VP of Infrastructure and Security

Locust Point Capital, Inc.; Miami (FL); On-site; USD 140,000 - 180,000; Full time

Job summary

Locust Point Capital, Inc. seeks a hands-on VP of Infrastructure and Security to own our network, end-user computing, identity infrastructure, and Microsoft 365 ecosystem. This leadership role combines strategic oversight with direct technical work across on-premises office infrastructure, desktops, and managed service providers.

You will build a small future team as the firm grows. You will lead enterprise network, endpoint, and identity platforms, ensure security controls, manage SIEM/MDR

Qualifications

• 6+ years of hands-on IT systems administration with Windows focus.
• Experience administering enterprise networks: firewalls, switching, Wi‑Fi, VPN.
• Expertise with Microsoft Intune and Kaseya (or similar RMM).
• Experience with Apple Business Manager for iPhone enrollment and lifecycle management.
• Deep knowledge of Active Directory, Entra ID, Group Policy, and SSO config.
• Strong Microsoft 365 administration, especially SharePoint/Exchange Online.
• Experience patching Windows and third-party apps at scale.
• PowerShell scripting for automation.
• Familiarity with agentic AI workflows in IT ops.
• Experience backups/restoration testing and audits.
• Experience security controls in regulated/FS environments (MFA, conditional access).
• Experience triaging security alerts with SOC/MDR.
• Security+ or equivalent cert.
• Excellent troubleshooting & tech comms to non-tech users.

Responsibilities

• Own network administration including firewalls, switching, Wi‑Fi, VPN; coordinate changes.
• Manage firewalls, segmentation, VPN, and vendor coordination.
• Oversee endpoint protection and email security tooling with SIEM/MDR partner.
• Monitor backups and perform recovery testing; maintain docs.
• Administer Entra ID: users, groups, MFA, access reviews; SSO integrations.
• Build and manage Group Policy Objects; onboarding/offboarding workflows.
• Configure Windows workstations for new hires; VDI/endpoint imaging.
• Manage iPhone enrollment via Intune and Apple Business Manager; policy provisioning.
• Administer endpoints via Kaseya and Intune; patching; software deployment.
• Manage printers, drivers, queues, end-user connectivity; executive support.
• Administer Microsoft 365 stack: Exchange Online, Teams, OneDrive, SharePoint Online.
• Support email security, licensing, and mail flow.

Skills

Windows administration

Network administration

Intune

Kaseya

Entra ID

Active Directory

PowerShell

Security concepts

Cloud/office 365

Audits/compliance

SOC/MDR liaison

AI workflow awareness

Tools

Microsoft Intune

Kaseya

Apple Business Manager

Entra ID

Active Directory

Job description

Locust Point Capital is seeking a VP of Infrastructure and Security to own our network, end-user computing environment (laptop, phone), identity infrastructure, and Microsoft 365 ecosystem. This is a hands-on leadership role for a Windows-focused IT professional who thrives on building, configuring, and supporting the technology our team relies on every day. You will lead the firm’s network and on-premises office infrastructure (secure network closets, cabling, Wi-Fi, and firewalls), and oversee desktop support, corporate phones, and our managed service provider partner, with the opportunity to build a small team as the firm grows in the future.

Key Responsibilities

Infrastructure and Network

• Own network administration across the firm, including firewalls, switching, Wi-Fi, and VPN, planning and executing changes directly and coordinating with our network vendor where needed
• Administer firewalls, network segmentation, and VPN in line with the firm’s security standards, coordinating rule changes with the network vendor
• Own endpoint protection and email security tooling, including alert triage and remediation in coordination with the SIEM/MDR partner
• Monitor backup jobs across the environment and perform regular recovery testing to validate restore integrity
• Maintain documentation for systems, procedures, and standard configurations

Identity, Access, and Security

• Administer Microsoft Entra ID, including user lifecycle, group management, MFA, conditional access, and privileged access reviews
• Configure and maintain single sign-on (SSO) integrations for firm applications via Entra ID
• Build, maintain, and troubleshoot Group Policy Objects across the environment
• Manage onboarding and offboarding workflows in coordination with HR
• Conduct quarterly access reviews and produce evidence for audit and compliance

Endpoint and Device Management

• Build, image, and configure Windows workstations for new hires and refresh cycles
• Configure and deploy iPhones via Intune and Apple Business Manager, including mobile device management policies, automated enrollment, and application provisioning
• Administer endpoints through Kaseya and Microsoft Intune, including compliance policies and software deployment
• Manage Windows patching and third-party application patching across the endpoint fleet
• Deploy, configure, and support office printers, including drivers, print queues, and end-user connectivity
• Provide white-glove support for executives and end users across Windows environments

Microsoft 365 and Collaboration

• Administer the full Microsoft 365 stack including Exchange Online, Teams, OneDrive, and SharePoint Online
• Manage SharePoint site provisioning, permissions, and content governance
• Support email security, mail flow, and licensing across the tenant

Compliance and Audit

• Support the firm’s cybersecurity program by executing technical controls and maintaining evidence across all managed systems
• Respond to internal and external audit requests, including evidence gathering, control walkthroughs, and remediation
• Align system configurations, access reviews, and documentation to audit and regulatory requirements

Automation and Modern IT

• Develop and maintain PowerShell scripts to automate administrative tasks across Microsoft 365, Entra ID, Intune, and Active Directory
• Apply agentic AI tools and workflows (Claude, OpenAI, or similar) to streamline IT operations, documentation, and end-user support

Vendor and MSP Management

• Serve as the primary internal point of contact for our managed service provider, escalating issues and managing project handoffs
• Oversee desktop support, the corporate phone program, and the MSP relationship end to end, setting priorities, tracking SLAs, and holding vendors accountable for delivery
• Serve as the day-to-day contact for the SIEM/MDR partner, ensuring log sources are onboarded, alerts are actioned, and escalations follow the firm’s incident response plan
• Identify opportunities to automate and improve IT operations

Qualifications

Required

• 6+ years of hands-on experience in IT systems administration, with a strong Windows focus
• Hands-on experience administering enterprise networks, including firewalls, switching, Wi-Fi, and VPN, in a small or mid-size firm
• Proven expertise with Microsoft Intune and Kaseya (or comparable RMM platforms)
• Hands-on experience with Apple Business Manager for iPhone enrollment and lifecycle management
• Deep working knowledge of Active Directory, Entra ID, Group Policy, and SSO configuration
• Strong administration experience across the Microsoft 365 suite, particularly SharePoint and Exchange Online
• Experience managing Windows and third-party patching at scale
• Proficiency in PowerShell scripting for automation and administration
• Familiarity with agentic AI workflows and tools such as Claude or OpenAI applied to IT operations
• Experience monitoring backups and performing recovery testing
• Experience supporting IT compliance programs and responding to audits
• Experience operating security controls in a regulated or financial services environment (MFA, conditional access, endpoint protection, email security)
• Experience triaging security alerts and executing incident response procedures in partnership with a SOC or MDR provider
• Security+ or equivalent security certification
• Excellent troubleshooting skills and the ability to communicate technical concepts to non-technical users

Preferred

• Relevant Microsoft certifications (MS-102, MD-102, AZ-104)