reviews, identify stale or excessive permissions, and support secure identity and access governance.

• Knowledge of service accounts, app registrations, managed identities, authentication methods, and secure permission management.

• Experience with Microsoft Defender security tools, including Defender for Office 365, endpoint alert response, anti-phishing protections, Safe Links, and Safe Attachments.

• Knowledge of Microsoft Purview capabilities, including data loss prevention, retention policies, compliance support, and eDiscovery-related controls.

• Ability to configure, monitor, and report on Intune security baselines, endpoint compliance, encryption, firewall settings, and device remediation activities.

• Knowledge of SharePoint and Teams external sharing controls and the ability to audit access against organizational policies.

• Ability to review Microsoft Secure Score and Defender for Cloud recommendations, prioritize security improvements, and track progress over time.

• Knowledge of Azure security controls, including role assignments, Azure Policy compliance, network security groups, firewall rules, Key Vault access policies, and vulnerability remediation.

• Strong analytical, documentation, communication, and follow-through skills with the ability to elevate risks, report status, and coordinate remediation with technical teams.

Physical Requirements, Visual Acuity, and Work Conditions:

Physical Requirements : Ability to sit for extended periods while working at a computer workstation; regularly view and work from a computer screen; use hands and fingers for keyboarding, mouse use, and related computer tasks; and occasionally lift, carry, push, or pull equipment or materials weighing up to 50 pounds.

Visual Acuity : The worker is required to have close visual acuity to perform an activity such as preparing and analyzing data and figures; transcribing; viewing a computer terminal.

Working Conditions : None: The worker is not substantially exposed to adverse environmental conditions.