Senior Manager, IT Engineering & Security

Senior Manager, IT Engineering & Security

Altimmune (NASDAQ: ALT) is a late clinical-stage biopharmaceutical company developing therapies for patients with serious liver diseases. The Company's lead candidate, pemvidutide, is a unique dual-action therapy targeting both glucagon and GLP-1 receptors in a balanced 1:1 ratio in development for the treatment of metabolic dysfunction-associated steatohepatitis (MASH), alcohol use disorder (AUD), and alcohol-associated liver disease (ALD). For more information, please visit www.altimmune.com

Summary of Position:

The Senior Manager, IT Engineering & Security leads Altimmune's engineering, administration, and security of our Microsoft cloud environment. This hands-on technical role will be responsible for Microsoft 365, Entra ID, Intune, Exchange Online, Microsoft Defender, SharePoint, OneDrive, and Purview, with a focus on cloud modernization, identity security, endpoint and mobile access management, enterprise messaging, and security architecture.

The individual will drive technical improvements, establish engineering standards, implement security controls, and serve as a senior escalation resource for complex infrastructure and security issues.

This position is based in Morristown, NJ, and will be hybrid (2-4 days per week in the office).

Essential Functions:

Microsoft Cloud Infrastructure & Identity Management

• Own hands-on administration of Microsoft 365, Entra ID, Exchange Online, SharePoint Online, OneDrive, and Teams.
• Support migration from hybrid Active Directory to cloud-native Entra ID.
• Configure and maintain SSO, MFA, Conditional Access, security groups, and administrative roles.
• Maintain tenant configurations, licensing, service health, and reliability.
• Configure and troubleshoot application authentication and provisioning using SAML, OAuth, and SCIM.
• Automate cloud administration and implement configuration standards and best practices.

Endpoint Management & Mobile Access Security

• Administer Intune for Windows device management, compliance, application deployment, and security configuration.
• Deploy and support Windows Autopilot and cloud-native device management.
• Manage MDM and MAM for corporate-owned and BYOD devices.
• Configure Intune App Protection Policies and Conditional Access for secure mobile access to applications and data.
• Maintain endpoint security baselines, monitor compliance, and remediate security issues.
• Support secure access to Exchange Online, Teams, OneDrive, SharePoint, and other enterprise applications.

Exchange Online & Email Security

• Administer Exchange Online mailboxes, mail flow, transport rules, connectors, distribution groups, and permissions.
• Maintain SPF, DKIM, DMARC, anti-phishing, and anti-malware controls.
• Support Defender for Office 365 and investigate email security incidents.
• Resolve complex messaging, delivery, authentication, and client connectivity issues.
• Support mailbox retention, eDiscovery, and email compliance requirements.

Microsoft Security & Compliance

• Administer Defender for Endpoint, Defender for Office 365, and applicable Entra security capabilities.
• Configure and maintain Purview controls for information protection, data loss prevention, retention, and data governance.
• Implement security hardening, identity protection, endpoint compliance, and least-privilege access.
• Investigate alerts, remediate vulnerabilities, and coordinate incident response with cybersecurity stakeholders.
• Support security assessments, access reviews, internal audits, and compliance requirements.

Job Requirements (essential knowledge, skills, and attributes):

• 5–7 years of hands-on experience in enterprise IT infrastructure, systems administration, or Microsoft cloud operations.

• Strong expertise administering Microsoft 365, Entra ID, Exchange Online, and Microsoft Intune.
• Experience with identity and access management, including SSO, MFA, Conditional Access, and hybrid Active Directory.
• Hands-on experience with endpoint management, Windows device security, MDM, and MAM.
• Strong knowledge of Exchange Online administration, mail flow, and email security.
• Experience implementing Microsoft cloud security controls and supporting security incident remediation.
• Advanced troubleshooting skills across Microsoft cloud services, Windows endpoints, authentication, and enterprise applications.
• Experience serving as a senior technical escalation resource.
• Working knowledge of PowerShell scripting and IT automation.
• Strong communication, technical documentation, and independent problem-solving skills.

Altimmune provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.