Sr. IT Operations & Cybersecurity Manager

TalentHound; Byron (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

TalentHound is seeking a hands-on IT security leader who can own security and IT operations from the ground up. You’ll act as both strategist and operator, running day-to-day systems and preparing devices for new hires while defending our network and data.

You’ll build our CMMC and NIST compliance framework for government-adjacent environments, supervise on-site operations, and shape security posture as the team grows from a solo function to a small, fast-moving security team.

Qualifications

• 8+ years in IT infrastructure, operations, or systems engineering with solo or small-team ownership.
• Strong cloud experience (GCP and AWS).
• Hands-on MDM (Jamf/Intune) and EDR implementation.
• Identity system automation (Okta, Azure AD) in regulated environments.
• Deep network security expertise—VPNs, firewalls, routing, segmentation, threat defense.
• Direct experience building or maintaining CMMC and/or NIST 800-171 compliance frameworks.
• Eligible to work in the US and to hold ITAR/EAR access.
• Comfortable being on-site regularly to support a small, fast-moving team.

Responsibilities

• Security & network defense architect and protect infra; logging, detection, and incident response.
• Build and maintain CMMC and NIST 800-171/800-53 compliance from scratch.
• Own IdP systems with least-privilege access and just-in-time principles.
• MDM/EDR deployment, fleet lifecycle, device-trust and conditional-access workflows.
• Oversee day-to-day IT ops, SaaS management, onboarding/offboarding automation.
• Vendor management for IT/security tooling and contracts.
• Business continuity and disaster recovery planning.

Skills

IT security leadership

Cloud security (GCP/AWS)

MDM/EDR deployment

Identity & access management

NIST 800-171 / CMMC

Network security

On-site presence

US work eligibility

Job description

We need one person to own IT and security from the ground up. This is a true builder role: you'll be a team of one for the foreseeable future, operating as both the strategist setting direction and the hands-on operator keeping systems running day to day from preparing laptops for new hires and controlling door access. The company is a team of 25, but projects to double in size. You'll design and defend the network against real threats, and you'll build and maintain the CMMC compliance framework that lets us operate in export-controlled, government-adjacent environments — essentially standing up the function solo before it grows.

Requirements

• 8+ years in IT infrastructure, operations, or systems engineering, including solo or small-team ownership
• Strong cloud experience (GCP and AWS)
• Hands-on MDM (Jamf/Intune) and EDR implementation
• Identity system automation (Okta, Azure AD) in regulated environments
• Deep network security expertise — VPNs, firewalls, routing, segmentation, threat defense
• Direct experience building or maintaining CMMC and/or NIST 800-171 compliance frameworks
• Eligible to work in the US and to hold ITAR/EAR access
• Comfortable being on-site regularly to support a small, fast-moving team

What You'll Own

• Security & network defense — architect and actively defend physical and cloud network infrastructure against intrusion; own logging, detection, and incident response
• CMMC / compliance framework — build and maintain CMMC (and related NIST 800-171/800-53) compliance from the ground up, and serve as the key stakeholder in audits and regulatory inspections
• Identity & access management — own IdP systems on least-privilege and just-in-time principles
• Endpoint management — MDM/EDR deployment, fleet lifecycle, device-trust and conditional-access workflows
• Day-to-day IT operations — corporate IT, SaaS management, employee onboarding/offboarding automation, web hosting/DNS support
• Vendor management — select and manage IT/security tooling and contracts
• Business continuity & disaster recovery planning