INFORMATION SYSTEMS MANAGER

SAN ANTONIO MUSEUM OF ART•San Antonio, TX

3d•Onsite

About The Position

The Information Systems Manager leads SAMA’s internal Information Systems function, and this is a hands-on manager role in a two-person department. The Manager sets IS strategy, owns security and business continuity, administers the museum’s production platforms, and delivers reliable support to staff while mentoring the IS Supervisor. The role is accountable for a cloud-first environment built around Microsoft 365, Microsoft Defender, Cisco Meraki networking, Proofpoint email security, Veeam backup for Microsoft 365, Microsoft Intune device management, and Keeper for privileged credential management. The Manager must be able to operate these systems directly, not only supervise them. Microsoft Defender for Endpoint and Microsoft Defender for Office 365 are the museum’s primary endpoint detection, response, and Microsoft 365 threat-protection platforms.

Requirements

Five or more years of professional IT experience with systems administration, networking, and Microsoft 365 in a cloud-first or hybrid environment.
Two or more years of supervisory, team-lead, or project-management experience.
Direct supervision of helpdesk or desktop staff is preferred.
Hands-on administration of Microsoft Defender for Endpoint and/or Defender for Office 365 (alert triage, investigation, device actions).
Meraki or equivalent firewall, Microsoft Intune, Proofpoint or equivalent email security gateway, Veeam or equivalent SaaS backup, and an enterprise password vault (Keeper preferred).
Working knowledge of identity and access: Entra ID, MFA, VPN, least-privilege admin roles, and joiner/mover/leaver processes.
Ability to restore Microsoft 365 data from backup and to explain restore results to non-technical leadership.
Proficiency with Windows and macOS support and with PowerShell or similar automation.
Strong written and verbal communication; able to translate firewall, backup, and identity topics for staff and the CFO.

Nice To Haves

Microsoft 365 Certified: Security Administrator, Endpoint Administrator, CompTIA Security+, or Cisco Meraki credentials are advantageous.
CompTIA A+ alone is not sufficient for this level.
Museum, nonprofit, or cultural-institution experience is helpful but not required.

Responsibilities

Supervise, coach, and develop the Information Systems Supervisor, including work assignment, knowledge transfer, and performance feedback.
Set daily and weekly priorities so the two-person team can cover help desk, infrastructure, and security without an external MSP.
Serve as the final internal escalation point for complex technical and security issues.
Cover Supervisor duties during absence, peak periods, and incidents.
Own secure access across Microsoft Entra ID, Cisco Duo MFA, Cisco AnyConnect VPN, and the Meraki MX105 firewall.
Administer Keeper as the museum’s official password and secrets vault.
Enforce vault hygiene, role-based sharing, emergency access, and rotation of privileged credentials.
Design and run staff security-awareness programs using Proofpoint Essentials (phishing simulations, training assignments, and reporting).
Administer Microsoft Defender for Endpoint and Microsoft Defender for Office 365: onboarding devices, attack-surface reduction, alert triage, device isolation, investigation in the Microsoft Defender portal, Secure Score improvement, and coordination with Intune compliance policies.
Monitor threats using Microsoft Defender as the primary console, supplemented by Cisco Umbrella, Proofpoint, and Meraki security logs.
Investigate and remediate alerts with the Supervisor.
Identify and prioritize infrastructure and endpoint risks for remediation.
Coordinate patching through Intune and Defender recommendations.
Enforce the museum’s Acceptable Use, Incident Response, and Data Management policies.
Oversee Veeam backup of Microsoft 365 (Exchange, OneDrive, SharePoint, Teams, and Entra ID as licensed).
Confirm daily job success, retention, and immutability settings in the Veeam service.
Perform and document regular restore tests.
Maintain the Disaster Recovery Plan and Incident Response Plan and lead tabletop reviews with the CFO.
Ensure backup failure alerts reach both the Manager and the Supervisor.
Administer the Cisco Meraki MX105 firewall and related Meraki switching and wireless: policies, VLANs, VPN, content filtering, IDS/IPS, and monitoring alerts to the IS shared mailbox.
Administer Cisco Umbrella DNS security and keep DNS, SPF, DKIM, and DMARC records accurate with the domain registrar.
Lead Microsoft Intune for device enrollment, configuration baselines, patching, and application deployment across Windows and macOS endpoints.
Oversee Microsoft 365 tenant health, licensing, shared mailboxes, SharePoint sites, and the internal IT ticketing site.
Support museum line-of-business systems in partnership with department owners (including Blackbaud, POS/retail, telephony, Adobe, and related SaaS).
Set the IS roadmap so technology supports museum operations, exhibitions, and visitor services.
Write and maintain IS procedures, runbooks, and the asset/license inventory.
Manage vendor relationships and contracts for Microsoft, Cisco/Meraki, Proofpoint (and its reseller), Veeam, Keeper, and other IS providers.
Track renewals, invoices, and service performance.
Manage the IS budget, purchases, and hardware refresh cycles.
Lead change control for firewall, identity, email, and backup changes.
Schedule disruptive work outside public hours when possible.
Provide high-tier support alongside the Supervisor and communicate status to museum leadership in plain language.
Use PowerShell and similar automation to reduce repetitive work (licensing reports, offboarding, Intune tasks).
Prepare materials the CFO needs for cyber-insurance renewals and audits, based on the tools actually in production.
Prioritize and delegate in a small team; finish the work that cannot wait.
Communicate clearly with executives, curators, visitor services staff, and vendors.
Attend leadership, finance, and facilities meetings as required.
Follow and enforce all San Antonio Museum of Art policies.
Maintain professional on-site presence for hardware, network, and exhibition-support work.