Systems and Cybersecurity Engineer

The Chapin School, an independent K-12 day school for girls located in New York City, seeks a student-centered, collaborative, and innovative educator to serve as Systems and Cybersecurity Engineer.

All candidates are encouraged to be familiar with Chapin’s website , mission and commitment to diversity, equity & inclusion .

Job Overview

Are you looking to expand and apply your security knowledge in a real environment with tangible outcomes? Join our team and work with our school community in enhancing our security posture in ways that enable student growth and keep learning at the forefront of everything we do.

Effective security practices require deep understanding and partnership. Reporting directly to the Director of Technology, the Systems and Cybersecurity Engineer will drive actionable enhancements to our security posture in an inclusive environment that both implements industry best practices and empowers our school community through education and collaboration.

Core Duties & Responsibilities

● Manage and maintain school systems including Microsoft Entra and directory services, Google Workspace, and cloud services;

● Implement and maintain security controls and DLP solutions within established frameworks and governance models;

● Oversee identity and access management (IAM) and enforce access controls, including all aspects of the user lifecycle;

● Participate in compliance and auditing efforts including NIST CSF 2.0 alignment, CIS benchmarking, regulatory requirements, legal hold management, and regular security audits;

● Monitor and promptly respond to security incidents including those detected by our security monitoring platforms, conduct investigations, and assist with post-event documentation;

● Implement and maintain standards, procedures, controls, and related documentation in accordance with established policies;

● Support security projects based on organizational priorities and in collaboration with the Director of Technology;

Team Support

● Support Technology Team members and wider school community with school data systems, integrations, data connections, and workflows to ensure alignment with security requirements;

● Provide advanced user support to colleagues, including troubleshooting, remediation coordination, and technical guidance;

● Participate in vendor and MSP relationships by providing technical input for tool and service assessments and implementations;

● Contribute to a security-conscious culture through collaboration and education efforts;

Partner with our Managed Services Provider

● Collaborate with our Managed Services Provider to maintain a robust and multilayered network and infrastructure environment;

● Collaborate to identify, plan, implement, and manage security measures for the protection of school data and systems;

● Collaborate to identify, plan, implement, and manage disaster recovery measures for the continued operation of the school.

Additional

● Some off-hours work may be required (e.g. emergency incident response, maintenance);

● Additional responsibilities as needed to meet the needs of the school.

Required Skills and Knowledge

● Bachelor's Degree

● Security certifications (e.g. Security+, SSCP) required;

● Three to five years experience in managing infrastructure or systems with at least one year focusing on information security or security risk management;

● Experience with domain administration, controls, and identity configurations such as IAM, SSO and MFA;

● Experience with incident detection, investigation, response, and security risk assessments;

● Experience with scripting, automation, and API integration (PowerShell, Python, Bash, or similar);

● Familiarity with the NIST Cybersecurity Framework 2.0;

● Knowledge of configurations and reporting for cloud services such as Microsoft Entra, Amazon Web Services (AWS), Google Cloud Platform (GCP) or similar;

● Experience working with virtualization technologies such as VMWare or Hyper-V or similar;

● Highly organized with strong analytical skills and a systematic approach to problem-solving;

● A strong team player with a collaborative mindset and a results-oriented focus;

● Must be constantly driven to improve and highly adaptable to evolving needs of the school community.

Highly Valued Experience

● An advanced security certification (e.g. CISSP, CEH, ESCA, CISM, CCSK or similar)

● Experience working in K-12 education or similar educational environments;

● Experience with security monitoring and incident response platforms (CrowdStrike, Darktrace, or similar XDR/EDR/NDR solutions);

● Experience with Data Loss Prevention (DLP) solutions and strategies;

● Practical experience with backup management, disaster recovery, and operational continuity;

Additional Beneficial Skills

● Network engineering or security experience in a complex environments with diverse endpoints including LAN, WAN, Data Center, security and Wireless technologies;

● Familiarity with Meraki network management tools and basic administration tasks;

● Proficiency with directory services technologies including Microsoft Entra and Google Workspace;

● Familiarity with education-specific legal and regulatory requirements (e.g. FERPA, COPPA);

● Familiarity with Student Information Systems (SIS) (Veracross, Powerschool, or similar);

● Familiarity with Learning Management Systems (LMS) (Canvas, Google Classroom, or similar);

● Familiarity with Remote Mobility Management (RMM) tools (Jamf Pro, NinjaOne, or similar);

● Understanding of service management frameworks such as ITIL helpful.

How to apply: Submit your cover letter, résumé. The committee will begin review of applications immediately and will consider those that are submitted on a rolling basis.

Compensation will be commensurate with experience: the range is $120,000-$145,000