ACG is seeking a highly capable IT Operations & Security Specialist to manage and improve our technology environment while supporting cybersecurity and CMMC compliance initiatives. This role combines traditional IT infrastructure responsibilities with cybersecurity, risk management, and compliance support. The ideal candidate is a strong IT professional who understands how modern systems, cloud platforms, security controls, and compliance frameworks work together. You will be responsible for maintaining secure and reliable technology systems while helping ACG advance and sustain CMMC Level 2 readiness. This position is ideal for someone who enjoys both hands-on technical work and strategic security initiatives. What You Will DoIT Infrastructure & Systems Administration Administer Microsoft 365, SharePoint, Teams, Exchange Online, and Entra ID Manage user accounts, permissions, identity management, and access controls Support cloud platforms, endpoints, networking equipment, and business applications Maintain system reliability, availability, backups, and disaster recovery processes Troubleshoot and resolve complex technical issues across the organization Continuously improve IT systems and operational efficiency Cybersecurity & Security Operations Implement and maintain cybersecurity controls and best practices Support endpoint security, monitoring, logging, and incident response Coordinate vulnerability management and remediation efforts Assist with risk assessments and security improvement initiatives Ensure proper protection of Controlled Unclassified Information (CUI) Support secure configurations across systems and applications CMMC & Compliance Support Support implementation and sustainment of CMMC Level 2 controls Assist with

NIST SP 800-171

compliance activities Maintain organized and audit-ready compliance evidence Support cybersecurity audits and assessments Help develop corrective action plans and remediation efforts Maintain compliance documentation and tracking systems Documentation & Process Improvement Create and maintain IT SOPs, standards, policies, and knowledge base documentation Develop repeatable and scalable processes Ensure documentation remains current and audit-ready Contribute to continuous improvement initiatives across IT and compliance functions Leadership & Collaboration Work directly with company leadership on strategic IT initiatives Partner with HR, Operations, and Project Teams Provide recommendations for technology and cybersecurity improvements Communicate technical information clearly to both technical and non-technical audiences Success in This Role Within your first year you will: Improve the stability and security of ACG's IT environment Strengthen CMMC and

NIST 800-171

readiness Reduce vulnerabilities and compliance gaps Improve documentation and audit readiness Help build scalable systems that support company growth and federal contract requirements Required Experience Must Have 5+ years of IT Systems Administration, Infrastructure, or Network Administration experience Strong Microsoft 365 administration experience Experience with Entra ID (Azure AD), SharePoint, Teams, and Exchange Online Experience supporting cybersecurity initiatives Experience creating technical documentation and standard operating procedures Strong troubleshooting and problem-solving abilities Preferred Experience supporting CMMC compliance programs Experience with

NIST SP 800-171

Experience with federal contractors or government environments Experience protecting Controlled Unclassified Information (CUI) Experience with vulnerability management tools Security+, CISSP, Microsoft, Azure, or related certifications Skills Highly organized and detail-oriented Strong documentation discipline Excellent verbal and written communication Comfortable working independently Strong analytical and troubleshooting skills Tech-savvy and comfortable leveraging AI and automation tools Ability to manage multiple priorities and deadlines Growth mindset and willingness to continuously learn Ideal Candidate The ideal candidate is a strong IT professional who: ✔ Can manage infrastructure without constant supervision ✔ Understands cybersecurity beyond basic IT support ✔ Has exposure to CMMC or NIST compliance environments ✔ Takes ownership and follows through ✔ Enjoys improving systems and processes ✔ Communicates effectively with leadership ✔ Wants to grow into a larger cybersecurity and compliance leadership role Disqualifiers No Microsoft 365 administration experience No systems administration or infrastructure experience No cybersecurity-related experience Cannot work onsite Poor organization or documentation skills Unable to manage multiple priorities Resistant to accountability or feedback Company Culture High Accountability Fast-Paced Environment Strong Documentation Standards Direct Communication Ownership Mentality Results-Oriented Leadership Continuous Improvement Growth Opportunities for

High Performers Pay:

$60,000.00 - $75,000.00 per year

Benefits:

401(k) 401(k) matching Dental insurance Health insurance Vision insurance Application Question(s): Do you have professional experience implementing cybersecurity controls and security best practices? Have you participated in vulnerability management, remediation, patching, or security monitoring activities? Have you worked directly with

NIST SP 800-171

requirements? Have you supported a CMMC compliance program or assessment? Have you created or maintained IT policies, SOPs, standards, or technical documentation? Describe the Microsoft 365 environment you currently manage (users, licenses, Entra ID, Exchange, SharePoint, security controls, and compliance responsibilities). Which of the following have you personally administered? (Select all that apply) Microsoft 365 Admin Center Entra ID (Azure AD) Exchange Online SharePoint Online Intune Microsoft Defender Conditional Access Policies

NIST 800-171 CMMC

None of the

Above Experience:

IT Support (CMMC knowledge): 3 years (Required)

Work Location:

In person