IT Manager-Security Clearance Eligibility Required
AVT Simulation · Orlando, FL · 3 wk ago
Information TechnologyFull-time
We need to output HTML fragment with sections only if content present. Use for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to parse job posting.
Job Summary: "The IT Manager at AVT Simulation is a hands-on technical leader..." That's a summary; could be placed under About the role? The instruction: use
for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to parse job posting.
Job Summary: "The IT Manager at AVT Simulation is a hands-on technical leader..." That's a summary; could be placed under About the role? The instruction: use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need sections: About the role (maybe from Job Summary). Responsibilities (list). Requirements (maybe Minimum Requirements). Qualifications (maybe Preferred Certifications). Skills (maybe Technical Stack). Benefits (none given). Pay (none). Schedule (none). We should only include sections with real content.
We have:
- About the role: Job Summary paragraph.
- Responsibilities: list of duties (the big block after Responsibilities/Duties/Functions/Tasks). We'll extract bullet points.
- Requirements: Minimum Requirements (Bachelor's degree, 7-10+ years, etc.) Also maybe "Essential Mental Requirements" and "Essential Physical Requirements" could be part of Requirements? But we have separate sections: Requirements and Qualifications. Typically Requirements = minimum qualifications. Qualifications = preferred certifications etc. We'll put Minimum Requirements under Requirements. Preferred Certifications under Qualifications.
- Skills: Technical Stack Experience Domain table. Could be considered Skills. We'll list as bullet list of technologies grouped.
- Benefits: none given, so omit.
- Pay: none.
- Schedule: none.
We must not repeat job title as heading. Not include Job ID etc. Remove boilerplate: EOE, Equal Opportunity, etc. Also remove "Other Duties" note? That's generic; maybe we can include as part of responsibilities? It's a disclaimer; but it's not substantive? It says "Other Duties This job description is not designed to be a comprehensive listing..." That's boilerplate; we should remove. Also remove "Our Heritage", "People First Mission Excellence..." etc. That's company culture; maybe not required but could be considered About the role? The instruction: preserve ALL substantive information; do NOT invent or summarize away detail. Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The heritage and core values might be considered substantive? It's about company culture; not strictly required but could be considered part of About the role? However the sections we have limited to those headings; we could include some of that under About the role if we want to preserve. But the instruction: "Prefer a few substantive sections over many thin ones." So we could include company heritage under About the role as extra prose. However the About the role heading is for role description; adding company info might be okay but could be considered not strictly role. Safer to keep About the role as the Job Summary only. The heritage etc could be omitted as not directly about role; but it's substantive info about company. The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. Heritage is not those; it's company info. Might be okay to keep but we have no section for it; we could add a short paragraph under About the role after the summary. That would preserve it. Let's include it.
Thus About the role: combine Job Summary paragraph + Heritage paragraph(s) + core values? Might be too much but okay.
We need to use - for any list of duties/requirements/benefits. For responsibilities we have many items; we can break into
- . For requirements (minimum) also list. For qualifications (preferred certifications) list. For skills we could also list as
- grouped maybe by domain.
We must not invent placeholder text like "commensurate with experience". Not present.
Now craft HTML.
Structure:
About the role
Job summary text.
Heritage text...
Core values text...
Responsibilities
- Oversee and manage the IT Staff.
- Develop, manage, and defend the annual IT operating and capital budget, including forecasting for tech refresh cycles, licensing, and infrastructure upgrades.
... etc.
We need to include all responsibilities from the block. Let's extract them precisely.
Responsibilities block after "Responsibilities/Duties/Functions/Tasks":
Oversee and manage the IT Staff.
Develop, manage, and defend the annual IT operating and capital budget, including forecasting for tech refresh cycles, licensing, and infrastructure upgrades.
Lead strategic purchasing and vendor negotiations for hardware, software, and service contracts; manage relationships with OEMs, VARs, MSPs, and ISPs.
Serve as the IT representative on the Facilities & Infrastructure Working Group (FIWG), aligning IT capacity planning (power, cooling, rack space, fiber, ISP lead times) with company growth and facility expansion.
Develop, publish, and maintain IT operational policies, procedures, and Standard Operating Procedures (SOPs).
Provide status, risk, and project updates to executive management.
Administer and optimize the VMware vSphere virtualization environment (ESXi hosts, vCenter, clusters).
Manage Synology SAN/NAS storage — capacity planning, snapshots, replication, and health monitoring.
