Network Administrator

BROOKLYN ACADEMY OF MUSIC INC•New York, NY

7d•$85,000 - $95,000•Hybrid

About The Position

Brooklyn Academy of Music (BAM) is seeking a Network Administrator to own, configure, and maintain its network infrastructure across campus locations, including the shared network at the L10 Cultural Condo, partner organizations, common areas, and remote access. The role covers physical and wireless networks, switches, access points, firewalls, VPN, and network security. It operates independently within established policies and architecture guidelines and serves as BAM’s primary technical resource for network operations. The position works second shift, Wednesday through Sunday, from 12 p.m. to 9 p.m. During those hours, the Network Administrator is the senior on-site IT technical resource, providing technical oversight, decision-making, and escalation support to junior and temporary IT staff. The role also provides on-site technical presence for L10 evening and weekend programming. It is not a primary desktop-support or help desk queue position and does not include supervisory authority; help desk staff scheduling and performance evaluation remain with the Associate Director of IT. The Network Administrator is the primary escalation point for network issues raised by Tier 1 and Tier 2 staff, and the senior on-site escalation point for general IT issues outside standard business hours. Issues involving architectural changes, cross-domain policy decisions, or organizational impact are escalated to the Director of IT. Suspected security incidents are reported immediately to the Cybersecurity Administrator. The role also supports network connectivity for cinema and AV control systems and responds to L10 partner requests and incidents. The position is primarily onsite, with occasional flexibility to work remotely as workload allows. On-call availability is required for critical network incidents outside scheduled hours. Regular movement across BAM campus buildings and L10 spaces is expected, as is work in network closets and equipment rooms. The position may require lifting up to 60 pounds.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Networking, or a related field, or equivalent professional experience.
Hands-on experience administering physical and wireless network infrastructure, including switches, access points, and firewalls.
Working knowledge of Cisco Meraki or an equivalent cloud-managed networking platform.
Experience configuring and managing next-generation firewalls.
Experience with VPN solutions and remote-access administration.
Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex network issues independently.
Ability to work independently as the senior on-site technical resource during evening and weekend hours.
Excellent written and verbal communication skills, including the ability to document technical procedures and produce reports and recommendations for IT leadership.
Cisco Certified Network Associate (CCNA) certification or equivalent certification.
Extremely organized, self-motivated, and attentive to detail.
Ability to work under deadlines, multitask, and remain calm and solution-oriented under pressure.
Ability to lift up to 60 pounds and work in network closets and equipment rooms across campus buildings.

Nice To Haves

Experience with Cisco Meraki and Ubiquiti UniFi, including dashboard administration and policy management.
Experience with WatchGuard firewalls.
Experience supporting networked AV, control, or cinema systems, such as Crestron, digital projection, or AV-over-IP, including TCP and UDP control traffic, multicast, and quality-of-service configuration.
Experience managing shared or multi-tenant network environments with segmentation between organizations.
Familiarity with network security monitoring and threat detection.
Experience managing multi-building or multi-site network environments.
Familiarity with PCI DSS network segmentation requirements.

Responsibilities

Own, configure, and maintain BAM’s physical and wireless network infrastructure across campus buildings, L10 shared and partner environments, common areas, and remote access.
Maintain and secure network devices, including switches, access points, firewalls, and VPN services, in accordance with current firmware and configuration standards.
Maintain network uptime and connectivity, troubleshoot and resolve network issues, and document outages, root causes, incidents, and resolutions.
Serve as the primary escalation point for network issues raised by Tier 1 and Tier 2 staff.
Provide senior on-site technical coverage and escalation support to junior and temporary IT staff during second shift, including L10 evening and weekend programming.
Resolve or route general IT support issues arising outside standard business hours, escalating architectural, cross-domain, or organizational matters as appropriate.
Report suspected security incidents to the Cybersecurity Administrator immediately and follow the Technology Division on-call framework when IT leadership is unavailable.
Maintain and test VPN access procedures on a schedule defined by IT leadership.
Ensure network readiness for scheduled rental and programming events through advance setup, testing, and documented handoff of event requirements.
Maintain network connectivity for cinema and AV control systems so scheduled screenings and performances are not disrupted.
Handle L10 partner network requests and incidents within applicable service levels and communicate partner-affecting outages through the L10 Property Manager.
Log L10 support activity in Spiceworks to support reporting to L10 partners and DCLA.
Produce quarterly network performance and capacity reports for IT leadership, including recommendations for remediation or upgrades where applicable.
Evaluate proposed network infrastructure changes and technologies, providing written analysis of options, costs, and recommendations before procurement decisions.
Respond to network alerts and outages within IT service-level timeframes and ensure incidents are logged and documented.