IT Security Administrator

At FORTÉ, every role plays a part in reimagining how the modern workplace works. Whether you're on the front lines with customers or behind the scenes making things run, your work helps people connect, collaborate, and get things done. From classrooms to control centers, we design and deliver the systems that power smarter, more connected workplaces – and it all starts with the people who make them possible. FORTÉ (formerly AVI Systems) is a 100% employee-owned company with 50+ years of experience and a bold new identity   This person will provide direct security support to FORTÉ employees, IT staff, and key stakeholders by monitoring, protecting, and improving the organization’s security posture. This role delivers Tier 2 security support, investigates security incidents, and supports ongoing security operations, awareness, and compliance initiatives.   What You Will be Doing:   Security Operations & Incident Response Monitor and respond to alerts from MDR, IDS, DLP, EDR, and email security platforms Investigate and remediate phishing, malware, and security incidents Maintain and improve secure email and web gateway controls Provide Tier 2 security escalation support and incident resolution Vulnerability & Endpoint Management Review vulnerability scans and penetration test results Coordinate remediation and patching with Systems Administrators Participate in the organization’s vulnerability management program Maintain awareness of emerging threats and vulnerabilities Identity & Access Management Support MFA and zero trust identity solutions Assist with password management tools and access reviews Perform quarterly terminated user audits and annual access reviews Secure shared and privileged account credentials Security Awareness & Training Conduct quarterly phishing simulations Deliver security awareness campaigns and new hire training Educate employees on security best practices and emerging threats Projects, Policies & Continuous Improvement Participate in IT and cross functional security projects Ensure compliance with organizational policies and standards Recommend updates to security policies, procedures, and controls Create and maintain security documentation and knowledge base content   Customer Focus Deliver timely, professional, and customer focused security support to internal and external stakeholders Communicate clearly and effectively regarding security issues, risks, and remediation steps Partner with business units and customers to understand requirements and align security solutions accordingly Maintain a service-oriented mindset while balancing security risk and operational needs   Communication & Reporting Document security incidents, investigations, and remediation activities in accordance with organizational procedures Prepare clear, accurate reports and summaries for IT leadership, management, auditors, and other stakeholders Communicate security status, risks, and trends through regular reporting and adhoc briefings as needed Maintain timely and professional communication during incidents, projects, and security initiatives   Teamwork: Crosstrain with IT team members Document systems and processes Secure shared account credentials Perform peer documentation reviews     What You Bring to Assure Success: Experience with Secure Email Gateways, Secure Web Gateways, EDR, and SIEM tools  Experience with Security Awareness Training and Privileged Access technologies  Experience with Microsoft Defender  Hands on experience administering and monitoring Microsoft Defender XDR and related Microsoft security products to identify, investigate, and remediate security threats across endpoints, identities, email, and cloud workloads Experience with vulnerability scanning  Knowledge of CIS and NIST frameworks  Experience administering Microsoft and Cisco Systems  Understanding of networking fundamentals including DNS, DHCP, HTTP/S, SSL, OSI, and TCP/IP Ability to explain complex concepts in simple terms CISSP, ISC², ISACA, Microsoft, Cisco, CompTIA, or equivalent industry certifications preferred but not required