Security Administrator

Centers for Independence; Wisconsin; On-site; USD 90,000 - 120,000; Full time

Job summary

Centers for Independence is seeking a Microsoft System Administrator to manage and secure Microsoft 365, Azure, and on-premises servers. The role emphasizes identity protection, access governance, and proactive threat response to protect data and users across the organization.

The position requires 7 years of relevant security experience and a strong background in Defender tools, Intune, and Purview. This is a full-time role based in Wisconsin, with travel that is minimal.

Qualifications

• Associate degree in information technology or related field.
• 7 years of experience administering Microsoft 365 and Azure security technologies.
• Microsoft security, identity, or cloud certifications strongly preferred.

Responsibilities

• Administer Entra ID, MFA, conditional access, and least privilege configurations.
• Manage Defender for Office 365, DLP, retention, and external sharing governance.
• Oversee Intune security baselines, device compliance, and patch prioritization.
• Monitor Secure Score, Azure Policy, Key Vault, and network security settings.
• Respond to security alerts and coordinate remediation with teams.
• Document configurations and prepare leadership reports.
• Provide on-call after-hours support for security issues.
• Support on-premises servers alongside cloud platforms.

Skills

Identity governance

Least privilege access

Security incident response

Access reviews

Documentation & reporting

Education

Associate degree in information technology, cybersecurity, computer science, or a related field

Tools

Microsoft Entra ID

MFA

Intune

Defender for Office 365

Purview DLP

SharePoint/Teams governance

Azure Policy

Key Vault

Job description

Position Type Full Time

Education Level 2 Year Degree or Equivalent Experience

Travel Percentage Minimal; Less than 10%

Category Information Technology

Description

Job Purpose:

The Microsoft System Administrator is responsible for administering and supporting Microsoft 365, Azure, Endpoint, identity and security platforms to protect organizational systems, data, and users. This role monitors security posture, supports compliance requirements, responds to security alerts, maintains secure configurations, and partners with IT teams to ensure reliable and secure technology services across Centers for Independence. This role also supports on-premises servers.

Essential Job Functions:

(Reasonable accommodation may be made to enable individuals with disabilities to perform these essential functions.)

• Administer Microsoft Entra ID, conditional access, MFA, sign-in risk policies, identity protection, service accounts, app registrations, managed identities, access reviews, align platform with least privilege access model, enforce (PIM) Privileged Identify Management, and identity access management configuration.
• Administer Microsoft Defender for Office 365, anti-phishing protections, Safe Links, Safe Attachments, Microsoft Purview DLP, retention policies, and external sharing governance for email, Teams, SharePoint, and related collaboration platforms.
• Manage Intune security baselines, endpoint onboarding, encryption, firewall settings, device compliance, alert response, endpoint reporting, vulnerability exposure, and patch prioritization.
• Monitor Microsoft Secure Score and Defender for Cloud recommendations; manage Azure secure score, Azure role assignments, Azure Policy compliance, network security groups, firewall rules, Key Vault access policies, and related cloud security remediation.
• Monitor security alerts, investigate potential threats, coordinate response activities, document findings, elevate incidents as appropriate, and support timely remediation with internal teams and external partners.
• Maintain documentation of security configurations, access reviews, remediation activities, compliance controls, and audit evidence; prepare reports for leadership on security status, trends, risks, and progress.
• Provide systems administration support for security-related platforms, assist with configuration changes, troubleshoot access and device compliance issues, support infrastructure projects, and collaborate with IT teams to maintain secure and reliable technology services.
• Participate in the IT on-call rotation to provide after-hours support, respond to urgent system or security issues, elevate incidents as appropriate, and support continuity of technology services.
• Server Management on Windows Operating Systems, working with active directory and group policies
• Perform other job-related duties as assigned to support departmental goals, organizational priorities, and the overall mission of Centers for Independence.

Qualifications

Required Education, Experience, Certifications, Licensure and Credentials:

Minimum Required Education:

Associate degree in information technology, cybersecurity, computer science, or a related field; equivalent education, training or experience may be considered.

Minimum Required Experience:

a combination of education, certificates, or hands on experience totaling 7 years in administering Microsoft 365 and Azure security technologies, including Entra ID, conditional access, MFA, privileged access management, Microsoft Defender, Intune endpoint compliance, Purview DLP and retention, SharePoint/Teams external sharing governance, vulnerability management, Azure role assignments, Azure Policy, and Key Vault access controls.

Required License - Certification - Registration

Microsoft security, identity, or cloud certifications strongly preferred.

Travel Type (local):

Less than 10%

Required Valid Driver's License:

Valid driver's license

Required Auto Insurance:

Vehicle liability insurance in accordance with Agency policy

Knowledge, Skills, & Abilities:

• Working knowledge of Microsoft Entra ID, conditional access, MFA, identity protection, privileged access management, and least privilege security practices.
• Ability to perform access reviews, identify stale or excessive permissions, and support secure identity and access governance.
• Knowledge of service accounts, app registrations, managed identities, authentication methods, and secure permission management.
• Experience with Microsoft Defender security tools, including Defender for Office 365, endpoint alert response, anti-phishing protections, Safe Links, and Safe Attachments.
• Knowledge of Microsoft Purview capabilities, including data loss prevention, retention policies, compliance support, and eDiscovery-related controls.
• Ability to configure,