Senior IT Security Administrator - Cloud & On-Prem Defender

Loft Federal; Boulder (CO); On-site; USD 115,000 - 145,000; Full time

Job summary

Loft Federal is seeking a highly technical IT Systems Security Administrator to harden configurations, patch vulnerabilities, manage IAM, and ensure compliance with CMMC 2.0 (Level 2) and NIST SP 800-171 across on‑prem and cloud environments.

You will collaborate with DevSecOps to enforce security controls, implement secure configurations in M365 GCC High, Google Cloud, and AWS GovCloud, and drive vulnerability management, threat assessments, and incident investigations.

Qualifications

• 5+ years of hands‑on Systems Administration with a heavy focus on IT security.
• US Citizenship is required due to federal contracting compliance and data handling requirements.
• Active DoD Secret clearance is required; TS/SCI clearance may be required for some programs.
• Bachelor's degree or higher preferred in information technology or related field.

Responsibilities

• Configure and harden Windows/Linux endpoints, servers, and networks per CIS benchmarks or DISA STIGs.
• Secure cloud environments: Microsoft 365 GCC High, Google Cloud, AWS GovCloud.
• Implement and manage MDM policies using Microsoft Intune or equivalent.
• Enforce IAM controls: MFA, SSO, and conditional access policies.
• Manage network security: firewalls, secure Wi‑Fi, VPNs, NAC.
• Configure, monitor, and tune EDR and SIEM logs.
• Ensure compliance with internal security policies and security plan.
• Assist investigations of security violations and incidents; report findings.
• Lead vulnerability management lifecycle: scans, analysis, prioritization, patches.
• Collaborate with DevSecOps to maintain NIST/CMMC compliance across CI/CD.

Skills

IT security

Systems Administration

Cloud security

Education

Bachelor's degree in information technology

Tools

NIST SP 800-37/800-53

Azure Security Engineer Associate

Security+ CE

CCNA Security

Job description

Loft Federal is seeking a highly technical IT Systems Security Administrator to harden configurations, patch vulnerabilities, manage IAM, and ensure compliance with CMMC 2.0 (Level 2) and NIST SP 800-171 across on‑prem and cloud environments.

You will collaborate with DevSecOps to enforce security controls, implement secure configurations in M365 GCC High, Google Cloud, and AWS GovCloud, and drive vulnerability management, threat assessments, and incident investigations.