Senior IT Manager

About the role

Firestorm is seeking a Senior IT Manager to lead and shape our IT function. Reporting to the Director of Operations, you will inherit a foundation and be responsible for building on it, implementing necessary technologies, processes, and systems to support a rapidly scaling defense technology company.

Responsibilities

• Directly manage and mentor the IT team; set priorities, develop their capabilities, and serve as their technical lead
• Define the IT organizational structure and hiring roadmap as the company scales
• Establish IT helpdesk processes, ticketing workflows, and Service Level Agreements (SLAs)
• Create and maintain IT operational runbooks, Standard Operating Procedures (SOPs), and escalation procedures
• Own incident management and major incident response; coordinate root-cause analysis and corrective actions
• Build and maintain monitoring, alerting, and observability practices using tools like CloudWatch, Azure Monitor, Microsoft Sentinel, or similar
• Pilot and refine the employee onboarding and offboarding process to support rapid headcount growth
• Build and own the IT roadmap, balancing operational reliability, compliance posture, and the needs of a fast-scaling company
• Manage IT vendor relationships, licensing, contract renewals, and hardware procurement lifecycle
• Forecast and plan IT budgets and capacities
• Participate in program reviews, technical working groups, and customer meetings as the IT operations subject matter expert
• Partner with department heads and engineering teams to align IT operations with program and business objectives
• Identify and champion opportunities to modernize operations, reduce toil, and improve security posture
• Oversee the operation, availability, and performance of Microsoft 365 GCC-High (Exchange Online, SharePoint, Teams, Intune, Azure AD/Entra ID) in compliance with ITAR, DFARS, and CUI handling requirements
• Manage AWS Commercial and AWS GovCloud environments, including VPCs, IAM roles and policies, EC2, S3, RDS, and CloudTrail; enforce separation of duties between commercial and GovCloud workloads
• Administer GitHub Enterprise and/or GitLab platforms for development teams, including SSO integration, branch protection policies, runner infrastructure, and access control
• Maintain infrastructure-as-code (IaC) standards and CI/CD pipeline integrity in coordination with DevSecOps and engineering teams
• Manage and continuously improve endpoint management using Microsoft Intune (MDM/MAM) across all company devices
• Ensure all environments comply with NIST SP 800-171, CMMC Level 2/3, FedRAMP Moderate/High, and DoD IL2/IL4/IL5 requirements
• Support Authority to Operate (ATO) processes, POA&M remediation, and continuous monitoring for applicable systems
• Partner with the Senior Security Manager on vulnerability management, patch cycles, incident response, and audit readiness
• Manage Multi-Factor Authentication (MFA) enforcement, conditional access policies, and privileged access management (PAM) across all platforms
• Maintain accurate documentation of IT systems, configurations, and access controls to support compliance audits and assessments

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Management Information Systems (MIS), Business Administration or equivalent degree, or 12 years of progressive relevant experience
• U.S. Citizenship required due to ITAR regulations, with the ability to obtain and maintain a DoD security clearance
• 7+ years of progressive IT experience, including 3+ years in a management and/or senior lead role
• Experience administering Microsoft 365 GCC-High or equivalent M365 Government tenants
• Experience with AWS GovCloud and AWS Commercial, including IAM, networking, and cloud security services
• Working knowledge of GitHub Enterprise and/or GitLab administration, including RBAC, CI/CD pipelines, and audit logging
• Understanding of NIST SP 800-171, CMMC, and CUI handling requirements in a defense contractor environment
• Experience supporting or leading ATO/RMF processes
• Experience building or significantly scaling an IT function at a company in rapid growth
• Translating technical requirements for non-technical stakeholders

Preferred Qualifications

• Certifications: AWS Solutions Architect (Associate or Professional), Microsoft MS-102 / SC-300, CompTIA Security+, CISSP, or equivalent
• Familiarity with DoD Impact Levels (IL2, IL4, IL5) and the FedRAMP authorization process
• Experience with SIEM platforms (Microsoft Sentinel, Splunk) and endpoint detection tools (Defender for Endpoint, CrowdStrike)
• Experience with GitLab Ultimate self-managed deployments in a GovCloud or restricted environment
• Experience working in a CMMC Level 2 or Level 3 certified environment
• Scripting and automation experience (PowerShell, Python, Terraform, Ansible)
• Prior experience at a Series A–C startup or high-growth defense technology company