Salary: $81,192.00 - $146,166.00 Annually
Location : Lexington County, SC
Job Type: FTE - Full-Time
Job Number: 193874
Agency: Department of Education
Opening Date: 10/09/2026
Closing Date: 10/16/2026 11:59 PM Eastern
Class Code:: AM82
Position Number::Normal Work Schedule:: Monday - Friday (8:30 - 5:00)
Pay Grade: TEC07
Hiring Range - Min.: $81,192.00
Hiring Range - Max.: $113,000.00
Job Purpose:The South Carolina Department of Education is seeking an IT Security Administrator to join the security operations team and work closely with the Chief Information Security Officer (CISO). The position will lead the daily operational defense of our agency infrastructure, and design, develop and manage security solutions to reduce IT risks to the agency's business processes and ensure compliance with information security policies, standards, and guidelines.
Responsibilities:- Security Operations: Lead the agency's security operations, establish operational standards and playbooks, manage triage, investigation, containment, eradication, recovery activities, and coordinate escalation and notification with the CISO, agency leadership, affected districts, and state-level partners in accordance with the agency's incident response plan and statewide reporting requirements.
- Defend and Monitor Agency Systems: Administer, tune, and continuously monitor enterprise security platforms including Microsoft Defender, SIEM, Intune, email and web filtering, identity protection, and vulnerability management to maintain visibility into threats targeting agency infrastructure, users, and data. Conduct proactive threat hunting informed by K-12 and public-sector threat intelligence.
- Administer Identity and Access Controls: Manage identity and access across Microsoft Entra ID and hybrid on-premises directories, including conditional access, multifactor authentication, privileged access, role assignment, guest and district-partner access, and recurring access reviews. Enforce least-privilege principles and investigate identity-based threats such as credential compromise, token theft, and anomalous sign-in activity
- Subject Matter Expert: Serve as a subject matter expert associated with highly technical security content, processes, and procedures. Consults with users and management to effectively measure and accurately report on information security risks, through audit and assessment of security controls, processes, and routines.
This position is located in the Office of Information Technology.
Minimum and Additional Requirements A bachelor's degree in information technology systems, computer science, or a related field and experience in the information technology field to include experience in a security-focused role. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.
Preferred Qualifications- Bachelor's degree in computer science, Information Technology, or a related field.
- A minimum of five (5) years of experience working with security tools and incident response, including the day-to-day administration, tuning, and operational use of enterprise security platforms and the investigation and resolution of security events. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.
- A minimum of three (3) years of experience leading a security operations team.
- Hands-on experience administering Intune, Microsoft Defender (including Defender for Endpoint, Defender for Office, and/or Defender for Cloud), covering policy configuration, alert triage, threat hunting, and remediation.
- Hands-on experience administering Microsoft Entra ID (formerly Azure Active Directory), including conditional access policies, multifactor authentication, identity protection, role-based access control, and directory synchronization.
Acceptable certifications include, but are not limited to: CompTIA Security+, CySA+, GIAC (GSEC, GCIH, GCIA), Certified Information Systems Security Professional (CISSP), Microsoft Certified: Security Operations Analyst Associate (SC-200), or Microsoft Certified: Identity and Access Administrator Associate (SC-300), ISACA Certified Information Systems Auditor (CISA), ISACA Certified Information System Manager (CISM).
Additional CommentsAs a part of a generous compensation package, we offer comprehensive benefits that include generous paid time off, preeminent health care benefits, professional development opportunities, pension, a 401(k), and a hybrid work schedule with opportunity for remote work.
The South Carolina Department of Education offers an exceptional benefits package that includes:
- Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children.
- 15 days annual (vacation) leave per year.
- 15 days sick leave per year.
- 13 paid holidays.
- State Retirement Plan and Deferred Compensation Programs.
ONLY THOSE APPLICANTS CHOSEN FOR AN INTERVIEW WILL BE NOTIFIED BY LETTER THAT THE POSITION HAS BEEN FILLED.
01
Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education. A resume will not be accepted or reviewed in lieu of the application. I have read and acknowledge the above statement.
02
I understand that a criminal record investigation will be conducted prior to employment being offered by the South Carolina Department of Education. My personal identifying information will be processed through the South Carolina Law Enforcement Division (SLED).
03
Do you have a bachelor's degree in information technology systems, computer science, or a related field and experience in the information technology field to include experience in a security-focused role? Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.
04
Do you have a minimum of five (5) years of experience working with security tools and incident response, including the day-to-day administration, tuning, and operational use of enterprise security platforms and the investigation and resolution of security events? Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.
05
Do you have a minimum of three (3) years of experience leading a security operations team?
06
Do you have hands-on experience administering Intune, Microsoft Defender (including Defender for Endpoint, Defender for Office, and/or Defender for Cloud), covering policy configuration, alert triage, threat hunting, and remediation?
07
Do you have hands-on experience administering Microsoft Entra ID (formerly Azure Active Directory), including conditional access policies, multifactor authentication, identity protection, role-based access control, and directory synchronization?
08
How did you hear about this position?
- Careers.sc.gov
- Indeed.com
- LinkedIn
- Social Media/Advertising
- Other (please specify below)
09
If you answered "other" in the question above, please specify where you heard about this position below.
Required Question
