Information Technology Manager

Pava Applications International Corporation•San Diego, CA

20d•$125,000 - $145,000•Onsite

About The Position

The Information Technology Manager is a primarily hands-on execution role and is responsible for the day-to-day aspects of IT infrastructure, security, and operations to support the company’s SaaS environment. This role involves managing technology projects, maintaining system performance, ensuring compliance with security standards, and collaborating with cross-functional teams to align IT strategies with business objectives. The ideal candidate enjoys being involved in the details, troubleshooting issues, and ensuring systems run smoothly on a daily basis.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field preferred
Equivalent combination of hands-on experience and technical leadership will be considered
7–10 years of progressive, hands-on IT experience with direct ownership of infrastructure, networking, and security — not just participation
Experience operating day-to-day IT operations in a small or mid-sized company (highly preferred)
Demonstrated success leading and developing at least one direct report IT team member
Demonstrated success owning IT operations end-to-end (not just participating), including security, uptime, and incident response
Experience partnering with various teams to support deployments, troubleshoot production issues, and improve system reliability
Strong background in incident response, disaster recovery, and business continuity planning
Experience managing multi-site network environments and secure infrastructure
Prior experience with vendor management and cost optimization
Windows Server administration and Active Directory (domain health, group policy, and access controls)
Microsoft Exchange Server in a DAG configuration
Enterprise virtualization platform administration (installation, patching, and troubleshooting in production)
SAN storage management (installation, patching, and health monitoring)
Backup and disaster recovery — job creation, immutable target management, and restore execution (Veeam or equivalent)
Network architecture including routing, switching, VLANs, and DMZ design across multi-site environments
Enterprise next-generation firewall administration (policy management, VPN configuration, and threat monitoring)
Web application firewall (WAF) configuration and ongoing policy management
Site-to-site VPN tunnel configuration and zero-trust remote access administration
DNS administration and complex network connectivity troubleshooting
Endpoint security, email threat protection, and intrusion detection/prevention tooling
Patch management and structured vulnerability remediation processes
Data Loss Prevention (DLP) policy configuration and incident management
ITSM platform experience (log management, network monitoring, and endpoint management tools)
Security event monitoring, alert triage, and structured incident response documentation
Experience supporting or operating within a SOC 2 or similar compliance framework
Ability to lead, direct, and develop a small IT team while remaining a hands-on technical contributor
Clear, direct communicator and able to translate complex technical issues for non-technical business owners and department leads
Comfortable reporting directly to ownership and operating with a high degree of autonomy and accountability
Discreet and trustworthy and able to handle sensitive business information and privileged system access with professionalism
Organized self-starter and able to manage competing priorities, shifting timelines, and unexpected incidents without losing sight of planned work
Strong problem-solving instincts finding the root cause, not just the symptom
Project management discipline and able to scope, plan, and deliver IT initiatives on time and within budget
Financial literacy for IT and comfortable tracking and justifying expenditures, and identifying cost-saving opportunities

Nice To Haves

Microsoft certification aligned to messaging or infrastructure strongly valued given the Exchange DAG requirement
Security or networking certifications (ex. CISSP, Security+, Network+, ITIL)
Microsoft Azure — administration and hybrid identity/connectivity Preferred
AWS or other cloud platform familiarity

Responsibilities

Lead, coordinate, and provide day-to-day direction to one direct report (small team)
Assign and prioritize tasks between yourself and your direct report based on skill set and workload
Serve as the primary technical escalation point for your direct report
Provide informal coaching and support the professional development of your teammate
Report directly to business ownership on all IT operations, projects, and incidents
Manage and maintain our virtualized server environment (installation, patching, and troubleshooting end to end)
Create, monitor, and verify backup jobs including immutable on-premises and cloud-based targets; execute restores when needed
Maintain SAN storage environment including installation, patching, and ongoing health monitoring
Administer Windows Server and Active Directory domain — group policies, access controls, and overall domain health
Maintain and update network diagrams, runbooks, and IT documentation on an ongoing basis
Administer identity, access management, endpoint management, and self-service tools
Manage, maintain, and support our on-premises Microsoft Exchange Server environment in a production DAG configuration
Monitor DAG replication health, mailbox database copies, and failover readiness; perform and validate failover testing
Perform Exchange upgrades, cumulative update (CU) patching, and capacity planning
Troubleshoot mail flow, transport rules, connectors, and delivery issues end-to-end
Manage email security including anti-spam, antivirus, and email threat protection policies
Maintain Exchange integration with Active Directory including recipient management and address policies
Manage and support VoIP/cloud phone system provisioning and troubleshooting for staff
Own firewall policy management, VPN administration, and network threat monitoring across the environment
Manage and maintain web application firewall (WAF) environments protecting externally facing systems
Configure and maintain switching infrastructure across sites (routing, VLANs, network segmentation, and DMZ design)
Maintain wireless access infrastructure and ensure secure, reliable connectivity
Administer zero-trust VPN access and manage site-to-site tunnel configurations
Manage and apply security patches across servers and endpoints on a defined cadence
Monitor and respond to security events using our ITSM and log management platform; investigate incidents and take corrective action
Maintain endpoint protection, email security filtering, and intrusion detection tooling
Administer and maintain our cloud infrastructure environment (Microsoft Azure experience highly preferred)
Support hybrid identity and connectivity between on-premises and cloud environments
Own and execute IT projects including hardware/software upgrades and system improvements (from scoping to delivery)
Build, maintain, and regularly test our disaster recovery plan; lead incident response when issues arise
Manage the IT operations and track expenses, optimize costs, and prepare reports for ownership
Own vendor relationships and contracts from renewals, negotiations, and day-to-day coordination
Work cross-functionally with team management to understand technology needs and deliver practical solutions
Contribute to long-term IT planning in support of business growth
Other duties as assigned.

Benefits

Competitive salary range: $125,000-$145,000 per year DOE
401K Retirement with a generous 6% employer match – 100% vested immediately
Medical Coverage (HMO & PPO options) – 100% paid by employer for employee and their dependents
Employer-paid life insurance
Dental and Vision coverage
Vacation Hours
Paid Holidays
Sick Leave
Wellness Program including weekly chair massage and in-office gym
Training and advancement opportunities
Company-provided daily office snacks
Dog-friendly office