[Hiring] IT Operations Lead @Blackpoint Cyber

Role Description

As IT Operations Lead, you are the operational leader for IT execution at Blackpoint Cyber and our in-house Microsoft expert. Your job is to turn CSTO-set strategy into delivered work. You are also the engineering authority for identity and access: Microsoft Entra ID is the control plane for our workforce, and you will own its architecture, security posture, and automation end to end. This is a deeply hands-on player-coach role, designed for an established senior engineer who is ready to take the next step into leadership.

Key Responsibilities

• Translate strategy and priorities into projects and tasks.
• Set daily priorities for the IT Administrator and other IT staff.
• Serve as the final technical escalation point for identity, endpoint, and SaaS incidents.
• Own Entra ID architecture and privileged access.
• Design and operate Conditional Access, authentication methods, passwordless and phishing-resistant MFA, Privileged Identity Management (PIM), admin role hygiene, break-glass accounts, and delegated administration.
• Govern the identity lifecycle.
• Own SSO and application integration.
• Manage app registrations, enterprise applications, SAML and OIDC federation, and SCIM provisioning.
• Own device identity.
• Govern external and third-party access.
• Create the standard-access catalog.
• Own technical controls for CMMC Level 2.
• Support SOC 2 Type 2 and policy governance.
• Remediate security findings on corporate systems.
• Partner with Security on identity threat detection.
• Set endpoint and SaaS standards.
• Administer Atlassian and workflow automation.
• Own AI tool administration and governance.
• Deliver business-system integrations.
• Broker cloud and engineering infrastructure access.
• Oversee corporate network and office infrastructure vendors.
• Be the Microsoft subject-matter expert.
• Support Product and Engineering environments.
• Support deployment of the Blackpoint agent through Datto RMM.
• Automate everything repeatable.

Qualifications

• 7 to 10+ years in systems engineering, identity engineering, or senior IT infrastructure, with at least 4 years of deep, hands-on Microsoft Entra ID experience in a production tenant.
• Demonstrated expert-level skill with Conditional Access, PIM, authentication methods, app registrations and enterprise apps, and SAML/OIDC federation.
• Hands-on experience with Entra ID P2 capabilities: Identity Protection, access reviews, and entitlement management.
• Strong automation skills with Microsoft Graph API and PowerShell; Python or Bash a plus.
• Working knowledge of KQL and sign-in and audit log analysis; familiarity with identity threat detection concepts.
• Broad Microsoft platform expertise beyond identity: Microsoft 365 administration, Defender, and Azure fundamentals.
• Working experience implementing and evidencing technical controls for a compliance framework such as CMMC Level 2, NIST 800-171 or 800-53, SOC 2, or ISO 27001.
• Experience administering Jira, Jira Service Management, and Confluence, and building workflows with Power Automate or similar tools.
• Experience managing Intune at fleet scale; Jamf and macOS management strongly preferred; Datto RMM or another RMM platform a plus.
• Experience integrating SSO and identity providers beyond Entra (Auth0 strongly preferred), and with SCIM-based provisioning.
• Proven track record of executing against a defined strategy: planning, project delivery, and driving cross-functional work to completion.
• Established senior engineer with a strong, verifiable record of hands-on delivery.
• Clear motivation to grow into management while staying close to the technical work.
• Clear written communicator who documents decisions and designs well.

Nice to Have

• Microsoft SC-300 (Identity and Access Administrator), MS-102, AZ-500, or SC-200 certification; at least one strongly preferred.
• Experience in a security vendor or MSP, or in a CMMC, FedRAMP, or federal-contracting environment.
• Infrastructure-as-code or configuration-as-code experience for Entra and Intune (for example Microsoft365DSC or Terraform).

Who Thrives in This Role

• A senior engineer who treats identity as a security discipline, not just an admin task.
• An operator who turns a set strategy into delivered, measurable results.
• An established engineer who wants to build management experience without leaving the keyboard.
• Someone who builds repeatable, auditable systems instead of one-off fixes.
• A strong independent problem-solver who can also unblock and develop others.
• Comfortable in a remote, high-ownership, fast-growing environment.

Benefits

• Competitive Health, Vision, Dental, and Life Insurance plans.
• Robust 401k plan.
• Discretionary Time Off.
• Equity participation available to employees globally.