Security & Infrastructure Engineer

nuvioIT, LLC is a Norfolk, VA-based Managed Security Service Provider (MSSP) and CMMC Registered Practitioner Organization (RPO). We deliver managed IT, cybersecurity operations, and CMMC compliance services to Defense Industrial Base (DIB) contractors. We are a Microsoft Partner operating at the intersection of compliance-driven security and enterprise Microsoft 365 technology helping defense subcontractors achieve and maintain CMMC Level 2 certification.

This is a ground-floor opportunity on a growing team. You will work directly on client engagements with real environments, real projects, and real ownership from day one.

Overview

We are hiring a Security & Infrastructure Engineer to execute hands-on technical delivery across our growing portfolio of Defense Industrial Base (DIB) clients. This role focuses on Microsoft 365 migrations, Microsoft Defender suite deployment and configuration, Entra ID, Intune, Sentinel, and firewall work, the core engineering that gets client environments built and secured.

You will work directly alongside the founder and receive mentorship on more advanced security topics as you grow. CMMC compliance and advisory work is handled separately your focus is technical execution. You will serve as the senior technical resource for escalations from our helpdesk and SOC teams.

What You will do

•   Plan and execute Microsoft 365 GCC and GCC High tenant migrations across multiple concurrent DIB client environments

•   Deploy, configure, and harden the Microsoft Defender suite: MDE, MDO, MDI, MDCA, and Sentinel

•   Configure and manage Microsoft Entra ID, Conditional Access policies, Privileged Identity Management (PIM), and Intune device compliance baselines

•   Design and implement Microsoft Purview DLP policies, sensitivity labels, and data governance controls for CUI environments

•   Perform firewall review and hardening for client network perimeter security

•   Configure and manage Microsoft Sentinel workspaces, KQL alert rules, and alert tuning integrated with the Aegis Unified SOC platform

•   Assist with CMMC technical control implementation under guidance configuring the controls, not writing the compliance documentation

•   Serve as a technical point of contact for assigned clients throughout onboarding, migration, and steady-state managed operations

•   Document all technical configurations, change records, and architecture decisions in our PSA

•   Handle escalated technical issues from helpdesk and SOC staff on Microsoft 365, security tooling, and endpoint management

Required Experience

•   3 years of hands-on Microsoft 365 administration such as tenant management, Exchange Online, Teams, SharePoint

•   Exposure to M365 migrations mailbox migrations, tenant-to-tenant, or GCC/GCC High preferred but not required

•   Working knowledge of Microsoft Defender for Endpoint and Defender for Office 365, deployment and basic policy configuration

•   Microsoft Entra ID: MFA, Conditional Access, user/group management, RBAC

•   Microsoft Intune: device enrollment, compliance policies, basic configuration profiles

•   Familiarity with Microsoft Sentinel or equivalent SIEM handling log ingestion, basic alert review

•   Networking fundamentals and firewall basics, comfortable reviewing firewall rules and working on policy changes

•   Ability to work in regulated environments with basic awareness of security compliance frameworks

Preferred Qualifications

•   Microsoft certifications: MD-102, MS-102, AZ-104, or MS-500 a plus

•   Prior MSP or managed services experience, comfortable working across multiple client environments simultaneously

•   Experience with ConnectWise PSA, Autotask, or equivalent MSP ticketing platform

•   Exposure to GCC or GCC High environments, even at a basic level

Why nuvioIT

•   Work on real projects with real impact such as GCC High migrations, Defender deployments, and secured environments for defense contractors

•   Growth path toward a senior engineering role as the company scales

•   nuvioIT sponsors certifications. We invest in your development, not just your output

•   Small team means you are not a ticket number; your work is visible and your contributions matter

•   Get exposure to a high-demand niche — defense IT, CMMC, and Microsoft security

Submit your resume and a brief note on your Microsoft 365 experience with what environments you have worked in, what you have deployed or migrated, and what you want to learn next to:

careers@nuvioit.com

We are not working with staffing agencies at this time.