IT Infrastructure and Security Manager

Duties and Responsibilities

• Own identity and access hygiene, including a working joiner/mover/leaver process, elimination of stale and orphaned accounts, and scheduled rotation of admin and service account credentials.
• Document, approve, and technically enforce security policies across the environment using Group Policy, Intune, and Conditional Access, in support of HIPAA security requirements.
• Maintain 100% MFA and Conditional Access coverage for users and administrators.
• Administer and monitor Microsoft Defender (XDR and/or Defender for Office 365) and at least one SIEM platform; oversee related email protection controls (including DMARC/SPF/DKIM).
• Ensure server and domain controller patching cadence is met and backups are verified.
• Build and run SOC 2 Type II evidence collection as a repeatable process and keep the organization on track for attestation.
• Deliver a monthly security posture report to the CIO covering open risks, aging remediation, and audit readiness.
• Hold the IT partner and offshore resources accountable for SLA performance; independently verify completed work and conduct third-party access reviews.
• Supervise network-related work as needed (site firewalls, VPN/SD-WAN, VLANs, DNS).
• Follow through on aging remediation items and communicate risk clearly to non-technical leaders.