Job Description
Senior Systems & Security Administrator
\n
\n
The firm
\n
A boutique civil rights and public interest law firm with headquarters in NY. Cloud-first, Microsoft-native, and currently working towards ISO/IEC 27001:2022 certification. Small technology group, no silos, and a culture that people describe as startup-like (entrepreneurial, fast, and unusually flat for a law firm).
\n
\n
The role
\n
This is the generalist seat that most firms split into two and then wonder why neither half works. Roughly 60/40 infrastructure to security, you'll own the environment day to day and operate the technical controls behind the firm's security programme, and you'll do it reporting closely to the CIO.
\n
\n
The technology group has grown off the back of the firm's AI implementation, and this role has room to grow with it.
\n
\n
What you'll own
\n
- \n
- Identity. Microsoft Entra ID at administrator depth — identity lifecycle, conditional access design, MFA and passwordless, privileged access, SSO.
- Microsoft 365 and endpoints. Exchange Online, SharePoint, OneDrive, Teams and Purview; the Windows estate through Intune and Autopatch — compliance policies, configuration profiles, security baselines, app deployment, Cloud PC.
- Network. Firewall policy, VLAN segmentation, wireless and VPN across three offices, plus the cloud-delivered web security platform. Meraki is what runs here; fluency in enterprise networking matters more than the badge.
- Security operations. SentinelOne and Defender, DLP and device controls. Triage and investigate alongside a managed SOC, and escalate under the incident response plan.
- Incident response. A seat on the Security Incident Response Team — containment, eradication, recovery and root cause.
- Vulnerability and patch management to defined remediation timelines, including the annual third-party penetration test and everything that follows it.
- Automation. A meaningful share of this job is building and maintaining automation in PowerShell, Microsoft Graph and platform-native workflows — provisioning and deprovisioning, configuration, reporting, evidence collection. You'll inherit what already runs as well as build what doesn't exist yet.
- AI tooling. Administer and secure the firm's approved AI platforms under the same identity, data protection and logging controls as everything else, and help evaluate what comes next and what controls it needs.
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Alongside that: change and configuration management, backup and recovery, alternate Technical Recovery Lead for DR, asset and media management, key custody, and supporting the ISO 27001 programme, internal audit and client security assessments with evidence.
\n
\n
Who you are
\n
- \n
- 7 to 10 years in systems administration, including three or more at senior level with real ownership of a production environment.
- You've done both sides. Infrastructure and security, even if security was a phase rather than a title. This is the rare part, and it's the whole point of the role.
- You've worked inside a governed programme — ISO 27001, SOC 2, NIST CSF, HIPAA, CMMC or equivalent — and you've personally produced evidence for an audit or a client security assessment.
- You script. PowerShell and Graph, or close equivalent.
- You've worked somewhere small enough to matter. You'd rather own the environment than own a ticket queue, and you're comfortable when the day's priorities shift.
\n
\n
\n
\n
\n
\n
\n
Nice to have
\n
Government security programme experience · a compliance automation platform such as Drata or Vanta · CISSP, CISM, GIAC, or Microsoft SC-100, SC-300 or MD-102 · administering AI tooling in an enterprise setting
\n
\n
What's on offer
\n
$150,000 – $188,000 base, year-end performance bonus, annual cost-of-living increase, flexible PTO, hybrid working, gym subsidy, lunch in the office twice a week, and a technology group that gets celebrated alongside the attorneys rather than beneath them.
\n