IT Operations Lead

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $131k - $163k / year

⏰ Full Time

🟠 Senior

⚙️ Operations

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Blackpoint Cyber

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

💰 $190M Series C on 2023-06

Consulting • Defense • Cybersecurity

Blackpoint Cyber is a technology-focused cybersecurity company headquartered in Maryland, USA. Established by former US Department of Defense and Intelligence security experts, Blackpoint leverages its real-world cyber experience to help Managed Service Providers (MSPs) safeguard their infrastructure and operations. The company offers a proprietary cybersecurity ecosystem, including its SNAP-Defense platform for Managed Detection and Response (MDR) services. Blackpoint's dedicated security analysts work 24/7 to combine various security measures, including network visualization and endpoint security, to monitor and respond to threats. Additionally, Blackpoint is launching LogIC, a logging and integrated compliance service designed to assist MSPs with cyber compliance requirements. The company's mission is to deliver comprehensive detection and response services to help MSPs combat the evolving threat landscape.

📋 Description

• Translate strategy and priorities into projects and tasks; sequence and assign work, run weekly planning, track status, remove blockers, and report progress and risks to the CSTO • Set daily priorities for IT staff, review changes, coach, and author architecture documentation, runbooks, and change standards • Serve as final technical escalation point for identity, endpoint, and SaaS incidents; conduct root cause analysis and drive permanent fixes • Implement platform and tooling decisions, including feasibility and effort estimates and vendor and licensing tasks • Own Entra ID architecture, privileged access, Conditional Access, authentication methods, passwordless and phishing-resistant MFA, PIM, admin role hygiene, break-glass accounts, and delegated administration • Govern identity lifecycle using Entra ID P2, including access reviews, entitlement management, Identity Protection, and automated joiner, mover, and leaver flows • Manage SSO and application integration across Entra and Auth0, including app registrations, enterprise applications, SAML/OIDC federation, SCIM provisioning, Atlassian SSO and SCIM, and Entra SCIM groups • Manage device identity, Entra join and registration, Platform SSO, Entra sign-in on macOS, Intune compliance, and Conditional Access integration • Govern guest, contractor, agency, vendor, and other external access patterns in Entra and Microsoft 365 • Maintain the access role matrix, pre-approved access bundles, and approval matrix • Implement and evidence IT technical controls for CMMC Level 2 • Support SOC 2 Type 2 and policy governance, including access-control remediation, periodic access and firewall reviews, policy accuracy reviews, and vendor intake reviews • Remediate security findings on corporate web properties and infrastructure • Partner with Security on identity threat detection, log monitoring, risk policies, identity incidents, KQL dashboards and detections, audit-log requests, and compliance reporting • Own architecture, configuration baselines, compliance policies, and security policy for Intune, Jamf, and Datto RMM, plus integration standards for Microsoft 365, Google Workspace, Slack, and Zoom • Administer Jira, Jira Service Management, Confluence, IT service workflows, and Power Automate flows • Own AI tool administration and governance for Claude, Claude Code, Cursor, connectors, and MCP servers • Lead IT-side business-system integrations and enterprise app provisioning • Define access-request, approval, and granting processes for AWS, Azure, VPN, Cloudflare, log search, and deployment tooling with SRE and Security • Manage corporate network and office infrastructure vendor relationships, renewals, inventory, and renewal calendar • Serve as the company’s Microsoft subject-matter expert across Entra ID, Microsoft 365, Intune, Defender, and Azure fundamentals • Support Mac and Windows labs, integration lab, VDI environments, test tenants, dogfooding setups, and engineering onboarding • Maintain installer guides, scripts, and Datto RMM ComStore component for Unified Agent deployment and provide escalation support • Build and maintain auditable automation with Microsoft Graph, PowerShell, Power Automate, and Python for provisioning, offboarding, licensing, group governance, and reporting

🎯 Requirements

• 7 to 10+ years in systems engineering, identity engineering, or senior IT infrastructure • At least 4 years of deep, hands-on Microsoft Entra ID experience in a production tenant • Expert-level skill with Conditional Access, PIM, authentication methods, app registrations and enterprise apps, and SAML/OIDC federation • Hands-on experience with Entra ID P2 capabilities: Identity Protection, access reviews, and entitlement management • Strong automation skills with Microsoft Graph API and PowerShell; Python or Bash a plus • Working knowledge of KQL and sign-in and audit log analysis • Broad Microsoft platform expertise, including Microsoft 365 administration, Defender, and Azure fundamentals • Experience implementing and evidencing technical controls for CMMC Level 2, NIST 800-171 or 800-53, SOC 2, or ISO 27001 • Experience administering Jira, Jira Service Management, and Confluence, and building workflows with Power Automate or similar tools • Experience managing Intune at fleet scale; Jamf and macOS management strongly preferred; Datto RMM or another RMM platform a plus • Experience integrating SSO and identity providers beyond Entra, with Auth0 strongly preferred, and SCIM-based provisioning • Proven track record of planning, project delivery, and driving cross-functional work to completion • Established senior engineer with a strong, verifiable record of hands-on delivery • Informal leadership such as mentoring, leading projects, or serving as the go-to escalation point • Motivation to grow into management while staying close to technical work • Clear written communication and strong documentation skills • Microsoft SC-300, MS-102, AZ-500, or SC-200 certification; at least one strongly preferred • Experience in a security vendor or MSP, or in a CMMC, FedRAMP, or federal-contracting environment • Infrastructure-as-code or configuration-as-code experience for Entra and Intune is a plus

🏖️ Benefits

• Health Insurance • Vision Insurance • Dental Insurance • Life Insurance • Robust 401k plan • Discretionary Time Off • Other minor perks • Equity participation available to employees globally