IT Director

Southwest Womens Oncology/Optimum•Albuquerque, NM

8d•Onsite

About The Position

Every clinical encounter, every administrative workflow, every patient communication depends on technology that works - securely and reliably. Across a multi-entity platform, the IT infrastructure that holds everything together is complex, compliance-critical, and mission-essential. When it runs well, the clinical team focuses on patients. When it doesn't, everyone feels it. The IT Director is the person who makes sure it runs smoothly. This is a senior role with full ownership of network infrastructure, systems administration, endpoint management, security, compliance, and the full suite of technology that powers the Optimum platform. We hire for attitude and aptitude above all else. Credentials matter, but who you are and how you grow matter more. Southwest Women's Oncology (SWWO) is New Mexico's leading gynecologic oncology practice, delivering advanced cancer care with skill, courage, and compassion. Optimum Human and Optimum Infusion extend that mission into performance medicine, infusion services, longevity, recovery, hormone optimization, medical weight loss, peptide therapies, hyperbaric medicine, aesthetics, and human performance. Together, we operate as a single integrated platform committed to one mission: To deliver new possibilities in medical care, human performance, and health by uniting passion, knowledge, and skill. The IT Director serves as the senior network administrator, systems administrator, and asset manager for the Optimum platform - owning the full technology stack across SWWO, Optimum Infusion, and Optimum Human, as well as IT support for the Optimum Coworking facility. This is a hands-on leadership role. You will be the architect, administrator, and first responder for a complex, compliance-driven IT environment that includes a Windows domain, enterprise networking, VoIP, physical and virtual servers, cloud platforms, endpoint management, and HIPAA- and PCI-regulated systems. You will work closely with: Executive and operational leadership on IT strategy, security posture, and technology investment decisions Clinical and administrative department heads on system access, tooling, and workflow support The Web Developer on WP Engine administration, DNS management, and hosting infrastructure Finance on software licensing, vendor invoicing, and IT procurement Coworking tenants on network access, isolated connectivity, and tenant-facing IT support You bring deep technical expertise, a security-first mindset, and the ownership mentality to keep a mission-critical environment running at the standard this organization demands.

Requirements

5+ years of experience in IT infrastructure, systems administration, or network engineering, with demonstrated senior-level ownership.
Hands-on expertise with Windows Server and Active Directory domain administration, including endpoint management, GPO, and least-privilege access structures.
Strong networking fundamentals-enterprise switching, VLANs, subnetting, firewall administration, DHCP, and DNS configuration.
Experience administering Google Workspace including access control, security policies, and group configuration.
VoIP system administration experience, including SIP configuration, IVR design, and hunt group management.
Familiarity with HIPAA technical safeguards, MDM deployment, and endpoint security compliance.
Strong organizational and documentation skills; able to maintain accurate asset inventories, configurations, and compliance records.

Nice To Haves

Experience supporting a healthcare or multi-entity organization with compliance-critical infrastructure.
Familiarity with the specific platforms in use: Fortinet, Ruckus One, Juniper Mist, Atera, Axcient, Bitdefender, or comparable enterprise tools.
Experience with WP Engine, DNS management, and web hosting infrastructure support.
Relevant certifications: CompTIA Network+, Security+, Microsoft Certified, or equivalent.
Proficiency with GoHighLevel or a similar CRM platform, including experience integrating it with other systems across the IT environment.

Responsibilities

Configure and maintain enterprise network switches including cabling, patching, and subnetting across all entities.
Maintain VLAN segmentation to enforce security separation between private clinical networks, administrative networks, and public-facing resources.
Maintain and actively manage firewall appliances - adjusting rules, configuring DHCP and DNS, and managing access to internal and external services.
Provide isolated, bandwidth-managed network access for Optimum Coworking tenants, ensuring complete separation from Optimum Building LLC resources.
Maintain the Windows Domain for Optimum Building LLC and all entities under that umbrella-SWWO, Optimum Infusion, and Optimum Human-including all computer endpoints, printers, network shares, and connected peripheral devices.
Enforce a "connected but separate" and "least privilege" access structure for all files and resources across the domain.
Maintain legacy SQL databases for Lytec.
Manage and configure the Google Workspace suite including access control, data protection, security policies, and email configuration.
Configure and manage Google Groups for both security access management and message delivery including fax routing and critical correspondence.
Administer WP Engine to support the Web Developer - maintaining an accurate site inventory, ensuring backups, and configuring PTR and A records as sites are updated.
Configure and maintain the VoIP-based phone system including SIP interfaces, soft phone access, SIP phone configuration server, line key configuration, and hunt grouping.
Configure IVR automations for intelligent call routing including voicemail access, holiday scheduling, and after-hours routing.
Maintain accurate records of important phone numbers and verify that all routing configurations remain correct and current.
Configure and deploy an MDM solution for managed devices-primarily mobile phones - enforcing HIPAA compliance policies including data encryption and content protection.
Ensure NIST-compliant data destruction for all recycled devices and maintain accurate inventory of recycled and decommissioned assets.
Maintain accurate inventory of all active devices, assignments, and available items across the platform.
Maintain software licensing across the full application portfolio including Adobe, Microsoft Business Applications, RingCentral, Zoom, Axcient, Atera, Thermofisher, LG Cloud Applications, WP Engine, Apple Business, Bitdefender, Ruckus One, Juniper Mist, and Fortinet.
Purchase devices, resources, and supplies to support IT operations within budget and procurement guidelines.
Conduct annual PCI DSS attestation and vulnerability scans for payment systems including Phreesia and POS terminals.
Maintain the IT ticketing system-triaging incoming issues, assigning tickets to the appropriate owner, and ensuring timely resolution.