Security Administrator

Overview

We are seeking a Security Administrator to support and enhance the security posture of a hybrid Microsoft infrastructure within a regulated financial services environment. This individual will be responsible for safeguarding on-premise and cloud-based systems, ensuring compliance with industry standards, and proactively identifying and mitigating security risks. The ideal candidate brings a strong foundation in Microsoft security technologies, identity management, and threat detection.

Key Responsibilities

• Administer and secure Active Directory and Entra ID (Azure AD) environments, including identity governance and access controls
• Manage and monitor Microsoft 365 security tools (Defender, Purview, Conditional Access, MFA)
• Implement and maintain security policies, standards, and procedures across hybrid infrastructure
• Monitor security alerts and respond to incidents, including investigation, containment, and remediation
• Conduct vulnerability assessments and coordinate patch management across servers and endpoints
• Support SIEM/SOC operations, including log analysis and threat detection (e.g., Splunk, Sentinel)
• Ensure compliance with financial industry regulations (SOX, FINRA, PCI-DSS, etc.)
• Assist with security audits, risk assessments, and documentation
• Collaborate with infrastructure, network, and application teams to embed security best practices
• Support endpoint security tools and firewall technologies as needed

Required Qualifications

• 5+ years of experience in IT security or systems/security administration
• Strong experience with Active Directory, Group Policy, and identity/access management
• Hands-on experience with Microsoft 365 Security & Compliance tools
• Knowledge of Azure / Entra ID security controls
• Experience with SIEM tools (e.g., Splunk, Microsoft Sentinel)
• Understanding of threat detection, incident response, and vulnerability management
• Familiarity with hybrid (on-prem + cloud) Microsoft environments
• Strong knowledge of security frameworks and regulatory requirements

Preferred Qualifications

• Experience in financial services or regulated industries
• Familiarity with endpoint protection (Defender for Endpoint, CrowdStrike, etc.)
• Exposure to network security tools (firewalls, IDS/IPS)
• Scripting/automation experience (PowerShell)
• Relevant certifications (Security+, CISSP, Microsoft Security certifications)