IT Specialist Identity, Device & Data-Protection Operations Department: Administration Location: On-site - Largo, MD Role Summary ioSENTRIX is seeking an experienced IT Specialist to lead day-to-day technology operations and to operate and maintain the modern identity, device, and data-protection environment implemented by ioSENTRIX. The person in this role runs, monitors, and maintains the environment and supports staff across all sites. Scope of this role - manage, not build This is a management and operations role. The IT Specialist operates and maintains the security controls ioSENTRIX has already implemented (single sign-on, Conditional Access, device management, data-loss prevention, and the Zero Trust model). Design, architecture, new integrations, policy redesign, migrations, and incident response for sophisticated threats remain with ioSENTRIX. The IT Specialist applies approved changes, handles business-as-usual administration, and escalates anything beyond that scope. Experience and Requirements
- Minimum of ten years of experience in IT / database administration.
- Hands-on administration of: Windows 11, Windows Server, Active Directory, Microsoft 365 / Entra ID, Google Workspace, and QuickBooks.
- Microsoft 365 / Entra ID administration, including single sign-on (SSO) application assignments, Conditional Access policy maintenance, and multi-factor authentication (MFA) enrollment and support.
- Device management with Microsoft Intune (MDM), including iPhones enrolled through Apple Business Manager, compliance baselines, and remote wipe/lock.
- Working familiarity with Data Loss Prevention (Microsoft Purview) monitoring and alerting, and with Zero Trust principles (verify explicitly, least privilege).
- Experience with local and cloud-based backup systems.
- Experience with HIPAA compliance and encrypted email security.
- Ability to set up and troubleshoot equipment such as laptops, video-conference systems, and mobile phones.
- Ability to seek out new and applicable technologies, with knowledge of nonprofit technology trends and protocols.
- Effective communication skills to support staff at varying levels of technical proficiency, and the discernment to escalate highly sophisticated threats to ioSENTRIX and the Executive Director.
Managed Security Operations - Identity, Device & Data Protection Operate and maintain the environment ioSENTRIX implemented. Keep it running and compliant day to day; apply ioSENTRIX-approved changes; escalate design, new integrations, and incidents.
- Identity & Access (Entra ID / SSO): administer single sign-on across integrated applications; manage user provisioning and de-provisioning; maintain group and role assignments. Operate within the existing design - new SSO integrations and architecture are owned by ioSENTRIX.
- Conditional Access & MFA: monitor and maintain existing Conditional Access policies and MFA enrollment; uphold corporate-device-only access to sensitive systems; apply ioSENTRIX-approved policy changes and escalate exceptions.
- Zero Trust enforcement: operate day to day within the Zero Trust model - verify access requests and uphold least-privilege; do not re-architect.
- Device management (Intune + Apple Business Manager): enroll and manage company Windows and iOS devices; maintain compliance baselines (encryption, patching, screen lock, antivirus); execute remote wipe or lock on lost, stolen, or unreturned devices.
- Data Loss Prevention (Microsoft Purview): monitor DLP alerts for HIPAA-regulated data; triage, document, and report; reinforce approved AI-tool usage guidance (e.g., no regulated data in public AI tools); escalate policy tuning to ioSENTRIX.
- Identity lifecycle / offboarding: execute the centralized offboarding runbook so departing staff lose access across all services at once; recover devices and close personal-device access paths.
- Legacy systems: maintain least-privilege file-sharing permissions on the on-premises server hosting QuickBooks; monitor access and report anomalies.
- Escalation to ioSENTRIX: engage ioSENTRIX for architecture changes, new application SSO integrations, Conditional Access or DLP redesign, incident response, and any threat beyond routine operations.
Essential Functions
- Serve as the lead of the IT department.
- Identify innovative trends to share with staff via quarterly updates (trends, information to share, training needs, inventory updates, new policies to review and share).
- Manage the CRC Tech Audit: current inventory of all active devices across all sites; asset ID numbers for all technology; passwords for issued technology, or the ability to reset them as needed.
- Ensure IT policies remain current and are signed by all staff.
- Create and manage a ticketing system for IT issues and update it as issues are resolved.
- Provide technical support to end-users, resolving hardware, software, and network issues to ensure seamless operations.
- Install, configure, and maintain IT systems, including desktops, laptops, and peripheral devices.
- Monitor system performance and implement troubleshooting strategies to minimize downtime.
- Manage and maintain network infrastructure.
- Configure and monitor routers, switches, and firewalls to safeguard network security.
- Implement network upgrades and patches, improving system reliability and performance.
- Provide training and support to staff on network protocols, cybersecurity, and overall best practices.
System Administration
- Establish technology access for new hires (Entra ID / Microsoft 365 provisioning and SSO assignment).
- Server management: create and manage users in Active Directory, configure DHCP, and handle file management and sharing.
- Account management: create and manage users and email accounts in Microsoft 365 and Google Workspace.
- Password management for user accounts and third-party vendor accounts.
- Inventory tracking via ongoing technology audits.
- Install and configure new equipment (PCs, servers, firewalls, access points, printers, etc.).
System Maintenance
- Patch monitoring and management: monitor operating-system patch levels of known systems running approved operating systems and connected to the network.
- Virus-definition monitoring and management: monitor antivirus definition levels of all known systems.
- Maintain the computer network across multiple sites by keeping software and programs current.
- Perform any task necessary to keep all databases functioning smoothly.
- Investigate malfunctioning computers and make recommendations.
- Manage new and unassigned technology, ensuring secure storage and maintenance.
Additional Responsibilities
- Periodically audit computer hard drives to ensure compliance with the terms of license agreements.
- Serve as the technical contact for third-party vendors (Comcast / Verizon, Xtel, QuickBooks, etc.) and as the primary liaison to ioSENTRIX for security matters.
- Ability to install and run new data cabling.
- Keep track of staff completing the onboarding viewing of the cybersecurity presentation.
- Administer the evaluation for the cybersecurity presentation.