IT and SecOps

Overview

The IT and SecOps Lead at Nox Metals is responsible for securing the company's IT and SecOps functions, including CMMC compliance, NIST 800-171 controls, and DFARS 7012 cyber requirements. The role involves managing the System Security Plan (SSP), POA&M, and other artifacts required by CMMC and customer audits. Responsibilities also include identity and access management, endpoint management, network infrastructure, cloud security, backup and disaster recovery, vulnerability management, log monitoring, incident response, employee onboarding and offboarding, security training, and phishing simulations.

Responsibilities

• Own IT and SecOps end to end as a solo IC across the entire company, office, factory, and field
• Own CMMC compliance end to end, build it, run it, audit it, certify it, defend it
• Build and maintain the System Security Plan (SSP), POA&M, and every artifact CMMC and customer audits demand
• Own identity and access management, SSO, MFA, provisioning, deprovisioning, least privilege across every system
• Own endpoint management, MDM, EDR, patching, encryption, and asset inventory across every laptop, desktop, and shop floor device
• Own network infrastructure, firewalls, segmentation between IT and OT, VPN, Wi-Fi, and remote access
• Own the OT side of the house, segment and harden CNC controllers, saw HMIs, and PLCs from the corporate network
• Own cloud security across our SaaS stack, Supabase, GitHub, Microsoft 365, and every tool we run
• Own backup, disaster recovery, and business continuity, test it, do not just document it
• Run vulnerability management, log monitoring, and incident response, fix it once and fix it for good
• Own employee onboarding and offboarding from an IT and security standpoint, day one access ready, day-of departure access cut
• Build dashboards and reports on patch compliance, endpoint health, identity hygiene, and incident metrics
• Partner with the software team to embed security into NOX NEST, WAYNE, and our internal tools
• Always ask questions, never guess when something is unclear
• Work safely every shift and hold your teammates to the same standard

Requirements

• 3 to 4+ years owning IT and security in a manufacturing, defense, aerospace, or comparable regulated environment
• Deep experience owning CMMC, NIST 800-171, and DFARS 7012 from the inside, you have built the SSP, run the controls, and passed assessments
• Fluent in identity, endpoint, network, cloud, and OT security as a single integrated stack
• Experienced segmenting IT and OT networks in a real factory, not just on paper
• Comfortable as a solo IC, you own the function end to end and pick the tools we run on
• Calm under pressure when an incident happens, methodical when running root cause
• A high attention to quality, every control, every log, every access review
• Absolute customer obsession, our security posture is how customers trust us with their data and their parts
• A team player with a good attitude, you make the company better for everyone around you
• Able to lift up to 50 lbs and handle physical IT work, racks, cables, shop floor hardware
• Not afraid to work outside normal hours when America demands it
• Precise under pressure and reliable, security does not bend for a deadline
• Organized and detail oriented, audit-ready every day, not just on audit day
• Committed to safety, you follow every protocol, wear your PPE, and never cut corners that put people at risk
• High agency, you handle big items alone and ask for help when needed
• Low ego, you do the unglamorous work because it needs to get done

Qualifications

• Experience in metals, aluminum, or aerospace/defense supply chains
• Nice to have: CISSP, CISM, Security+, or comparable security credentials
• Hands-on experience with Microsoft 365 GCC or GCC High environments
• Background segmenting and hardening OT networks (CNC, PLC, HMI environments)
• Track record passing a CMMC Level 2 third-party assessment

Benefits

Nox Metals offers a place where you can build a career, not just hold a job. We provide opportunities for long-term career growth and a supportive team environment.

Pay

The salary range for this position is $80,000 - $120,000 annually.

Schedule

This role is full-time and requires in-person work in Detroit.