Network Administrator

Brooklyn Academy Of Music•Brooklyn, NY

6d•Hybrid

About The Position

Brooklyn Academy of Music (BAM) is seeking a Network Administrator to own, configure, and maintain network infrastructure across BAM’s campus locations and the shared network at the L10 Cultural Condo. The role covers physical and wireless networks, firewalls, VPN, network security, remote access, and network connectivity for cinema and AV control systems. The administrator works independently within established policies and architecture guidelines and serves as the primary technical resource for network operations and escalation of network-related issues. Working the second shift, the Network Administrator is the senior on-site technical presence for IT support when leadership and day-shift staff are largely off-site. The role provides technical oversight, decision-making, and escalation support for junior and temporary IT staff, including support for L10 evening and weekend programming. It does not carry supervisory authority or a routine desktop-support or help-desk ticket load. Issues involving architectural changes, cross-domain policy, or organizational impact are escalated to the Director of IT; suspected security incidents are reported immediately to the Cybersecurity Administrator. The position is full-time, exempt, and represented by Local 2110. It is primarily onsite, with occasional flexibility to work remotely as workload allows. Scheduled hours are Wednesday to Sunday, 12 p.m. to 9 p.m., with on-call availability required for critical network incidents outside scheduled hours.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Networking, or a related field, or equivalent professional experience.
Demonstrated hands-on experience administering physical and wireless network infrastructure, including switches, access points, and firewalls.
Working knowledge of Cisco Meraki or an equivalent cloud-managed networking platform.
Experience configuring and managing next-generation firewalls.
Experience with VPN solutions and remote access administration.
Strong analytical and troubleshooting skills, including the ability to diagnose and resolve complex network issues independently.
Ability to work independently as the senior on-site technical resource during evening and weekend hours.
Excellent written and verbal communication skills, including the ability to document technical procedures and prepare reports and recommendations for IT leadership.
Cisco Certified Network Associate (CCNA) or equivalent certification.
Extremely organized, self-motivated, and attentive to detail.
Ability to work under deadlines, multitask, and remain calm and solution-oriented under pressure.

Nice To Haves

Experience with Cisco Meraki and Ubiquiti UniFi, including dashboard administration and policy management.
Experience with WatchGuard firewalls.
Experience supporting networked AV, control, or cinema systems, such as Crestron, digital projection, or AV-over-IP, including TCP and UDP control traffic, multicast, and quality-of-service configuration.
Experience managing shared or multi-tenant network environments with segmentation between organizations.
Familiarity with network security monitoring and threat detection.
Experience managing multi-building or multi-site network environments.
Familiarity with PCI DSS network segmentation requirements.

Responsibilities

Own, configure, and maintain BAM’s physical and wireless network infrastructure across campus buildings and the L10 shared network.
Maintain network connectivity, performance, and security, including switches, access points, firewalls, VPN, and remote access.
Serve as the primary escalation point for network-related issues raised by Tier 1 and Tier 2 roles.
During the second shift, act as the senior on-site technical resource for IT support, resolving general IT issues or routing them to the appropriate domain owner.
Provide technical oversight, decision-making, and escalation support for junior and temporary IT staff working the same shift, without supervisory authority.
Provide on-site technical presence for L10 evening and weekend programming and support partner technology services.
Escalate architectural changes, cross-domain policy decisions, and organizational-impact issues to the Director of IT; follow the Technology Division on-call framework when IT leadership is unavailable.
Report suspected security incidents immediately to the Cybersecurity Administrator.
Maintain network uptime at or above the threshold set by IT leadership; document, investigate, and report unplanned outages within one business day of resolution.
Keep network devices, including Meraki and UniFi switches and access points and Meraki and WatchGuard firewalls, current with firmware and configuration standards; document and report exceptions.
Maintain and test VPN access procedures on the schedule defined by IT leadership, and document and report results.
Prepare networks for scheduled rental and programming events through advance setup, testing, and documented handoff; resolve or escalate issues before event start when lead time allows.
Provide reliable on-site coverage during the scheduled second shift, including L10 evening and weekend programming, and ensure second-shift IT needs across campus and L10 are met or escalated.
Produce quarterly network performance and capacity reports for IT leadership, including remediation or upgrade recommendations where applicable.
Evaluate proposed network infrastructure changes or technologies and prepare written analyses of options, costs, and recommendations before procurement decisions.
Respond to and resolve network alerts and outages within applicable service-level timeframes, logging and documenting incidents.
Maintain network connectivity for cinema and AV control systems so scheduled screenings and performances are not disrupted; resolve or escalate issues before showtime when lead time allows.
Handle L10 partner network requests and incidents within L10 service levels, communicate partner-affecting outages through the L10 Property Manager, and log L10 support activity in Spiceworks for reporting to partners and DCLA.