IT Specialist

Sphere Entertainment Group•Bozeman, MT

1d•Onsite

About The Position

This position is with Advanced Electronic Designs, Inc. (AED), an indirect wholly owned subsidiary of Sphere Entertainment Group, LLC (Sphere). The policies and benefits applicable to employees of AED (and this position) may be different than those applicable to employees of Sphere. Who We Are AED Product Development (AED) is an engineering product design and development firm located in Bozeman, Montana that is a wholly owned subsidiary of Sphere Entertainment Co. AED partnered with Sphere Entertainment in the design, development, engineering, and manufacturing of the groundbreaking Big Sky camera system – an ultra-high resolution camera system and custom content creation tool that was created to capture the stunning images and video required for the world’s highest resolution LED screen at Sphere. AED thrives on solving intricate design challenges and developing innovative solutions for a diverse range of industries and technologies. Our environment is fast-paced and engaging, coupled with a healthy work-life balance and competitive compensation. Due to the hands-on nature of the products we develop, staff are required to be present on campus. When you join our team, you will be part of an exclusive group of forward-thinking engineers developing first-of-kind technologies that make a positive contribution to society. Who You Are You are a proficient IT professional whose technical experience spans from purchasing, programming, installation, to maintenance of hardware platforms ranging from desktop computers to servers. You’re a problem solver who works well as part of a team or as a single point of contact on projects and has a large breadth of IT hardware and software experience. What You’ll Do Network & System Administration Infrastructure Management: Maintain technical responsibility for the entire network topology, including core routing, switching protocols, IP address management (DNS/DHCP) and secure wireless environments. Hybrid Ecosystems: Provide architectural management for mixed Windows and Linux server environments and database platforms (Microsoft SQL, PostgreSQL). Performance Optimization: Evaluate network performance and security audit results, implementing major changes to ensure maximum uptime and ISP stability. Identity Management: Administer On-Prem Active Directory and Entra ID Hybrid integration. Virtualization & DevOps: Optimize XCP-ng/XenServer and virtual desktop environments while supporting the software lifecycle through Docker, SVN, and Git. Multi-Site Connectivity: Architect and maintain secure Site-to-Site VPN tunnels and SD-WAN configurations to ensure seamless, low-latency resource sharing and data synchronization between the main and remote sites. Maintain employee IT security training and monitoring program.

Requirements

Bachelor’s degree in information technology (preferred) or equivalent experience
Five or more years of applicable experience or certifications in the following:
Database Administration Microsoft SQL Sever, MySQL, PostgreSQL
Server Administration Linux & Windows
Virtual desktop environments
Network Administration Infrastructure (IP addressing, DNS, DHCP, switching, routing, access points and WiFi)
Network and fileserver security
Firewall rules, NAT/Port Forwarding
Internet service monitoring and troubleshooting
WireGuard VPN (Site-to-Site and Private)
Cloud Administration Entra ID, Intune, Defender
Office & Cloud Apps Microsoft Active Directory
Microsoft file and print services
Google Workspace
On-Site and Off-Site backups
Facilitate remote workstation access
Setup and maintenance of revision control systems (SVN and GIT)
Setup and maintenance of build servers
Candidates must be able to pass a comprehensive background check due to the nature of AED’s projects and clients.
Must possess a valid driver’s license.

Nice To Haves

AWS, Microsoft Azure, Xen Server/XCP-NG, and Docker (bonus)

Responsibilities

Day-to-day monitoring and maintenance of AED’s IT network to ensure consistent, reliable delivery of service to all end users.
Ensure network and data security best practices are implemented and monitored while ensuring regulatory compliance requirements are met and maintained (NIST-800-171 experience preferred).
Perform work in a manner that causes minimal impact and interruption of service to end users during normal business hours.
Maintain and optimize secure VPN tunnels between the remote and main sites to ensure 100% resource availability.
Configure, maintain, and resolve issues which impact optimum performance of XCP-ng Servers.
Act as the primary technical lead for resolving complex hardware, software, connectivity issues, as well as other types of technological devices as needed for all staff.
Provide consistent follow up with end users in situations where their ability to work has been interrupted or impaired due to network, hardware, and software related issues.
Oversee the full lifecycle of end-user endpoints, including Windows 10/11 and the Microsoft 365 suite.
Manage customer expectations and act as an independent technical authority when dealing with internal users and external vendors.
Develop and interpret technical specifications, maintaining clear records of system modifications and troubleshooting resolutions.
Serve as the primary architect for the organization’s security posture.
Execute robust on-site and off-site backup strategies to ensure data integrity and business recovery.
Safeguard the network perimeter by monitoring secure remote access protocols and strictly enforcing organization-wide access policies.
Monitor firewall performance and activity logs and alerts.
Lead IT projects and coordinate efforts across departments to ensure technical requirements, timelines, and budgets are met.
Maintain and optimize building IoT devices and the Home Assistant environment to ensure seamless automation.