Senior Systems & Networking Administrator

Seattle Art Museum • Seattle, WA

9d • $100,000 - $115,000 • Onsite

About The Position

The Senior Systems & Networking Administrator is SAM’s infrastructure lead — designing, deploying, securing, and maintaining the museum’s servers, network, backups, and server rooms across all three sites (SAM Downtown, the Seattle Asian Art Museum at Volunteer Park, and the Olympic Sculpture Park). The environment supports approximately 400 staff and includes roughly 60 virtual servers on a six-node Hyper-V cluster, Windows and Linux systems, enterprise firewalls and switching, wireless across three public-facing sites, and the server-side infrastructure behind SAM’s ticketing, CRM, and collections platforms.
This is a backfill for a colleague retiring after more than twenty years in the role, serving as SAM’s sole systems administrator for most of that tenure. Much of the environment was personally architected by that colleague and is documented tersely or not at all. The person in this role should expect to take ownership of production infrastructure early, learn a complex environment quickly and largely independently, and — critically — rebuild the institutional knowledge that is departing with them so that SAM is never again dependent on a single person.
Two responsibilities distinguish this role from a standard senior administrator posting. First, it is the technical mentor to SAM’s Junior Systems & Networking Administrator, who is early in that role and actively growing into it; developing that colleague is a core, ongoing duty and not an occasional courtesy. Second, it is accountable for documentation and knowledge continuity as a deliverable in its own right, not as cleanup work that happens when there is time.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent combination of education and experience
• 5+ years of progressive experience in systems and network administration, including server administration (Windows Server, Linux) and enterprise networking
• Demonstrated experience administering server virtualization at production scale (Hyper-V, VMware, or comparable), including clustered hosts and shared storage
• Demonstrated experience administering firewalls and VPNs (enterprise platform; SAM’s estate is being consolidated — platform-transferable skill is more important than a specific vendor)
• Demonstrated experience with enterprise switching and wireless (Juniper/Mist or a comparable platform)
• Experience owning enterprise backup and disaster recovery — not only configuring backups but testing and performing restores against defined recovery objectives
• Experience with Microsoft 365 / Entra ID administration and hybrid identity
• Demonstrated ability to become productive quickly in an unfamiliar, lightly documented environment: to read an existing system, form an accurate picture of it, and take safe ownership without a lengthy ramp or a predecessor to consult
• Demonstrated experience mentoring or developing a more junior technical colleague — for example, structured onboarding, deliberate cross-training, or growing someone into greater ownership. Candidates should be prepared to speak to this specifically
• A track record of producing durable documentation — runbooks, diagrams, procedures — that other people actually used
• Strong troubleshooting and project management skills; able to lead infrastructure projects from scoping through completion
• Ability to communicate technical concepts clearly and respectfully to non-technical colleagues at all levels of the organization
• Ability to work independently, exercise sound judgment, and prioritize a varied workload with minimal supervision
• Ability to participate in an on-call rotation, including evenings and weekends as needed
• Ability to pass and maintain security background check clearance

Nice To Haves

• Experience in a museum, library, archive, performing arts organization, or other nonprofit or cultural institution — or comparable experience working within constrained budgets, mission-driven priorities, and multi-stakeholder decision making
• Experience as the sole or primary administrator for an environment, with the accompanying breadth and ownership
• Experience supporting Tessitura or another PCI-scoped CRM/ticketing platform
• Experience supporting collections management or digital asset systems (TMS, eMuseum, or comparable)
• Industry certifications such as CompTIA Network+/Security+, Microsoft Certified: Azure Administrator, Juniper JNCIA/JNCIS, or firewall vendor certifications
• Experience with Cloudflare or a similar CDN/WAF platform
• Experience with endpoint management platforms (Intune/Autopilot)
• Experience supporting an organization through a significant on-premises to cloud migration

