Information Technology Security Manager

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Grand Rapids, MI, US

We invite individuals who are enthusiastic about the aviation industry and dedicated to providing a world‑class experience to apply. Join us and be part of a dynamic team that values collaboration, supports each other's development, and embraces diverse ideas and perspectives.

Serving as Michigan's second busiest airport and recognized as the best small airport in the country by USA Today, Gerald R. Ford International Airport stands as a testament to West Michigan's vibrant growth. The airport serves over four million passengers annually, with eight commercial airline partners offering nonstop flights to over 35 destinations. As a vital economic engine in the region, it supports more than 40,000 jobs and contributes over $7 billion to the economy each year.

Gerald R. Ford International Airport has received multiple awards from Airports Council International World's 2023 Airport Service Quality (ASQ) Awards, including Best airport 2 to 5 million passengers in North America;
Airport with the Most Dedicated Staff in North America;
Easiest Airport Journey in North America;
Most Enjoyable Airport in North America; and Cleanest Airport in North America. Managed and operated by the Gerald R. Ford International Airport Authority, the airport is committed to creating an exceptional travel experience for our passengers while fostering growth and prosperity for all of West Michigan. Our team is dedicated, passionate, and focused on innovation, making it a great place to build a rewarding career.

Leads and participates in the implementation, administration, and continuous improvement of the Airport’s cybersecurity environment. This role is responsible for securing the organization’s enterprise infrastructure, cloud platforms (Azure & AWS), network environments, and integrated systems, ensuring protection of critical airport operations and data. This is a hands‑on engineering role requiring both security architecture, understanding and deep technical implementation capability, with a focus on identity, access control, monitoring, and incident response.

Plays a critical role in ensuring the Airport’s environment is secure, resilient, compliant, and aligned with regulatory requirements.

• Designs, implements, and maintains security controls across cloud environments (Azure & AWS), network and infrastructure systems, and identity and access management platforms.
• Configures and manages identity systems (Entra /Azure AD), conditional access and MFA, and endpoint protection and security tools.
• Implements zero trust principles across the environment.
• Designs and enforces Role-Based Access Control (RBAC).
• Implements identity governance and lifecycle management.
• Secures privileged access and administrative accounts.
• Ensures consistent access policies across systems and environments.
• Implements and manages security monitoring solutions (SIEM, logging, alerting)
• Investigates and responds to security incidents.
• Develops and maintains incident response procedures.
• Implements cloud-native security controls and monitoring.
• Ensures alignment with Azure security best practices and frameworks.
• Supports secure cloud architecture in collaboration with infrastructure teams.
• Works closely with network and infrastructure teams to enforce segmentation, secure connectivity, and firewall policies.
• Ensures protection of IT and operational technology environments.
• Ensures alignment with regulatory requirements (TSA, FAA, NIST).
• Supports audits, assessments, and remediation activities.
• Identifies and mitigates security risks across systems.
• Maintains documentation of controls and security posture.
• Develops, implements, and maintains security standards and best practices.
• Serves as a senior technical resource for cybersecurity engineering and operations.
• Collaborates with cross‑functional teams (network, infrastructure, applications).
• Evaluates, recommends, and supports implementation of security…