Manage cloud identity and access (IAM), including multi-factor authentication, conditional access, and role-based access controls.
Administer enterprise cloud infrastructure across major public cloud platforms, including network segmentation, virtual machine lifecycle, and support for developer-operated workloads.
Operate enterprise endpoint management and remote monitoring/management (RMM) tooling — provisioning, patching, configuration baselines, and compliance reporting.
Implement and maintain security controls aligned to NIST SP 800-171 / CMMC Level 2, including phishing-resistant MFA, encryption and key management, logging, and access control.
Maintain accurate asset inventory, configuration records, and documentation, including system security plan (SSP) artifacts, network diagrams, and runbooks.
Support and develop onboarding and offboarding processes that can adapt during a period of rapid headcount growth.
Serve as escalation-tier support for infrastructure, identity, and access issues.
Partner with the Director of IT & Security to design, pilot, and deploy new systems supporting multi-site expansion and future secure facilities.
What We’re Looking For
Required
3+ years of hands-on experience administering Windows Server, enterprise productivity/collaboration platforms, and endpoint management.
Working experience with cloud identity/directory services, MFA, and conditional access.
Practical knowledge of at least one major public cloud platform, including virtual machine administration and network segmentation.
Solid grasp of endpoint hardening, patch management, and access control.
Strong ability to convert undocumented knowledge into clear, repeatable procedures.
Your Ideal Background
Preferred
Experience operating in a regulated or compliance-driven environment (CMMC, NIST 800-171, DFARS, ITAR, FedRAMP, or similar).
Experience with government or regulated cloud regions.
Exposure to developer-operated infrastructure, source control, or CI/CD pipelines.
Prior experience supporting an organization through rapid scaling or multi-site expansion.
Certifications
CompTIA Security+ is required within 6–12 months of hire (strongly preferred at time of hire).
One or more of the following are a plus: CompTIA Network+, Cloud+, or Server+; a cloud administrator associate-level certification (e.g., Azure or AWS); or Microsoft endpoint/identity administrator certifications.
Additional Requirements: Must be willing to work extended hours and weekends as needed.
Compensation and Benefits: Your base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. The anticipated salary range for this role is $75,000 - $150,000 annually.
Base salary is just one part of your total rewards package at Katalyst. You will also be eligible for long-term incentives, in the form of the Employee Stock Option and Equity Plan, as well as a relocation bonus and other discretionary bonuses. You will also receive access to comprehensive medical, vision, and dental coverage, and unlimited Paid Time Off.
At Katalyst our work on projects involving the U.S. Department of Defense requires adherence to International Traffic in Arms Regulations (ITAR), 22 C.F.R. Parts 120-130, which requires compliance with U.S. export laws before allowing employees to perform certain positions. Currently, our available roles necessitate access to ITAR-controlled information, and as a result, Katalyst would have to ensure any non-US person is authorized access to ITAR information before the commencement of employment. We are committed to equal employment opportunities and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.
