IT Manager

TITLE:

IT or Help Desk Manager

DEPARTMENT:

INFORMATION TECHNOLOGY

REPORTS TO:

DIRECTOR OF IT

FLSA STATUS:

EXEMPT

JOB DESCRIPTION REVISION:

8/21/26

BASIC FUNCTIONS

The IT Manager is responsible for managing information technology system used to support the organization. This includes the hybrid infrastructure spanning on-premises systems, Microsoft 365 GCC High, Azure Government, and AWS GovCloud environments.

This role is critical to ensuring the confidentiality, integrity, and availability of systems supporting Controlled Unclassified Information (CUI) and directly contributes to achieving and maintaining CMMC compliance. The IT Manager serves as a technical lead, driving IT strategy, and secure system design while mentoring junior staff and enforcing operational rigor across all IT platforms.

SPECIFIC DUTIES

Architecture & Engineering

• Architect and administer enterprise infrastructure across on-prem (Nutanix AHV), Azure Gov, and AWS GovCloud
• Define and enforce standards for compute, storage, networking, and identity across hybrid environments
• Lead infrastructure modernization initiatives including cloud adoption, workload migration, and platform standardization
• Act as escalation point and technical authority for complex infrastructure and security issues
• Mentor junior engineers and provide technical guidance across IT Operations

Hybrid Cloud & Platform

• Architect and administer Microsoft 365 GCC High (Exchange Online, Teams, SharePoint, Intune, Defender suite)
• Manage Azure Government services (IaaS, PaaS, networking, identity, policy, and security controls)
• Support AWS GovCloud (US) environments including EC2, S3, and VPC
• Ensure proper boundary management, tenant segregation, and data residency compliance for regulated workloads
• Implement and maintain cloud governance (RBAC, policy, tagging, and security baselines)

On-Prem Infrastructure (Nutanix-Centric)

• Design, deploy, and optimize Nutanix AHV clusters, storage (AOS), and lifecycle management (LCM)
• Manage Windows Server environments (2016/2019/2022) including:
  • Active Directory (tiered model)
  • DNS, DHCP, Group Policy
• Maintain hybrid identity integration with Microsoft Entra ID (Azure AD)
• Oversee core enterprise services (file services, print, RDS, SQL Server)

Network, Security, Compliance & CMMC Alignment

• Architect and maintain secure network infrastructure including:
  • Fortinet (FortiGate) firewalls
  • Meraki switching and wireless
  • Site-to-site and client VPNs
• Lead network segmentation strategies for CUI environments and audit boundaries
• Ensure systems are configured and maintained in alignment with:
  • NIST 800-171
  • CMMC
• Support audit readiness, SSP documentation, POA&M tracking, and evidence collection
• Implement and maintain:
  • EDR/XDR (e.g., SentinelOne)
  • SIEM integrations
  • Vulnerability scanning and remediation programs
• Enforce secure configuration baselines

Backup, Disaster Recovery & Resilience

• Architect and maintain enterprise backup solutions across on-prem and Gov Cloud platforms
• Define and enforce RTO/RPO aligned with business and compliance requirements
• Lead disaster recovery planning, tabletop exercises, and failover testing

Documentation, Change & Governance

• Maintain detailed architecture diagrams, and SOPs
• Enforce strict change management aligned with risk, impact, and rollback planning
• Ensure all infrastructure changes meet audit and compliance traceability requirements

STANDARD REQUIREMENTS

Comply with all requirements of International Standard ISO9001 and ISO27001, NIST 800-171, CMMC – Cyber Security and Informational Data Security Requirements. Aerospace Management System Standards AS9100, AS9120, IDEA-QMS-9090, ASA-100 and supporting construct standards AS6081, IDEA-STD-1010, AC7402-CAAP, CCAP-101, FAA AC00-56, ANSI/ESD S20.20. All employees shall commit and comply with the requirements of AS5553 for Counterfeit Electrical, Electronic and Electromechanical (EEE) Parts – Avoidance, Detection, Mitigation and Disposition practices.”

METRICS AND MEASURABLES

Open Issues for IT Help Desk

• Waiting for 3rd Party: Actively reviewed with Management to ensure relevance and appropriate priority.
• Waiting for Customer: Target fewer than 15.
• Waiting for Support: Target fewer than 10.
• Adhere to all business‑defined SLAs for ticket handling.

Adherence to Change Management Policies and Procedures

• Changes should be executed with minimal impact to business operations.
• Communication, backup, recovery planning, and risk assessment must be thoroughly evaluated and completed.

Project-Related Work

• Complete assigned project tasks within established deadlines.
• Provide clear and timely communication regarding project status.

Compliance

• Maintain compliance with all required regulations, including NIST 800‑171, CMMC and related frameworks.

EDUCATION / EXPERIENCE / COMPENTENCY

Required

• Bachelor’s degree or equivalent experience (7–10+ years in infrastructure engineering)
• Deep expertise in:
  • Microsoft 365
  • Azure Government
  • AWS GovCloud (US)
  • Nutanix AHV
  • Windows Server & Active Directory (tiered / secure design)
  • Fortinet firewalls & Meraki networking
• Strong experience with:
  • Hybrid identity (Entra ID + AD)
  • Security tools (EDR/XDR, SIEM, vulnerability management)
  • Backup and disaster recovery

Preferred

• Experience leading CMMC audit readiness or certification
• Strong scripting/automation skills (PowerShell, Python, Terraform)
• Experience with STIGs and federal security controls
• Familiarity with enclave design for CUI environments

Certifications (Preferred)

• Microsoft (Azure Government / Security / M365)
• AWS Certified (GovCloud-relevant certifications)
• Nutanix Certified Professional (NCP) or higher
• Fortinet NSE
• CompTIA Security+ / CISSP (strong plus)

PHYSICAL REQUIREMENTS (On-Prem Component)

• Ability to lift and rack equipment (up to ~50 lbs)
• Hands-on work in data centers/server rooms (cabling, rack/stack)
• Availability for after-hours maintenance windows and incident response
• Occasional travel between sites

TRAINING REQUIREMENTS

ALL TRAININGS OUTLINED FOR THIS JOB DESCRIPTION ARE IDENTIFIED WITHIN BLUE RAVEN’S TRAINING MATRIX, LOCATED WITHIN THE LEARNING MANAGEMENT TOOL WITHIN EACH INDIVIDUALS PRE-REQUISITES.