Senior Information Security Administrator

The Senior Information Security Administrator is a hands-on technical role focused on securing Solarity’s infrastructure, endpoints, and cloud environments. This position leads the implementation and optimization of security controls across both Windows and Linux systems, performs technical security assessments, and drives incident response activities.

The ideal candidate will have a strong background in system administration, deep familiarity with modern security tooling, and the ability to proactively identify, remediate, and defend against threats. In addition to technical leadership, this role includes mentoring junior team members and actively contributing to technical evidence collection and system hardening efforts in support of HITRUST and SOC 2 compliance.

Primary Responsibilities

• Administer, implement, and continuously improve security controls across server, endpoint, and cloud environments (Windows and Linux).

• Lead technical security assessments and proactively identify misconfigurations, vulnerabilities, and operational risks.

• Manage and maintain security tooling across key areas including:

  • File Integrity Monitoring (FIM)

  • Configuration Management

  • Vulnerability Management

  • Extended Detection & Response (XDR)

  • Firewall and VPN security

  • SIEM and Log Analysis

  • Identity & Access Management (IAM)

  • Data Loss Prevention (DLP)

  • Public Key Infrastructure (PKI) and certificate lifecycle management

• Monitor, triage, and respond to real-time security alerts and incidents in coordination with MDR and internal teams.

• Collaborate with infrastructure and application teams to enforce least privilege, network segmentation, and secure configurations.

• Automate security workflows and infrastructure hardening tasks using scripting (e.g., PowerShell, Python) or orchestration tools.

• Support audit readiness and evidence collection for HITRUST, SOC 2, and other compliance frameworks by producing technical documentation and system artifacts.

• Maintain internal security documentation and create technical knowledge base articles for broader IT use.

• Provide technical mentoring to junior team members on operational security tooling, secure architecture, and incident response processes.

• Contribute to Incident Response, Business Continuity, Disaster Recovery, and security policy development, providing technical input to support broader governance and compliance initiatives.

Qualifications

• 5+ years of progressive experience in technical security administration, infrastructure security, or system/network administration with a security focus.

• Solid foundational knowledge of both Windows and Linux environments, including system hardening, access controls, and secure configurations.

• Experience with tools and platforms in one or more of the following areas:

  • File Integrity Monitoring (FIM)

  • Extended Detection & Response (XDR)

  • SIEM / log aggregation and analysis

  • Identity & Access Management (IAM)

  • Vulnerability Management

  • Firewall and VPN configuration

  • Data Loss Prevention (DLP)

  • Public Key Infrastructure (PKI) and certificate lifecycle management

• Strong scripting or automation skills using tools such as PowerShell, Python, or Ansible.

• Hands-on experience contributing to technical evidence collection and remediation for frameworks such as HITRUST, SOC 2, and HIPAA.

• Familiarity with remote access, endpoint protection, and hybrid/cloud environments (especially Azure).

• Strong problem-solving, documentation, and communication skills.

• Self-motivated, self-directed, and comfortable managing priorities in a remote environment.

• Demonstrated commitment to continuous learning and staying current with emerging threats, tools, and technologies.

• Working knowledge of SOC 2, NIST 800-series, HITRUST, or HIPAA compliance frameworks is a plus.

• Security certifications such as SSCP, CCSP, or CSX-P are preferred.

• Broader certifications like CISSP or CISM are also valued when paired with strong technical experience.

• Comparable certifications such as CySA+, GSEC, or GPEN are a plus.

Performance Expectations

• Take ownership of issues and understand this occasionally involves working weekends/non-business hours to see through to resolution.

• Clearly communicate all scheduled PTO and be aware of any upcoming due dates that may be impacted, escalating to management to secure appropriate backup when needed. 

• Deliver outstanding customer service.

• Communicate issue details in a clear and concise manner.

• Escalate issues when appropriate to the next level or management. 

• Consistently adhere to documented security procedures and best practices

• Prepare and participate in all required meetings.

• Complete all assigned tasks on time delivering excellent quality.

• Demonstrate professional behavior and always show respect for all employees. 

• Maintain optimistic outlook and embrace change.

• Continually seek process improvement and growth opportunities.

• Proactively identify and escalate potential challenges or cross-functional issues to the appropriate team or management level.

About Solarity

Solarity improves the accuracy, accessibility, and interoperability of electronic medical records through innovative, service-backed technology to capture and index healthcare documentation.  Our solutions convert any healthcare document into properly formatted and indexed EMR data. Customers save time, improve efficiency, and enhance the value of their EMR investments while allocating labor resources more productively.

We have more than 50 years of experience managing documents for billing and treatment. Our customers rely on us for easily implemented, easy-to-use innovations that deliver powerful, always-improving results, as well as flexible delivery models for healthcare organizations of all sizes and specializations. For more information, visit www.SolarityHealth.com.

Solarity is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.