Security Operations Systems Administrator

Location: Southwick, MA-hybrid model |
Type: contract to hire

Pay range: 45/hr-67/hr

We are looking for a security operations professional to join our team as a Sec Ops & Systems Administrator. This is a security-first role - you will bring strong Sec Ops experience to our day-to-day detection, response, and hardening work, and you will be the designated owner of our Digi Cert platform and certificate lifecycle. Systems administration is a secondary part of the job, supporting the servers, backups, and endpoints that the security program depends on.

You will work closely with the Security Operations (Sec Ops) department and the wider IT team.

• Monitor, triage, and investigate security alerts from XDR, MDR, and other security tooling, escalating and driving incidents to resolution
• Participate in incident response, including containment, evidence gathering, root cause analysis, and post-incident documentation
• Support vulnerability scanning and remediation, prioritizing findings by risk and working with system owners to close them
• Apply and maintain security baselines, access controls, and configuration standards across servers, endpoints, and network devices
• Review and tune firewall policies and network security controls, with a focus on Fortinet environments
• Help build and improve runbooks, detection use cases, and security processes, and support audits and compliance requests with clear evidence

• Own and administer the Digi Cert account and platform, including organization and domain validation, user roles and permissions, ordering, renewals, and vendor relationship
• Manage the certificate lifecycle end to end - issuance, deployment, renewal, replacement, and revocation - so that no certificate expires unexpectedly
• Maintain a complete, accurate certificate inventory with owners, expiration dates, and the systems each certificate protects
• Build and maintain certificate discovery, monitoring, and renewal automation via ACME, API-based workflows, and expiry alerting
• Design and maintain internal PKI, including certificate templates, policies, and trust chains, and set standards for key length, algorithms, and certificate use
• Partner with application, infrastructure, and network teams to plan deployments and resolve TLS/SSL issues quickly

• Administer and patch Windows Server environments, including Active Directory and Group Policy
• Monitor backup jobs, verify recoverability, and assist with restore testing
• Manage endpoints and automate patching, scripting, and alerting through Ninja One (RMM)
• Provide hands-on Fortinet networking support, including basic configuration, monitoring, and troubleshooting

• Strong, hands-on experience in a security operations role, including alert triage, investigation, and incident response
• Working knowledge of XDR and/or MDR platforms and security monitoring workflows
• Proven experience managing digital certificates and PKI, including CSR generation, certificate chains, renewals, and revocation
• Experience administering a public Certificate Authority platform - Digi Cert strongly preferred
• Solid understanding of TLS/SSL, DNS, firewalls, and core networking and security fundamentals
• Strong troubleshooting skills, sound judgment, and the ability to work independently while keeping the Sec Ops department informed
• Clear written communication for documentation, runbooks, and cross-team coordination

• Experience working at a Managed Service Provider (MSP), including supporting multiple client environments and ticket-driven workflows
• Experience with Windows Server and Active Directory administration
• Experience…