Red Cup IT

• Architect and maintain hardened, isolated security stacks • Serve as the technical lead for vendor evaluations • Engineer 'Gold Image' baselines for rapid onboarding • Lead response to sophisticated APTs and complex breaches • Conduct deep-dive Root Cause Analysis and implement preventative measures • Build automation connecting technical stacks • Develop custom API integrations for seamless auto-remediation • Act as a high-level advisor for key accounts • Oversee technical evidence collection for compliance

• Monitor license utilization across the organization to identify "shelfware" (unused software). • Act as the primary point of contact for vendors (e.g., Microsoft, AWS, Cisco). • Negotiate volume discounts, tiered pricing, and favorable Service Level Agreements (SLAs). • Conduct regular internal audits to ensure all software usage matches the legal license entitlement, avoiding heavy "true-up" penalties. • Use SaaS Management Platforms (SMPs) to automate onboarding/offboarding workflows, ensuring licenses are reclaimed immediately when an employee leaves. • Bridge the gap between Finance (budgeting), IT/Security (vetting tools for compliance), and Operations (ensuring the right tools are available).

• Lead end‑to‑end delivery of multiple concurrent IT projects (infrastructure, cloud, security, and application initiatives) for MSP clients, from initiation through deployment and handoff. • Develop and maintain comprehensive project plans including scope, timeline, resource allocation, dependencies, and budgets. • Facilitate requirements gathering with clients and internal stakeholders; document technical and business requirements and translate them into clear deliverables and work packages. • Coordinate cross‑functional technical teams (engineers, service desk, networking, cloud, security, and vendors) to ensure timely, high‑quality project execution. • Monitor project progress, manage risks and issues, and proactively adjust plans, schedules, and resources to keep projects on track. • Maintain regular communication with clients, including status updates, expectations management, and scheduling of onsite/remote work. • Own project documentation such as statements of work, change orders, project schedules, status reports, acceptance criteria, and handover documentation to support teams. • Ensure all projects follow standardized MSP project management methodologies, internal processes, and documentation standards. • Manage scope to avoid scope creep, handling change management and approvals when requirements evolve. • Track and report key project metrics (milestones, budget, profitability, risks, and customer satisfaction) to leadership and stakeholders. • Collaborate with account management and sales to provide project estimates, identify follow‑on opportunities, and support client roadmapping. • Lead post‑project reviews and lessons learned to improve future MSP delivery practices.

• Implement, maintain, and lead cybersecurity efforts for CMMC compliance • Design, implement, and monitor security controls for CMMC requirements • Lead vulnerability assessments and continuous risk management • Support incident response and threat hunting • Collaborate with compliance managers and operations teams

• Design and deploy firewalls, intrusion detection/prevention systems (IDS/IPS), and encryption protocols across on-premises and cloud environments • Analyze network traffic and security alerts to identify breaches, respond to incidents, and mitigate risks • Conduct penetration testing and vulnerability scans to identify weaknesses, providing remediation strategies • Ensure adherence to regulations (e.g., HIPAA, GDPR) by reviewing security policies, supporting audits, and reporting compliance status • Work with IT, development, and product teams to integrate security into software development lifecycles (SDLC) and CI/CD pipelines • Develop security automation for cloud environments (e.g., AWS), CI/CD workflows, and DevSecOps practices

• Design, build, and maintain systems to protect digital assets • Architect end-to-end security solutions for multi-cloud environments • Embed automated security scanning into CI/CD pipelines • Serve as technical lead during high-severity security incidents • Manage complex, risk-based vulnerability programs • Ensure technical controls align with evolving global regulations

• Develop "Gold Standards" for client environments (e.g., standardizing Entra ID configurations or Intune policies across all tenants). • Manage and optimize the MSP's core toolset (RMM, PSA, Backup portals, and Documentation platforms). • Evaluate emerging tech (like AI-driven helpdesk automation) and decide if/how to integrate it into the service offering. • Act as the final "buck stops here" point for the most catastrophic or persistent technical issues. • Design complex migrations (Cloud-to-Cloud, M&A integrations) that Senior Engineers then execute. • Lead investigations into systemic failures to ensure they never happen again across any client site. • You are measured by how much better you make the other engineers. • Conduct code/script reviews and technical workshops. • Define how the team documents environments to ensure "Single Pane of Glass" visibility. • Oversee the implementation of zero-trust frameworks and MFA across the entire MSP stack. • Ensure client environments meet regulatory standards (HIPAA, CMMC, SOC2) through automated auditing.

• Troubleshooting and technical support as first point of contact • Manage hardware and software lifecycle including provisioning and maintenance • Oversight of network and infrastructure ensuring device connectivity • Manage user access and security protocols • Create documentation and training for internal IT processes

• Design and execute high-level projects, including server migrations (Physical to Virtual), Microsoft 365/Azure migrations, and network overhauls. • Act as the ultimate technical authority for the support team, resolving high-impact issues related to server crashes, core networking, and security breaches. • Proactively maintain and optimize client environments using our RMM and PSA toolsets to ensure 99.9% uptime. • Implement and enforce security best practices (MFA, EDR, Backup verification) and technical standards across a diverse client base. • Maintain impeccable records of client configurations, network diagrams, and procedural "runbooks" within our documentation platform. • Assist account managers in "Technical Business Reviews" by identifying hardware lifecycles and recommending technology upgrades that align with client goals.

• Cloud adoption plans and application design • Governance and security management • Cost modeling and budgeting • Leadership and collaboration across departments