Lynk

Network Engineer

• Design, deploy, and maintain LAN/WAN, wireless, VPN, and firewall infrastructure across Lynk office and lab locations
• Own network architecture decisions — segmentation, routing, VLANs, redundancy, and capacity planning as the company scales
• Administer and harden core infrastructure: Microsoft Entra ID (Azure AD), Conditional Access, DNS/DHCP, Office 365, and endpoint security (ESET, Microsoft Defender) at the systems-administration level
• Manage endpoint and device compliance through Microsoft Intune and MDM platforms (e.g., NinjaOne), including policy design, patch management, and fleet-wide enforcement
• Deploy, monitor, and maintain security posture via Microsoft Defender (Endpoint/365) — threat detection, alerting, and remediation
• Manage server infrastructure (physical and virtual), including provisioning, patching, backup, and lifecycle management
• Monitor network and infrastructure health; lead incident response and root-cause analysis for outages and performance issues
• Implement and maintain infrastructure security controls (firewalls, MFA, network segmentation, endpoint protection) in line with ITAR and export-control obligations
• Support Lynk's CMMC Level 2 compliance program — maintain endpoint compliance (patching, configuration baselines, encryption, access control) across the device fleet and evidence controls for audits
• Monitor and remediate endpoint compliance drift via Intune/NinjaOne and Microsoft Defender to keep the environment aligned with NIST SP 800-171 control requirements
• Partner with security/compliance stakeholders on System Security Plans (SSPs), POA&Ms, and audit readiness for CMMC assessments
• Document network topology, infrastructure architecture, and disaster recovery/business continuity procedures
• Serve as a secondary/escalation point of contact for basic end-user technical issues (hardware, software, connectivity, account access)
• Provision and configure end-user hardware (laptops, peripherals) in line with security and compliance baselines
• Troubleshoot common Windows/macOS and Office 365 issues for staff as needed
• Support onboarding/offboarding from an infrastructure and access-management perspective (accounts, device enrollment, permissions)

IT/Network System Administrator

Security Analyst

• Own and maintain the System Security Plan (SSP) and Plan of Action & Milestones (POA&M) for all CUI-scoped systems; always keep documentation audit-ready.
• Assess all 110 NIST SP 800-171 practices for implementation and effectiveness; map existing controls (Wazuh, ThreatDown, Tenable, ManageEngine, AD GPOs, SnipeIT) to CMMC requirements, identify gaps, and drive remediation.
• Maintain the organizational risk register; support ongoing Risk Management Framework (RMF) processes and report risk posture to the CISO.
• Lead preparation for CMMC Level 2 assessments — build evidence packages, coordinate with the C3PAO, and manage assessor requests and findings.
• Develop and maintain cybersecurity policies, procedures, and standards aligned to CMMC, DFARS, SOC 2, and GDPR; ensure version control and staff acknowledgment records are maintained.
• Define, track, and report security metrics and KPIs to the CISO and non-technical stakeholders including legal, contracts, and business development teams.
• Support contract teams with DFARS clause requirements, cybersecurity representations, and customer security questionnaires.
• Conduct vendor and third-party risk assessments; maintain supplier risk documentation.
• Manage the security awareness training program and phishing simulations; maintain completion records per CMMC requirements.
• Monitor SIEM for security events and alerts relevant to CUI systems; write and tune detection rules; triage and escalate incidents; produce post-incident reports with compliance impact assessment. Leverage audit log aggregation to satisfy CMMC AU (Audit & Accountability) control evidence requirements.
• Monitor EDR alerts for CUI-scoped endpoints; investigate detections and coordinate response with IT.
• Work with IT to ensure vulnerability findings are remediated within CMMC-required timeframes, track and report on remediation status.
• Leverage MDM and Active Directory to enforce device compliance, GPO-based security baselines, and access control policies across CUI-scoped endpoints.
• Use asset inventory as the authoritative hardware/software asset register for CMMC system boundary documentation; keep it current and audit ready.
• Conduct periodic access control audits; enforce least-privilege across AD, SSO, and SaaS tooling handling CUI.

IT/Network System Administrator

Security Analyst – ISSO