IT Security Engineer

Morton is seeking an IT & Security Engineer for a medical research, education, and patient advocacy nonprofit in Charlottesville, Virginia. This role combines hands-on IT operations, cybersecurity, employee support, and audiovisual support in a small, collaborative environment. The ideal candidate can keep systems secure and reliable while providing responsive service to nontechnical colleagues. This person will work alongside a systems administrator and colleagues responsible for AI, audiovisual technology, and web applications.

• Manage and support networks, servers, cloud services, employee devices, and collaboration platforms.
• Administer Microsoft 365, Windows Server, Azure, Entra , SharePoint, and related infrastructure.
• Design and maintain local and offsite backup and recovery solutions.
• Handle employee onboarding and offboarding, account provisioning, access reviews, device configuration, patching, and equipment replacement.
• Share responsibility for helpdesk support, Windows and Mac computers, printers, and mobile connectivity.
• Implement security controls, maintain secure configurations, conduct risk assessments and vulnerability scans, and follow through on remediation.
• Coordinate security incident detection, containment, recovery, and documentation with internal stakeholders and external SOC resources.
• Maintain IT and security policies, procedures, and operational documentation.
• Support presentations, webinars, meeting technology, and AV equipment at the office and offsite Foundation events.
• Coordinate with vendors and platform owners to resolve issues and support technology improvements.

• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Progressive IT experience; the Foundation recommends at least four years.
• Practical experience implementing cybersecurity controls, responding to incidents, managing vendors, and maintaining reliable IT services.
• Strong working knowledge of Microsoft 365, Windows Server, Azure, Entra , SharePoint, networking, endpoint management, identity and access management, and backup and recovery.
• Ability to troubleshoot hardware and software directly while balancing daily support needs with planned improvements.
• Strong communication, organization, and follow-through, with discretion when handling sensitive information.
• Ability to work onsite in Charlottesville.

• Experience supporting a small, mission-driven, nonprofit, healthcare, or research organization.
• Familiarity with Salesforce integrations, web hosting, and AWS.
• Relevant Microsoft, networking, cybersecurity, or IT certifications.
• Familiarity with a recognized security framework, such as NIST.