IT Support & Security Specialist

About the Organization CyberTrust Massachusetts is a non-profit committed to growing the cyber workforce, creating new and innovative opportunities for education and employment, and hardening the security posture of under-resourced local entities. We operate a lean, mission-driven team of 10 full-time staff, supplemented by a rotating cohort of approximately 25 interns. Technology plays a critical role in enabling our team and interns to do their best work securely and efficiently. Position Summary We are seeking a mid-level IT Support & Security Specialist to own the day-to-day technology operations and IT security posture of our organization. This role blends hands-on IT support with proactive security configuration across our Microsoft 365 environment, Windows laptop fleet, and device management via Microsoft Intune. You'll be the primary point of contact for staff and intern technology needs, while also driving improvements to our systems, security controls, and processes including quarterly laptop refresh and onboarding/offboarding workflow for interns. This is an excellent opportunity for someone who enjoys both the technical depth of security configuration and the satisfaction of solving real problems in an organization where your improvements will have immediate and visible impact. Key Responsibilities Microsoft 365 & Security Administration Administer and continuously harden our Microsoft 365 E5 tenant, including Entra ID (Azure AD), Exchange Online, SharePoint, Teams, and OneDrive Configure and maintain security features available under E5 licensing, including Conditional Access policies, Microsoft Purview (DLP, sensitivity labels, retention policies), and Identity Protection Manage identity and access controls: multi-factor authentication, conditional access, role-based access, and least-privilege permissions Monitor security alerts and audit logs; investigate and escalate potential security incidents Maintain and improve security baselines, and stay current on emerging threats relevant to nonprofit organizations Conduct periodic access reviews and ensure proper offboarding of departing staff and interns Endpoint Management & Windows Laptop Support Manage the Windows laptop fleet using Microsoft Intune, including device enrollment, compliance policies, configuration profiles, and application deployment Provide hands-on and remote troubleshooting support for hardware, software, network, and connectivity issues Own and improve the quarterly laptop refresh process for incoming/outgoing interns including imaging, provisioning, data wipe/reset procedures, asset tracking, and logistics with an eye toward reducing manual effort and turnaround time Maintain device inventory and lifecycle documentation (procurement, deployment, retirement) Ensure all endpoints meet security compliance standards (encryption, patching, antivirus/EDR status) before and during deployment General IT Support Serve as the primary IT support contact for 10 full-time staff and up to 25 interns, via help desk requests, email, or in-person support Onboard and offboard staff and interns: account provisioning/deprovisioning, hardware assignment, access setup, and orientation to IT policies Maintain documentation for IT processes, systems configurations, and troubleshooting runbooks Ensure compliance with IT and security policies, establishing documentation, logging and audits to demonstrate compliance. Recommend and help implement automation and process improvements that reduce recurring support burden Qualifications Required U.S. Citizen or Permanent Resident residing in or near Massachusetts with the ability for periodic in-person meetings 3+ years of experience in an IT support, systems administration, or IT security role Hands-on experience administering Microsoft 365 (Exchange Online, SharePoint, Teams, Entra ID) Experience with Microsoft Intune for Windows device management Strong troubleshooting skills across Windows OS, hardware, and common business applications Practical understanding of IT security fundamentals: MFA, conditional access, endpoint protection, patch management Excellent communication skills and comfort supporting non-technical staff and short-term interns with varying technical skill levels Strong organizational skills and ability to manage recurring, cyclical processes (e.g., quarterly onboarding/offboarding at scale) Preferred Experience with Microsoft 365 E5 security and compliance features specifically (Defender, Purview, Identity Protection) Experience working in a small organization or nonprofit where you own IT end-to-end Experience designing or improving device lifecycle/refresh processes Basic scripting/automation experience (PowerShell, Intune scripts, Power Automate) to streamline repetitive tasks To apply please send resume and cover letter to careers@cybertrustmass.org