IT Infrastructure Manager

IT Infrastructure Manager

Company: Crimson IT Location: Los Angeles, CA — three days per week at the client site; two days supporting other client sites or working in a hybrid capacity Compensation: $80,000–$100,000 base

Summary

Crimson IT is seeking a hands-on technical leader to manage a key client’s IT environment and provide technical leadership across our broader client base. In the embedded role, you’ll be the client’s trusted technical point of contact. Across other accounts, you’ll help ensure our solutions are secure, standardized, well documented, and aligned with best practices.

Experience in regulated healthcare or HIPAA-governed environments is highly desirable. The ideal candidate is comfortable working with executives and end users, as well as managing infrastructure in the field.

Responsibilities

Embedded IT Management

• Own day-to-day operations across servers, networks, endpoints, and cloud services.
• Administer Active Directory, Group Policy, and Microsoft 365, including Entra ID, Exchange Online, Teams, SharePoint, and Intune.
• Manage VMware vSphere/ESXi, including capacity planning, patching, and lifecycle management.
• Configure and maintain Fortinet and Meraki firewalls, switches, and access points.
• Oversee backup and recovery, including restore testing and alignment with RPO/RTO targets.
• Plan infrastructure improvements and advise on hardware, licensing, and budgets.
• Serve as a technical escalation point for end users, coordinating with Crimson IT’s service desk and engineering teams.
• Partner with Crimson IT Account Management and client leadership on technology roadmaps, budgets, and strategic initiatives.
• Support HIPAA requirements and healthcare security practices; conduct onsite reviews of network closets, servers, and workstations.
• Keep communication flowing between client office management and the technology team.

Technical Alignment Across Clients

• Assess client environments against Crimson IT standards and security best practices; identify and drive or guide remediation of gaps in security, compliance, backup, disaster recovery, and infrastructure.
• Evaluate vendors and products, recommend purchases and architectures, and review designs and configurations such as firewall rules, Active Directory, backup, and Microsoft 365 security baselines.
• Improve consistency in documentation, build standards, and tools across client environments.
• Mentor engineers and service desk staff, provide senior technical escalation, and cover other client environments as needed.

Security and Documentation

• Drive core security practices, including patch management, MFA, least privilege, email security, endpoint protection, and incident response.
• Maintain network diagrams, runbooks, SOPs, asset inventories, and configuration baselines.
• Support compliance efforts and evidence gathering for frameworks such as SOC 2, HIPAA, CIS Controls, and NIST.

Required Qualifications

• 7+ years of progressive IT experience, including lead, senior engineering, or management responsibilities.
• Strong hands-on experience with Active Directory, VMware, networking, and Microsoft 365.
• Solid understanding of infrastructure design and cybersecurity best practices.
• Strong communication, problem-solving, and documentation skills, including the ability to explain technical issues and tradeoffs to executives and nontechnical staff.
• Ability to balance an embedded client commitment with responsibilities across multiple clients.
• Customer-facing experience and strong interpersonal skills.
• Ability to perform regular physical work, including moving, mounting, and installing equipment.
• Located in Los Angeles or within a 20-mile radius.

Preferred Qualifications

• MSP or consulting experience.
• Certifications such as Fortinet NSE 4+, VCP, Veeam VMCE, Microsoft MS-102 or AZ-104, Security+, CISSP, or CISM.
• Experience with compliance frameworks and client security assessments; familiarity with HIPAA and healthcare IT.
• Familiarity with PSA/RMM tools such as ConnectWise, Autotask, or NinjaOne; VoIP and communications platforms such as Microsoft Teams; or access control and surveillance systems.

Additional Requirements

• Must successfully complete a pre-employment background check
• Must have a valid California driver’s license

Benefits

• 401(k) with company match
• Profit sharing
• Paid time off and holidays
• Professional development and certification reimbursement
• Health, dental, and vision insurance

Pay: $80,000.00 - $100,000.00 per year

Benefits:

• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Work Location: In person