IT 安全系统管理员
IT Security Systems Administrator
我们的故事
TopDog Law 不是一家普通的律师事务所。我们是一家在全国范围内快速扩张的个人伤害律师事务所，专注于影响力和增长——从营销和客户接待到诉讼，全程掌控客户体验。我们认为，世界级的营销，结合卓越的法律人才和运营能力，能为客户和业务带来更好的体验和成果。
在过去三年中，我们的规模每年增长 2-3 倍，在个人伤害领域的营销方面树立了新的标准，证明了当策略、速度和执行力一致时可以实现什么。现在，我们将同样的严谨和创新应用到事务所运营、案件管理和全国性扩展上——有意识地构建基础设施、系统和团队，以在不牺牲质量、文化和问责制的前提下实现增长。
我们是一支完全远程的团队，彼此信任，沟通开放，并致力于做出出色的工作。如果你热爱拥有感，在快节奏的环境中茁壮成长，并希望参与打造非凡的事物，你会在这里感到如鱼得水。
职位机会
我们正在寻找一名高级 IT 安全系统管理员，负责一项关键任务的两个方面：确保我们的系统稳定运行并保持安全。这是一个直接向 IT 总监汇报的实操型个人贡献者角色。你将平均分配时间在系统管理（Google Workspace、Microsoft 365、端点管理、身份认证和 SaaS 平台）和安全运营（策略执行、访问控制、合规性、威胁监控和事件响应）上。
你将负责在快速扩展的分布式员工队伍中实施、监控和执行安全控制措施。理想的候选人技术过硬，操作严谨，并且能够同时承担“它是否正常工作”和“它是否安全”的问题。这个职位对于维护系统的可靠性、性能和安全性至关重要。
你将负责以下内容
- 管理 Google Workspace 和 Microsoft 365 环境，并推动全面迁移到 Microsoft 365。
- 使用 MDM 工具管理 Windows 和 Mac 端点，包括设备注册、配置、合规性和补丁管理策略。
- 管理 SSO、MFA 和目录集成；维护身份提供商配置和认证策略。
- 管理安全工具集（DLP、EDR、邮件安全和 SIEM 日志）以确保数据保护和安全监控。
查看英文原文
Our Story
TopDog Law is not your typical law firm. We're a nationally scaling personal injury firm built for impact and growth — owning the client experience end-to-end, from marketing and intake through litigation. We believe that world-class marketing, paired with exceptional legal talent and operations, creates better experiences and outcomes for clients and the business alike.
Over the past three years, we've grown 2–3x year over year, setting a new standard on the marketing side of the personal injury space and proving what's possible when strategy, speed, and execution align. Now we're applying that same discipline and innovation to firm operations, case management, and national scale — intentionally building the infrastructure, systems, and teams to grow without sacrificing quality, culture, or accountability.
We are a fully remote team that share trust, open communication, and a commitment to doing great work. If you love ownership, thrive in a fast-moving environment, and want to help build something exceptional, you'll feel right at home here.
The Opportunity
We're looking for a Senior IT Security System Administrator to own both sides of a critical mandate: keeping our systems running reliably and keeping them secure. This is a hands-on individual contributor role reporting directly to the IT Director. You'll split your time roughly equally between systems administration Google Workspace, Microsoft 365, endpoint management, identity, and SaaS platforms) and security operations (policy enforcement, access control, compliance, threat monitoring, and incident response).
You'll be the person who implements, monitors, and enforces security controls across a rapidly growing distributed workforce. The ideal candidate is technically sharp, operationally disciplined, and comfortable owning both the "does it work" and "is it safe" questions simultaneously. This role is essential for maintaining the reliability, performance, and security of our systems.
What You Will Own
- Administer Google Workspace and Microsoft 365 environments, while facilitating the setup and full migration to Microsoft 365.
- Manage a mix of Windows and Mac endpoints using MDM tools for device enrollment, configuration, compliance, and patch management policies.