Responsibilities

• Administer and maintain on-premises servers (HPE hardware, Windows Server, Linux) supporting museum-wide applications and file services
• Administer the virtualization platform: approximately 60 virtual guests on a six-node Hyper-V cluster, including host maintenance, patching, capacity, and clustered storage
• Manage server-side infrastructure for Tessitura (ticketing/CRM) and support the Tessitura RAMP cloud migration
• Plan and execute server refresh and capacity projects, including the current server room UPS replacement
• Administer core identity and directory services (Active Directory, Microsoft 365/Entra ID) in coordination with the Director of Technology
• Own the backup and recovery stack end to end (on-premises backup plus cloud/offsite copies); test restores on a defined schedule and be able to meet documented recovery time objectives
• Design, configure, and maintain the museum’s network: enterprise firewalls and VPN, Juniper switching, and Mist wireless across all three sites, including public visitor WiFi
• Lead network infrastructure projects such as the multi-year switch replacement and internet redundancy (dual-ISP failover) initiatives
• Administer Cloudflare for WAF/DDoS/bot protection on public-facing web properties
• Monitor logs, alerts, and security tooling (SIEM, EDR/MDR); investigate and remediate incidents; support penetration testing and vulnerability remediation
• Maintain network documentation, diagrams, and access controls; enforce least-privilege and security best practices
• Manage certificate lifecycle, VLAN design, and segmented networks for vendors, events, and specialty gallery systems
• Serve as the day-to-day technical mentor to the Junior Systems & Networking Administrator, who is newer to the role and still developing senior-level infrastructure skills
• Provide structured, hands-on skill development — shadowing, paired troubleshooting, and supervised ownership of real work — across virtualization, backup and recovery, firewall and switching administration, and alert triage
• Build and maintain the operational record the department currently lacks: runbooks and standard operating procedures, network and system diagrams, a credential inventory, an asset register, and a vendor contract and renewal calendar
• Ensure no critical recovery or maintenance task has only one capable owner; deliberately cross-train so that infrastructure knowledge is held by the department rather than by an individual
• Maintain disaster recovery and business continuity documentation and validate it against actual recovery testing
• Serve as senior escalation for the help desk and junior systems staff, using escalations as teaching opportunities where practical
• Serve as point person on infrastructure capital projects (switch replacement, UPS replacement, internet redundancy, five-year hardware replacement plan): scoping, budgeting, and managing vendor relationships
• Partner with the Director of Technology on technology budget planning and purchasing recommendations for infrastructure
• Manage vendor and carrier relationships directly — quotes, support contracts, renewals, escalations, and invoice review — and track license and support expirations proactively
• Sequence maintenance and project work around the museum’s exhibition, event, and public-hours calendar in coordination with affected departments
• Proactively monitor server, network, and backup health using existing alerting and monitoring tools; investigate anomalies before they become outages
• Maintain and manage physical server rooms (power, cooling, cabling, UPS) across all sites, including regular physical inspection
• Participate in the on-call rotation for after-hours infrastructure issues
• Coordinate with vendors and contractors (ISPs, hardware vendors, MSPs) on maintenance, repairs, and support tickets
• Account management across core systems (AD, Tessitura, Microsoft 365, SaaS applications)
• Support museum-wide technology initiatives and construction/renovation projects as needed
• Participate in intentional learning efforts, including events relating to understanding institutional racism, building cultural competency, and exhibiting a commitment to Equity, Diversity, Inclusion, Accessibility, and Belonging

Benefits

• Fully employer paid HMP medical plan or an employee contribution PPO plan
• Dental insurance
• Vision insurance
• Basic life insurance/LTD/AD&D
• Flexible Spending Account
• Short Term Disability
• Supplemental Dental Insurance
• Participation in SAM’s 403b retirement plan
• Discretionary 3% employer contribution to retirement plan (after 1 year of service and 1,000 hours worked)
• Employer match program for retirement plan
• Paid time off for vacation
• Paid time off for PSST
• Bereavement leave
• Jury duty leave
• 11 scheduled holidays
• 1 paid floating holiday
• Subsidized unlimited Orca card
• Onsite fitness facility
• Employee Assistance Program (EAP)
• Patron level membership to SAM (for FT Staff)
• Tier III membership to the American Alliance of Museums (for FT Staff)
• Discounts to museum shop and programming (for FT Staff)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior