Security Administrator

Centers for Independence; Milwaukee (WI); On-site; USD 90,000 - 120,000; Full time

Job summary

Centers for Independence in Milwaukee seeks a Microsoft System Administrator to manage Microsoft 365, Azure, Endpoint, and identity/security platforms to protect systems, data, and users.

This role monitors security posture, supports compliance, responds to alerts, maintains secure configurations, and collaborates with IT teams to ensure reliable, secure services across on-prem and cloud environments.

Qualifications

• Associate degree or equivalent experience in IT, cybersecurity, or related field.
• 7 years of hands-on experience administering Microsoft 365 and Azure security technologies.
• Strong knowledge of Entra ID, conditional access, MFA and privileged access management.

Responsibilities

• Manage Microsoft Entra ID and conditional access configurations.
• Administer Defender for Office 365 and related security protections.
• Handle Intune endpoint security baselines and device compliance.
• Monitor Azure security posture and policy compliance.
• Investigate security alerts and coordinate remediation.

Skills

Entra ID

Conditional access

MFA

Identity protection

Privileged access management

Least privilege security

Security monitoring

Security incident response

Security documentation

Education

Associate degree or equivalent

7 years Microsoft 365/Azure security experience

Tools

Microsoft Entra ID

Defender for Office 365

Intune

Purview DLP

SharePoint

Teams

Azure Policy

Key Vault

Job description

Position Type Full Time

Education Level 2 Year Degree or Equivalent Experience

Travel Percentage Minimal; Less than 10%

Category Information Technology

Description

Job Purpose:

The Microsoft System Administrator is responsible for administering and supporting Microsoft 365, Azure, Endpoint, identity and security platforms to protect organizational systems, data, and users. This role monitors security posture, supports compliance requirements, responds to security alerts, maintains secure configurations, and partners with IT teams to ensure reliable and secure technology services across Centers for Independence. This role also supports on-premises servers.

Essential Job Functions:

(Reasonable accommodation may be made to enable individuals with disabilities to perform these essential functions.)

• Administer Microsoft Entra ID, conditional access, MFA, sign-in risk policies, identity protection, service accounts, app registrations, managed identities, access reviews, align platform with least privilege access model, enforce (PIM) Privileged Identify Management, and identity access management configuration.
• Administer Microsoft Defender for Office 365, anti-phishing protections, Safe Links, Safe Attachments, Microsoft Purview DLP, retention policies, and external sharing governance for email, Teams, SharePoint, and related collaboration platforms.
• Manage Intune security baselines, endpoint onboarding, encryption, firewall settings, device compliance, alert response, endpoint reporting, vulnerability exposure, and patch prioritization.
• Monitor Microsoft Secure Score and Defender for Cloud recommendations; manage Azure secure score, Azure role assignments, Azure Policy compliance, network security groups, firewall rules, Key Vault access policies, and related cloud security remediation.
• Monitor security alerts, investigate potential threats, coordinate response activities, document findings, escalated risks, and support timely remediation with internal teams and external partners.
• Maintain documentation of security configurations, access reviews, remediation activities, compliance controls, and audit evidence; prepare reports for leadership on security status, trends, risks, and progress.
• Provide systems administration support for security-related platforms, assist with configuration changes, troubleshoot access and device compliance issues, support infrastructure projects, and collaborate with IT teams to maintain secure and reliable technology services.
• Participate in the IT on-call rotation to provide after-hours support, respond to urgent system or security issues, escalated incidents as appropriate, and support continuity of technology services.
• Server Management on Windows Operating Systems, working with active directory and group policies.
• Perform other job-related duties as assigned to support departmental goals, organizational priorities, and the overall mission of Centers for Independence.

Qualifications

Required Education, Experience, Certifications, Licensure and Credentials:

(Where appropriate, education and/or experience may be substituted)

Minimum Required Education:

Associate degree in information technology, cybersecurity, computer science, or a related field; equivalent education, training, or experience may be considered.

Minimum Required Experience:

a combination of education, certificates, or hands on experience totaling 7 years in administering Microsoft 365 and Azure security technologies, including Entra ID, conditional access, MFA, privileged access management, Microsoft Defender, Intune endpoint compliance, Purview DLP and retention, SharePoint/Teams external sharing governance, vulnerability management, Azure role assignments, Azure Policy, and Key Vault access controls.

Required License – Certification – Registration:

Microsoft security, identity, or cloud certifications strongly preferred.

Travel Type (local):

Less than 10%

Required Valid Driver’s License:

Valid driver’s license

Required Auto Insurance:

Vehicle liability insurance in accordance with Agency policy

Knowledge, Skills, & Abilities:

• Working knowledge of Microsoft Entra ID, conditional access, MFA, identity protection, privileged access management, and least privilege security practices.
• Ability to perform access reviews, identify stale or excessive permissions, and support secure identity and access governance.
• Knowledge of service accounts, app registrations, managed identities, authentication methods, and secure permission management.
• Experience with Microsoft Defender security tools, including Defender for Office 365, endpoint alert response, anti-phishing protections, Safe Links, and Safe Attachments.
• Knowledge of Microsoft Purview capabilities, including data loss prevention, retention policies, compliance support, and eDiscovery-related controls.
• Ability to configure, monitor, and report on Intune security baselines, endpoint compliance, encryption, firewall settings, and device remediation activities.
• Knowledge of SharePoint and Teams external sharing controls and the ability to audit access against organizational policies.
• Ability to review Microsoft Secure Score and Defender for Cloud recommendations, prioritize security improvements, and track progress over time.
• Knowledge of Azure security controls, including role assignments, Azure Policy compliance, network security groups, firewall rules, Key Vault access policies, and vulnerability remediation.
• Strong analytical, documentation, communication, and follow-through skills with the ability to escalated risks, report status, and coordinate remediation with technical teams.

Physical Requirements, Visual Acuity, and Work Conditions:

Physical Requirements:

Ability to sit for extended periods while working at a computer workstation; regularly view and work from a computer screen; use hands and fingers for keyboarding, mouse use, and related computer tasks; and occasionally lift, carry, push, or pull equipment or materials weighing up to 50 pounds.

Visual Acuity:

The worker is required to have close visual acuity to perform an activity such as preparing and analyzing data and figures; transcribing; viewing a computer terminal.

Working Conditions:

None: The worker is not substantially exposed to adverse environmental conditions.