Reports to: CEO & Operations Manager
About Us
We are a security-focused Managed Services Provider supporting small and mid-sized businesses with modern IT, compliance readiness, and proactive cybersecurity. Our clients operate in regulated industries including healthcare, manufacturing, and professional services. We pride ourselves on delivering exceptional service, clear communication, and measurable security outcomes.
We are seeking a Security & Compliance Engineer who can blend deep technical expertise with regulatory frameworks such as HIPAA, CMMC, and NIST 800-171. This is a senior-level role ideal for someone who enjoys solving complex problems, leading security initiatives, and guiding clients through compliance requirements.
What You’ll Do
Security & Compliance
· Implement and maintain controls aligned with HIPAA, CMMC Level 1/2, and NIST 800-171.
· Conduct security assessments, gap analyses, and evidence collection.
· Assist in developing and maintaining SSPs, POAMs, and compliance documentation.
· Monitor and respond to security alerts from tools such as SaaS Alerts, Fortress, and Microsoft 365 Defender.
· Support clients during audits and regulatory reviews.
Technical Engineering
· Serve as Tier 3 escalation for complex issues across Microsoft 365, Azure AD, Intune, networking, and server infrastructure.
· Deploy Conditional Access, MFA, endpoint protection, secure baselines, and identity governance.
· Lead project implementations including migrations, security hardening, and modernization initiatives.
· Troubleshoot advanced issues involving identity, networking, virtualization, and cloud services.
Client Communication
· Translate technical risk into business-friendly language for owners, office managers, and compliance officers.
· Participate in QBRs and security roadmap discussions.
· Provide guidance on best practices, regulatory expectations, and security maturity.
What You Bring
· 5+ years in an MSP or multi-tenant IT environment.
· Strong understanding of HIPAA, CMMC, and NIST 800-171.
· Deep experience with Microsoft 365, Azure AD, Intune, Conditional Access, and Defender.
· Strong networking fundamentals (DNS, DHCP, VPN, VLANs, firewalls).
· Experience with security tools such as SaaS Alerts, Fortress, Sentinel, or SIEM platforms.
· Excellent written and verbal communication skills.
Preferred Certifications
· Security+, CySA+, CCSK
· Microsoft SC-900, SC-200, AZ-500
· CMMC Registered Practitioner (RP)
· CISSP (bonus)
Why Join VTC Tech
· Work with a team that values security, professionalism, and long-term client relationships.
· Opportunity to lead security initiatives and shape compliance programs.
· Competitive salary, benefits, and professional development support.
· A culture that values clarity, ownership, and continuous improvement.
Employment Type
Full-time position
Location
Georgia, Florida, or Alabama (Remote) Compensation
$80,000-$120,000 per year Benefits
· Dental insurance
· Health insurance
· Paid time off
· Vision insurance
Applicants may be subject to a background check.
Please include a brief cover letter introducing yourself and explaining why you’re the right fit to join the VTC Tech team.