Configure, monitor, and troubleshoot complex network environments, including:
o Cisco Firepower (FTD) / ASA firewalls
o Cisco Catalyst switches (Layer 2/3, VLANs, trunking, QoS)
o Point-to-point MPLS / WAN circuits between HQ, remote sites, and colocation facilities
o LAN/WLAN infrastructure and site-to-site VPNs
Administer the M365 GCC High tenant, including Exchange Online, SharePoint, Teams, Purview, Power Automate and licensing.
Administer Autodesk Vault and other business-critical repositories, ensuring availability and access controls.
Maintain robust hot, warm, and long-term archival/backup processes, tested regularly for business continuity and disaster recovery readiness.
Support the company's CMMC Level 2 / NIST SP 800-171 Rev 3 compliance efforts by implementing, configuring, and hardening technical controls across the environment as directed by the compliance/security lead.
Execute technical remediation items identified in the Plan of Action & Milestones (POA&M) and provide artifacts/evidence as requested for the System Security Plan (SSP) and C3PAO assessments.
Implement and maintain Zero Trust tooling such as ThreatLocker (application allowlisting, ringfencing, storage control).
Administer endpoint protection and detection platforms including Huntress EDR/SIEM, Bitdefender GravityZone, and BitLocker (FIPS 140-2 validated) encryption.
Manage Cisco DUO MFA, Azure AD / Entra ID Conditional Access policies, and technical identity controls across all systems.
Perform vulnerability patching and provide logs, telemetry, and technical support for incident response activities directed by the cybersecurity/compliance lead.
Provide Tier 1 through Tier 3 support to employees, contractors, and subcontractors — on-site, remote, and by phone.
Perform system imaging, re-imaging, and deployment using PDQ SmartDeploy and PDQ Connect for rapid, standardized rollouts that meet the approved "gold image" baseline.
Install, configure, and support end-user hardware (workstations, laptops, monitors, printers, peripherals) and software.
Coordinate hardware lifecycle management, including procurement, asset tagging, secure media sanitization, and decommissioning per NIST 800-171 guidelines.
Manage e-mail administration, anti-virus/anti-malware systems, and general help-desk ticket flow.
Escalate major hardware failures to OEM service personnel and manage warranty/RMA processes.
Provide technical artifacts and evidence to the compliance function to support CMMC/DFARS audit readiness.
Stay current on emerging technologies and DoD/DIB technical requirements; recommend and implement improvements that enhance system reliability, performance, and user productivity.
Contribute to the continuity of computer services by providing technical leadership, project coordination, and mentorship to junior staff.
We need to format each as - . For the sub-items under "Configure, monitor, and troubleshoot complex network environments, including:" we can either keep as part of that li with sublist? The instruction: use
- for any list of duties/requirements/benefits. Could nest lists. We'll keep main li and inside maybe another
. Simpler: keep as part of the li text with the subitems separated by commas; but we have line breaks with "o". Could convert to sublist.
We'll do:
- Configure, monitor, and troubleshoot complex network environments, including:
- Cisco Firepower (FTD) / ASA firewalls
- Cisco Catalyst switches (Layer 2/3, VLANs, trunking, QoS)
- Point-to-point MPLS / WAN circuits between HQ, remote sites, and colocation facilities
- LAN/WLAN infrastructure and site-to-site VPNs
Similarly for other sections maybe.
Now Requirements (Minimum Requirements):
Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field from an accredited institution.
7–10+ years of progressive IT experience, with at least 3 years in a lead or management capacity, preferably within a Defense Industrial Base (DIB) or federally regulated environment.
Proven experience administering VMware vSphere, Microsoft Active Directory / Entra ID, and enterprise LAN/WAN environments.
Familiarity with implementing technical controls aligned to NIST 800-171 / CMMC requirements.
Also there are Essential Mental Requirements and Essential Physical Requirements. Those could be considered part of Requirements as well. We'll include them as separate list items under Requirements.
Essential Mental Requirements:
- Strong problem-solving, analytical, and root-cause investigation skills.
- Excellent time-management, multi-tasking, organizational, and planning abilities.
- Excellent written and verbal communication skills — able to translate complex technical issues for non-technical stakeholders.
- High personal integrity for handling sensitive, proprietary, and Controlled Unclassified Information (CUI).
Essential Physical Requirements:
- While performing the duties of this job, the employee is regularly required to stand, walk, sit, use hands to finger/handle/feel objects, tools, or controls; reach with hands and arms; and talk or hear.
- The employee must occasionally lift or move office products, IT equipment, and supplies up to 50 pounds (racking servers, network gear, UPS units).
We'll include these as list items.
