Senior IT Systems Admin & Cloud Security Lead

Paylocity; Chesapeake (VA); On-site; USD 115,000 - 155,000; Full time

Job summary

Paylocity in Chesapeake, VA is seeking a Senior IT Systems Administrator to serve as a senior technical contributor and operations leader within our hands-on IT team. You will co-own critical systems alongside the IT Director and drive security, compliance (CMMC/NIST), and cloud migration efforts.

The role focuses on shaping cybersecurity posture, maintaining patching, AD and Entra identity management, monitoring, backup, and least-privilege enforcement.

Qualifications

• Bachelor's degree in IT, Networking, Security, or related field with 5–8 years of IT systems administration experience.
• Experience leading patching/remediation workflows and with vulnerability scanners is a plus.
• Experience with AD, SSO/IdP, Windows/Linux servers, and endpoint security.
• Familiarity with M365/Azure and hybrid cloud transitions; CIS benchmarks knowledge.

Responsibilities

• Own patching and vulnerability management across Windows, Linux, and Mac environments.
• Lead CMMC/NIST 800-171 compliance efforts and audit readiness.
• Administer AD and cloud Entra identity management per CIS benchmarks.
• Configure monitoring across Windows, Linux, VMware, and Azure systems.
• Administer file storage, backups, and business continuity planning.
• Support secure data handling and implement least-privilege access models.

Skills

Patch management

Active Directory

Cloud administration

Security monitoring

CMMC compliance

Networking basics

Documentation

Education

Bachelor's degree in IT/CS

Tools

InTune

Nessus/OpenVAS

Nagios/CheckMK

VMware

Azure

Cisco Firepower

Job description

Paylocity in Chesapeake, VA is seeking a Senior IT Systems Administrator to serve as a senior technical contributor and operations leader within our hands-on IT team. You will co-own critical systems alongside the IT Director and drive security, compliance (CMMC/NIST), and cloud migration efforts.

The role focuses on shaping cybersecurity posture, maintaining patching, AD and Entra identity management, monitoring, backup, and least-privilege enforcement.