IT Security Engineer Jobs in Pennsylvania

Please Note:

Interested candidates should apply via our company website for consideration at: https://www.gournayconsulting.com/careers

Preference will be given to candidates already within a commutable distance to our office location.

At Gournay Consulting, we believe the best solutions come from people who genuinely care—about the work, the results, and the team behind it.

We’re a collective of strategists, engineers, data experts, and digital shelf specialists who know how to solve complex business problems without making them feel complex. Our clients trust us because we don’t just give advice—we roll up our sleeves, dive in, and get things done.

We’ve built plug-ins that save clients hundreds of hours, migrated data across massive ecosystems, solved thorny GDSN challenges, and optimized product content for some of the most demanding retail and foodservice partners in the industry.

We move fast. We stay sharp. And above all, we care—deeply—about doing things right.

Who are we looking for?

The IT Systems and Security Administrator is responsible for maintaining secure, reliable, and efficient technology systems across the organization. This role manages day-to-day IT operations, systems administration, user access, hardware and software, and cybersecurity and compliance practices while providing responsive technical support to employees. The IT Systems and Security Administrator serves as a key resource for protecting company and client information, proactively identifying and addressing technology and security risks, and ensuring employees have the tools, access, and support needed to work effectively. The IT Systems and Security Administrator will balance hands-on technical support with proactive system maintenance, security oversight, process improvement, and documentation.

What are we looking for?

Applicants are required to have the following qualifications and experience:

Essential Qualifications:

• Bachelor's Degree with a preferred concentration major in Information Technology, Information Systems, or Cybersecurity. Equivalent professional experience combined with a degree in a related discipline will also be considered.
• At least 5 years of progressively responsible professional experience in systems administration, infrastructure support, network security administration, or related roles.
• Demonstrated ability to handle confidential company, employee, and client information with a high degree of discretion and sound security judgment.

Technical Requirements:

• Strong working knowledge of Windows administration, configuration, troubleshooting, and endpoint management.
• Experience supporting or administering technologies such as: Microsoft Azure, Microsoft 365, Microsoft Entra ID, Duo and security monitoring platforms.
• Experience supporting or administering cybersecurity fundamentals and security best practices, including antivirus, email security, and vulnerability-management tools, phishing prevention and employee cybersecurity training.
• Working knowledge of networking fundamentals, firewalls, and network troubleshooting.
• Solid understanding of cloud environments.
• Solid server administration skills with proven backup and recovery / disaster-recovery experience.
• Ability to install, configure, maintain, and troubleshoot laptops, conference-room technology, and other office IT equipment.
• Familiarity with security frameworks and compliance requirements. Direct experience preparing for, maintaining, or auditing a SOC 2 framework is preferred.

Core Competencies:

• Ability to communicate confidently and effectively, both written and verbally.
• Ability to creatively explain and present complex concepts effectively to both technical and non-technical audiences.
• Strong planning and organizational skills with the ability to effectively balance multiple projects concurrently.
• Ability to troubleshoot issues and document root cause analysis and solutions to provide effective and timely resolution.
• High sense of urgency and responsibility in issue resolution.
• Highly detailed-oriented, with a commitment to accuracy.
• Has a growth mindset and thrives in an agile and fast-paced work environment
• A self-starter with the resourcefulness to work both independently and collaboratively.

In this role, your core responsibilities will be:

Technology Infrastructure Administration

• Administer and manage user access for core business systems: identity/access management (SSO), email, endpoint management, enterprise applications and SaaS application access.
• Manage Microsoft 365, Azure, Entra ID, Active Directory, and enterprise cloud services.
• Support virtualization, storage, backups, disaster recovery, and business continuity.
• Lead or participate in IT infrastructure upgrades, system implementations, and technology rollouts.

Security & Compliance

• Own and continuously improve our security posture — including endpoint protection, patch management, access controls, security training, and security awareness practices.
• Lead SOC 2 Type 2 Certification and compliance efforts, including audit preparation, documentation, implementation of controls, and ongoing compliance.
• Manage client Data Processing Agreements (DPAs) from initial drafting through final execution and renewals. Maintain an organized repository of executed client DPAs to ensure audit readiness and ongoing compliance.
• Run routine vulnerability scans, prioritize risks, and coordinate remediation patching.
• Monitor and respond to security alerts, phishing attempts, and vulnerabilities.
• Manage email security and lead or assist in incident response, triage, and post-incident review.
• Support phishing investigations and security awareness initiatives.
• Manage office security systems, including electronic access control, key fob distribution, surveillance cameras, and visitor sign-in software to ensure a safe environment.

Operations & Support

• Manage the full device lifecycle: procure, set up, and configure laptops and equipment for new hires; handle secure off-boarding and asset recovery for departing employees.
• Develop and maintain IT policies, procedures, and documentation (onboarding/off-boarding checklists, acceptable use, AI, data handling, etc.)
• Manage and support office technology infrastructure (conference rooms, meeting spaces, TVs, networks, IoT devices.)
• Maintain IT asset inventory, lifecycle management, software licensing, and equipment standards.
• Document system configurations, procedures, and technical standards.
• Diagnose and resolve networking issues (LAN, VPN, etc.)
• Track technology expenditures and recommend cost-effective solutions.
• Own disaster recovery and business continuity planning and testing.
• Serve as the primary point of contact for employee IT support (hardware, software, account access, connectivity.) Provide advanced technical support for escalated issues.

How can you *Grow with Gournay*?

With defined career paths for advancement and opportunities for cross-training, we encourage employees to grow within our organization. Members of our team will serve as mentors to the successful candidate, and professional development opportunities are offered regularly, both in individual and team capacities.

Why choose Gournay Consulting?

In addition to our people-first culture, we offer competitive benefits, including:

Healthcare, dental & vision coverage ▪ 401(k) with employer match ▪ Short-term disability ▪ Life insurance ▪ Flexible Spending Account ▪ Paid Time Off plus Holidays ▪ Generous training & professional development opportunities

*Please note:

Base salary range for this role is $85,000 - $95,000, based upon professional work experience. This position may be eligible for an annual bonus, based upon performance.

Preference will be given to candidates already within a commutable distance to our office location.

Pay: $85,000.00 - $95,000.00 per year

Benefits:

• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Parental leave
• Vision insurance

Work Location: In person