- Administer SSO, MFA, and directory integrations; maintain identity provider configuration and authentication policy.
- Administer and manage security toolsets (DLP, EDR, email security, and SIEM logs) to ensure effective threat detection and policy enforcement.
- Provide tier 2/3 support for firm-wide SaaS applications as necessary.
- Monitor, triage, and respond to security alerts across endpoint, email, identity, and cloud environments.
- Support compliance activities and internal audits; maintain evidence and documentation for security controls.
- Contribute to incident response: detection, containment, remediation, and post-incident review.
- Assist with vulnerability management, including patch cadence tracking and endpoint hygiene reporting.
- Identify gaps in security coverage or operational process and drive remediation.
- Stay current on emerging threats, vulnerabilities, and best practices relevant to a remote-first professional services environment.
- Develop dashboards & reports for security metrics, compliance status, and operational health.
- Manage relationships with key vendors and service providers, ensuring service level agreements (SLAs) are met.
- Oversee security operations and ensure compliance with relevant industry standards and internal policies.
- Strategy and planning: Translate business needs into operational capability, capacity planning, DR/BCP design, cloud migration strategy, and lifecycle roadmaps.
What You Bring
Required:
- Minimum of 7 years experience in IT systems administration, security, operations, or a combined role.
- Proven expertise in managing modern, complex IT environments.
- Enterprise level collaboration suite administration experience (Microsoft 365 and/or Google Workspace)
- Security fundamentals: Identity/access controls, patching, vulnerability management, and secure configuration practices.
- Disaster recovery & backups: Design and testable DR plans, RTO/RPO understanding, and backup validation.
- Working knowledge of EDR, email security (SPF/DKIM/DMARC, anti-phishing), DLP, or SIEM tooling in an operational capacity
- Hands-on MDM/UEM experience across Mac and Windows (Jamf, Microsoft Intune, or equivalent); comfortable managing device compliance at scale
- Demonstrated experience administering SSO, MFA, and an identity provider (Okta, Google Identity, Azure AD / Entra ID, or equivalent)
- Solid understanding of security fundamentals: identity lifecycle management, endpoint hygiene, phishing defense, zero-trust principles
- Experience supporting a fully remote or distributed workforce.
- Excellent communication, leadership, and interpersonal skills.
Preferred (Nice to Have):
- Experience in a law firm, legal technology, or professional services environment.
- Exposure to compliance frameworks (SOC 2, HIPAA, NIST CSF, or similar).
- Minimum of 1-3 years of experience in a leadership or management role, overseeing a team of IT professionals.
- Understanding of monitoring and logging tools (i.e. Nagios, Splunk, ELK stack).
- Scripting or automation experience (n8n, Python, Bash, Google Apps Script).
- Experience with cloud security posture management or SaaS security review.
- Demonstrated experience with disaster recovery planning and testing.
Who Thrives Here (Core Values)
We don't hire on resumes alone. We hire for competence, character, and mindset.
- Embrace Change: Open to feedback, embracing change, and always asking "what's next?"
- Committed: You care deeply, have your teammates' backs, and show up to build something lasting.
- No-Ego Energy: Positive, professional, and solutions-oriented. Drama stays at the door.
- Ownership: You do what you say, follow through, and treat the business like it's yours.
- Fast & Hungry: You move with urgency, thrive under high expectations, and are motivated by growth and impact.
What We Offer
- Base Salary: $115,000 and $135,000 per year, commensurate with experience
- Our job postings reflect the compensation range for the specific market and location of each role. Ranges vary by geography based on local market rates and cost of labor.
- Benefits include: Medical, dental, and vision insurance, 401(k) with company match, HSA, life insurance, disability coverage, paid time off, and parental leave.
Equal Opportunity Employer
We are an equal opportunity employer. Employment selection and related decisions are made without regard to age, race, color, national origin, religion, sex, disability, sexual orientation, gender identification, or being a qualified disabled veteran or qualified veteran of the Vietnam era or any other category protected by Federal or State law.
Originally posted on Himalayas