Now Qualifications (Preferred Certifications):
Network: Cisco CCNA / CCNP (Security or Enterprise)
Virtualization: VMware VCP-DC
Microsoft: MCSE / MCSA, Microsoft 365 Certified: Enterprise Administrator Expert
We'll list as li.
Now Skills: Technical Stack Experience Domain table. We'll extract each domain and list technologies.
Domain: Network -> Technologies: Cisco FTD/ASA firewalls, Cisco Catalyst switches, MPLS/WAN, VPN, LAN/WLAN, OSPF
Virtualization/Storage: VMware vSphere 6.x/7.x/8.x, Synology SAN/NAS
Cloud & Identity: M365 GCC High, Azure AD / Entra ID, Conditional Access, Cisco DUO
Security Tools: ThreatLocker, Huntress EDR/SIEM, Bitdefender GravityZone, BitLocker (FIPS)
Endpoint/Deployment: PDQ Connect, PDQ SmartDeploy, Windows 10/11, Linux
Monitoring: PRTG (or equivalent)
Applications: MS Office suite, Visio, Project, Autodesk, VS Pro, Adobe Suite
Compliance Familiarity: Working knowledge of NIST SP 800-171 / CMMC Level 2 technical controls
We'll make a with each domain as maybe a - containing bold domain
- for any list of duties/requirements/benefits. For responsibilities we have many items; we can break into
- . For requirements (minimum) also list. For qualifications (preferred certifications) list. For skills we could also list as
- grouped maybe by domain.
We must not invent placeholder text like "commensurate with experience". Not present.
Now craft HTML.
Structure:
About the role
Job summary text.
Heritage text...
Core values text...
Responsibilities
- Oversee and manage the IT Staff.
- Develop, manage, and defend the annual IT operating and capital budget, including forecasting for tech refresh cycles, licensing, and infrastructure upgrades. ... etc. We need to include all responsibilities from the block. Let's extract them precisely. Responsibilities block after "Responsibilities/Duties/Functions/Tasks": Oversee and manage the IT Staff. Develop, manage, and defend the annual IT operating and capital budget, including forecasting for tech refresh cycles, licensing, and infrastructure upgrades. Lead strategic purchasing and vendor negotiations for hardware, software, and service contracts; manage relationships with OEMs, VARs, MSPs, and ISPs. Serve as the IT representative on the Facilities & Infrastructure Working Group (FIWG), aligning IT capacity planning (power, cooling, rack space, fiber, ISP lead times) with company growth and facility expansion. Develop, publish, and maintain IT operational policies, procedures, and Standard Operating Procedures (SOPs). Provide status, risk, and project updates to executive management. Administer and optimize the VMware vSphere virtualization environment (ESXi hosts, vCenter, clusters). Manage Synology SAN/NAS storage — capacity planning, snapshots, replication, and health monitoring. Configure, monitor, and troubleshoot complex network environments, including: o Cisco Firepower (FTD) / ASA firewalls o Cisco Catalyst switches (Layer 2/3, VLANs, trunking, QoS) o Point-to-point MPLS / WAN circuits between HQ, remote sites, and colocation facilities o LAN/WLAN infrastructure and site-to-site VPNs Administer the M365 GCC High tenant, including Exchange Online, SharePoint, Teams, Purview, Power Automate and licensing. Administer Autodesk Vault and other business-critical repositories, ensuring availability and access controls. Maintain robust hot, warm, and long-term archival/backup processes, tested regularly for business continuity and disaster recovery readiness. Support the company's CMMC Level 2 / NIST SP 800-171 Rev 3 compliance efforts by implementing, configuring, and hardening technical controls across the environment as directed by the compliance/security lead. Execute technical remediation items identified in the Plan of Action & Milestones (POA&M) and provide artifacts/evidence as requested for the System Security Plan (SSP) and C3PAO assessments. Implement and maintain Zero Trust tooling such as ThreatLocker (application allowlisting, ringfencing, storage control). Administer endpoint protection and detection platforms including Huntress EDR/SIEM, Bitdefender GravityZone, and BitLocker (FIPS 140-2 validated) encryption. Manage Cisco DUO MFA, Azure AD / Entra ID Conditional Access policies, and technical identity controls across all systems. Perform vulnerability patching and provide logs, telemetry, and technical support for incident response activities directed by the cybersecurity/compliance lead. Provide Tier 1 through Tier 3 support to employees, contractors, and subcontractors — on-site, remote, and by phone. Perform system imaging, re-imaging, and deployment using PDQ SmartDeploy and PDQ Connect for rapid, standardized rollouts that meet the approved "gold image" baseline. Install, configure, and support end-user hardware (workstations, laptops, monitors, printers, peripherals) and software. Coordinate hardware lifecycle management, including procurement, asset tagging, secure media sanitization, and decommissioning per NIST 800-171 guidelines. Manage e-mail administration, anti-virus/anti-malware systems, and general help-desk ticket flow. Escalate major hardware failures to OEM service personnel and manage warranty/RMA processes. Provide technical artifacts and evidence to the compliance function to support CMMC/DFARS audit readiness. Stay current on emerging technologies and DoD/DIB technical requirements; recommend and implement improvements that enhance system reliability, performance, and user productivity. Contribute to the continuity of computer services by providing technical leadership, project coordination, and mentorship to junior staff. We need to format each as
- . For the sub-items under "Configure, monitor, and troubleshoot complex network environments, including:" we can either keep as part of that li with sublist? The instruction: use
- for any list of duties/requirements/benefits. Could nest lists. We'll keep main li and inside maybe another
- . Simpler: keep as part of the li text with the subitems separated by commas; but we have line breaks with "o". Could convert to sublist.
