IT Security & Systems Executive – Cloud & Infrastructure

About the role

The IT Security & Systems Executive will oversee day‑to‑day IT operations while ensuring the security of both on‑premise and cloud environments. This role combines system administration, network management, endpoint protection, and security operations to keep the company’s assets reliable and compliant.

Key responsibilities

• Monitor, analyze, and respond to security alerts using Microsoft Defender, Sentinel or similar SIEM tools.
• Administer firewalls (pfSense) and VPN configurations, applying best‑practice perimeter security.
• Manage identity security controls such as MFA, Conditional Access, and DLP within Microsoft 365 and Azure AD.
• Conduct vulnerability scans, system patching, and enforce endpoint security controls.
• Maintain hardening baselines for Linux, Windows, and network devices.
• Document and update incident response and disaster‑recovery procedures.
• Administer Windows Server services (Active Directory, DNS, DHCP, Group Policy) and Linux servers for backups, automation, and monitoring.
• Secure Microsoft 365 services (Exchange Online, SharePoint, OneDrive, Teams) and configure security features in the Microsoft 365 Security & Compliance Center.
• Manage cloud access, policies, and monitoring in AWS and Azure, including backup and data‑protection strategies.
• Maintain network configurations, routing, VLANs, VPNs, and pfSense firewalls; perform diagnostics with Wireshark or nmap.
• Create and maintain automation scripts in PowerShell and Bash for backups, log collection, and health checks.

Required profile

• Proven experience in security operations, system administration, and cloud infrastructure.
• Strong knowledge of Windows Server and Linux environments.
• Hands‑on experience with Microsoft 365, Azure AD, AWS or Azure IAM.
• Ability to document processes, incident response plans, and change logs.

Required skills

• Microsoft Defender, Sentinel, or comparable SIEM solutions
• pfSense firewall configuration
• VPN, MFA, Conditional Access, DLP
• Vulnerability scanning and patch management
• Windows Server (Active Directory, DNS, DHCP, Group Policy)
• Linux (Ubuntu, CentOS) administration
• Microsoft 365 Security & Compliance Center
• AWS and/or Azure IAM, cloud monitoring
• PowerShell scripting
• Bash scripting
• Wireshark, nmap