IT Security Administrator

JOB TITLE: IT Security Administrator EMPLOYER: NASPO (National Association of State Procurement Officials) DEPARTMENT: Technology LOCATION: Hybrid - Local to Lexington KY REPORTS TO: Director of IT Operations GRADE: 29 SALARY RANGE: $93,850 - $114,950 Job Summary: The IT Security Administrator supports the day-to-day operation, monitoring, and continuous improvement of the organization’s cybersecurity environment. Working closely with other members of the IT Operations team, this position administers security platforms, investigates security events, responds to security-related support requests, and helps maintain secure configurations across cloud services, endpoints, identities, and other technology systems. This is a hands-on technical role intended for an IT professional with foundational experience in systems administration and cybersecurity who is interested in continuing to develop security expertise. Essential Functions: Administer, maintain, and secure organizational security platforms, including Microsoft 365 security technologies, Microsoft Defender, Bitdefender, and related tools; monitor agent coverage, log availability, and policy deployment to verify that controls operate as intended. Maintain and strengthen endpoint, identity, and cloud security controls, including multifactor authentication, Conditional Access, privileged access, and periodic access reviews; coordinate changes to shared platforms with the administrators responsible for those systems. Monitor and investigate security alerts, logs, authentication activity, and security-related service requests involving phishing, suspicious email, account compromise, and endpoint events; document findings and escalate significant incidents as appropriate. Support incident response and security-related recovery activities by maintaining assigned procedures and participating in testing, exercises, and response efforts under the direction of the Director of IT Operations. Identify vulnerabilities, insecure configurations, outdated software, and other security risks; coordinate remediation with system owners, track issues through resolution, and verify corrective actions. Maintain clear, current documentation of security configurations, operational procedures, investigations, and remediation activities. Support security awareness initiatives by providing practical guidance and contributing lessons learned from recurring incidents and support requests. Stay current on relevant threats and recommended best practices and recommend improvements to security controls and operational resilience. Skills, Experience, and Qualifications: At least three years of experience in IT administration, cybersecurity, systems administration, or a related technical role, or an equivalent combination of education and practical experience. Working knowledge of Microsoft 365 administration and security concepts. Experience supporting Windows endpoints and enterprise IT environments. Understanding of identity and access management concepts, including MFA and role-based access. Familiarity with endpoint protection, antivirus, EDR, or similar security technologies. Ability to review logs and security alerts and perform basic investigation and troubleshooting. Understanding of fundamental networking concepts including TCP/IP, DNS, firewalls, and common network services. Strong troubleshooting, documentation, and communication skills. Preferred qualifications include: Experience administering Microsoft Defender, Bitdefender, or another enterprise endpoint security/EDR platform; experience with Microsoft Entra ID, Microsoft Intune, or Microsoft Sentinel is also valuable. Experience with PowerShell or other scripting/automation technologies. Familiarity with vulnerability management and security configuration frameworks. Relevant Microsoft or cybersecurity certifications such as Security+, SC-200, SC-300, or equivalent experience. Travel Requirements: Intermittent travel to company events w…

View the full posting and apply