IT Director

About the role

The IT Director serves as the senior network administrator, systems administrator, and asset manager for the Optimum platform - owning the full technology stack across SWWO, Optimum Infusion, and Optimum Human, as well as IT support for the Optimum Coworking facility.

Responsibilities

• Configure and maintain enterprise network switches including cabling, patching, and subnetting across all entities.

• Maintain VLAN segmentation to enforce security separation between private clinical networks, administrative networks, and public-facing resources.

• Maintain and actively manage firewall appliances - adjusting rules, configuring DHCP and DNS, and managing access to internal and external services.

• Provide isolated, bandwidth-managed network access for Optimum Coworking tenants, ensuring complete separation from Optimum Building LLC resources.

• Maintain the Windows Domain for Optimum Building LLC and all entities under that umbrella-SWWO, Optimum Infusion, and Optimum Human-including all computer endpoints, printers, network shares, and connected peripheral devices.

• Enforce a "connected but separate" and "least privilege" access structure for all files and resources across the domain.

• Maintain legacy SQL databases for Lytec.

• Manage the Google Workspace suite including access control, data protection, security policies, and email configuration.

• Administer WP Engine to support the Web Developer - maintaining an accurate site inventory, ensuring backups, and configuring PTR and A records as sites are updated.

• Configure and maintain the VoIP-based phone system including SIP interfaces, soft phone access, SIP phone configuration server, line key configuration, and hunt grouping.

• Configure and maintain the VoIP-based phone system including SIP interfaces, soft phone access, SIP phone configuration server, line key configuration, and hunt grouping.

• Administer VoIP automations for intelligent call routing including voicemail access, holiday scheduling, and after-hours routing.

• Maintain accurate records of important phone numbers and verify that all routing configurations remain correct and current.

• Configure and deploy an MDM solution for managed devices-primarily mobile phones - enforcing HIPAA compliance policies including data encryption and content protection.

• Ensure NIST-compliant data destruction for all recycled devices and maintain accurate inventory of recycled and decommissioned assets.

• Maintain accurate inventory of all active devices, assignments, and available items across the platform.

• Maintain software licensing across the full application portfolio including Adobe, Microsoft Business Applications, RingCentral, Zoom, Axcient, Atera, Thermofisher, LG Cloud Applications, WP Engine, Apple Business, Bitdefender, Ruckus One, Juniper Mist, and Fortinet.

• Purchase devices, resources, and supplies to support IT operations within budget and procurement guidelines.

• Conduct annual PCI DSS attestation and vulnerability scans for payment systems including Phreesia and POS terminals.

• Maintain the IT ticketing system-triaging incoming issues, assigning tickets to the appropriate owner, and ensuring timely resolution.

Requirements

• 5+ years of experience in IT infrastructure, systems administration, or network engineering, with demonstrated senior-level ownership.

• Hands-on expertise with Windows Server and Active Directory domain administration, including endpoint management, GPO, and least-privilege access structures.

• Strong networking fundamentals-enterprise switching, VLANs, subnetting, firewall administration, DHCP, and DNS configuration.

• Experience administering Google Workspace including access control, security policies, and group configuration.

• VoIP system administration experience, including SIP configuration, IVR design, and hunt group management.

• Familiarity with HIPAA technical safeguards, MDM deployment, and endpoint security compliance.

• Strong organizational and documentation skills; able to maintain accurate asset inventories, configurations, and compliance records.

Preferred

• Experience supporting a healthcare or multi-entity organization with compliance-critical infrastructure.

• Familiarity with the specific platforms in use: Fortinet, Ruckus One, Juniper Mist, Atera, Axcient, Bitdefender, or comparable enterprise tools.

• Experience with WP Engine, DNS management, and web hosting infrastructure support.

• Relevant certifications: CompTIA Network+, Security+, Microsoft Certified, or equivalent.

• Proficiency with GoHighLevel or a similar CRM platform, including experience integrating it with other systems across the IT environment.