Director of Information Technology & Cybersecurity - Florida

Key Responsibilities

• Manage on-prem network and servers (VLANs, firewalls, DNS/DHCP) and the Azure Government / M365 GCC High environment, including patching, capacity, and monitoring.
• Administer hybrid identity (AD / Entra ID): provisioning, access reviews, MFA, PIM; maintain endpoint compliance via Intune and Defender for Endpoint.
• Administer GlobalProtect VPN and Conditional Access for secure remote access; operate backup/DR (Azure Backup) and maintain the Disaster Recovery Plan.
• Oversee Tier 2/3 support, onboarding, and hardware lifecycle to SLA targets; lead IT projects and migrations; manage vendors, licensing, and assets.
• Led, develop, and evaluate IT staff; build cross-training to eliminate single points of knowledge failure; maintain SOPs and runbooks.
• Own the CMMC Level 2 / NIST SP 800-171 program: scoping, SSP, POA&M, and assessment readiness; primary contact for C3PAO assessors.
• Maintain a continuously audit-ready control environment; run risk assessments and the risk register; own incident response and security monitoring.
• Report posture, risk, and budget performance to leadership in business terms; support contract pursuits, RFPs, and customer due diligence.

Requirements

• Bachelor's degree in IT, Computer Science, Cybersecurity, or equivalent experience; 7+ years progressive IT experience with 3+ in a senior/lead role.
• Hands-on proficiency with M365 GCC High / Azure Government, Entra ID, Active Directory, Intune, and Defender for Endpoint; experience with Palo Alto firewalls and GlobalProtect.
• Working knowledge of NIST SP 800-171 and CMMC (Level 2+), including SSP development.
• Proven ability to run concurrent infrastructure and security projects in a resource-constrained environment; strong communicator with executive audiences.
• Travel up to 25% to support company facilities, compliance assessments, and other business needs.

Preferred Qualifications

• Active SECRET (or above) clearance; CISSP, CISM, Security+, AZ-104/AZ-500 or equivalent.
• DCSA/DISA-regulated or C3PAO assessment experience; familiarity with CUI handling (32 CFR Part 2002) and MSP management in government contracting.