Serve as the ISSO for cloud environments using Microsoft security products. Author control implementation statements, perform vulnerability scans, produce risk-based reports, assist remediation, enforce RMF-compliant controls, and collaborate with customer security teams to translate policy into operational procedures.

Provide day-to-day administration and support for Windows workstations, servers, Microsoft 365, Azure AD/Active Directory, and Intune-managed endpoints. Perform deployments, patching, vulnerability remediation, user administration, troubleshooting, backups, documentation, and assist senior staff with upgrades, migrations, and cybersecurity/compliance activities (CMMC, NIST SP 800-171). Occasional travel to customer sites (1-2 trips/year).