We'll do:
- Configure, monitor, and troubleshoot complex network environments, including:
- Cisco Firepower (FTD) / ASA firewalls
- Cisco Catalyst switches (Layer 2/3, VLANs, trunking, QoS)
- Point-to-point MPLS / WAN circuits between HQ, remote sites, and colocation facilities
- LAN/WLAN infrastructure and site-to-site VPNs
Similarly for other sections maybe.
Now Requirements (Minimum Requirements):
Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field from an accredited institution.
7–10+ years of progressive IT experience, with at least 3 years in a lead or management capacity, preferably within a Defense Industrial Base (DIB) or federally regulated environment.
Proven experience administering VMware vSphere, Microsoft Active Directory / Entra ID, and enterprise LAN/WAN environments.
Familiarity with implementing technical controls aligned to NIST 800-171 / CMMC requirements.
Also there are Essential Mental Requirements and Essential Physical Requirements. Those could be considered part of Requirements as well. We'll include them as separate list items under Requirements.
Essential Mental Requirements:
- Strong problem-solving, analytical, and root-cause investigation skills.
- Excellent time-management, multi-tasking, organizational, and planning abilities.
- Excellent written and verbal communication skills — able to translate complex technical issues for non-technical stakeholders.
- High personal integrity for handling sensitive, proprietary, and Controlled Unclassified Information (CUI).
Essential Physical Requirements:
- While performing the duties of this job, the employee is regularly required to stand, walk, sit, use hands to finger/handle/feel objects, tools, or controls; reach with hands and arms; and talk or hear.
- The employee must occasionally lift or move office products, IT equipment, and supplies up to 50 pounds (racking servers, network gear, UPS units).
We'll include these as list items.
Now Qualifications (Preferred Certifications):
Network: Cisco CCNA / CCNP (Security or Enterprise)
Virtualization: VMware VCP-DC
Microsoft: MCSE / MCSA, Microsoft 365 Certified: Enterprise Administrator Expert
We'll list as li.
Now Skills: Technical Stack Experience Domain table. We'll extract each domain and list technologies.
Domain: Network -> Technologies: Cisco FTD/ASA firewalls, Cisco Catalyst switches, MPLS/WAN, VPN, LAN/WLAN, OSPF
Virtualization/Storage: VMware vSphere 6.x/7.x/8.x, Synology SAN/NAS
Cloud & Identity: M365 GCC High, Azure AD / Entra ID, Conditional Access, Cisco DUO
Security Tools: ThreatLocker, Huntress EDR/SIEM, Bitdefender GravityZone, BitLocker (FIPS)
Endpoint/Deployment: PDQ Connect, PDQ SmartDeploy, Windows 10/11, Linux
Monitoring: PRTG (or equivalent)
Applications: MS Office suite, Visio, Project, Autodesk, VS Pro, Adobe Suite
Compliance Familiarity: Working knowledge of NIST SP 800-171 / CMMC Level 2 technical controls
We'll make a - containing bold domain
- with each domain as maybe a
- Configure, monitor, and troubleshoot complex network environments, including:
- for any list of duties/requirements/benefits. Could nest lists. We'll keep main li and inside maybe another
- grouped maybe by domain.
We must not invent placeholder text like "commensurate with experience". Not present.
Now craft HTML.
Structure:
- . For requirements (minimum) also list. For qualifications (preferred certifications) list. For skills we could also list as