Senior IT & Security Engineer (USA)

About the role

The Senior IT & Security Engineer is the primary local owner for the Warrenton office’s IT operations and security engineering, with responsibility for supporting CMMC / NIST 800-171 control implementation and audit readiness.

Responsibilities, Duties and Expectations

• Partner with global IT and Security teams to deliver reliable, secure IT services for the U.S. office and support the company’s broader security and compliance strategy.
• Own local IT service delivery, including ticket intake, prioritization, escalation, user communication, and SLA performance.
• Provide hands-on support for hardware, software, collaboration tools, and access issues, and serve as the primary escalation point for complex local IT and security incidents.
• Administer identity and access controls across users, devices, and applications using Microsoft Entra ID, including SSO, Conditional Access, MFA, and role-based access controls.
• Integrate business applications into the identity and security stack using SSO, MFA, Conditional Access, and modern authentication mechanisms such as FIDO2 passwordless authentication.
• Administer and continuously improve endpoint security controls, including device compliance, patching, system hardening, vulnerability remediation, encryption, and EDR / MDM tooling.
• Support and manage network security, including firewall management, secure network integrations, VPNs, and segmentation.
• In coordination with the Global Security Team, lead local incident triage and response activities for the U.S. office, including investigation, containment, remediation, evidence gathering, lessons learned, and post-incident reporting.
• Partner with the Global Security Team, business stakeholders, vendors, and external assessors to support CMMC / NIST 800-171 readiness activities, including technical control implementation, evidence collection, remediation tracking, and audit support.
• Help plan and manage the local IT and security budget, including tooling, hardware lifecycle, vendor services, and investment recommendations aligned to business and compliance priorities.

Qualifications, Experience and Skills

• 7+ years of experience across IT infrastructure, service management, and security-conscious operational environments.
• Hands-on experience in a security operations, systems security, or security engineering role, including incident response and control implementation.
• Working knowledge of CMMC 2.0 / NIST SP 800-171 requirements, with practical experience supporting implementation, evidence collection, remediation, or assessment readiness activities.
• Hands-on experience with security and device-management platforms such as EDR, SIEM, vulnerability management, and MDM / Intune.
• Experience managing firewalls, VPNs, network security, and secure system integrations.
• Proven hands-on experience with identity and access management using Microsoft Entra ID, including SSO, Conditional Access, MFA, group / role-based access, and application integration.
• Strong background in endpoint security, patch management, and system hardening using Mobile Device Management (MDM) platforms such as Microsoft Intune.
• Experience participating in or leading incident response, investigation, containment, and remediation activities.
• Comfort working across both hands-on user support and higher-order security / compliance priorities in a small-team, high-accountability environment.
• Excellent written and verbal communication skills.

Note for recruitment agencies

Note for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.