Want to know if this job is worth applying to?
Town of Hyde Park, New York, United States
Hybrid
As IT Manager, you will own Generate’s IT infrastructure end to end. You will run our Microsoft Azure environment, our Microsoft 365 and identity platform, our office networks, and our endpoint and security tooling — and you will own the vendors and partners who sit alongside them. This is a hands-on role: there are no direct reports today, and the person in this seat is expected to be in the systems, not just above them. It is also a broad one, spanning desktop to server to cloud to physical network infrastructure to cybersecurity. Our third-party support partner owns day-to-day end-user support, and you are their Tier 3 escalation point and the person who holds them to account. You are equally comfortable in the Azure portal, in a firewall configuration, and in a vendor review, and you can move between them without losing the thread.
What you will be doing at Generate Capital as the IT Manager:
Own Generate’s Microsoft Azure environment end to end, including virtual networking, virtual machines, storage, backup, monitoring, patching, and cost management.
Administer and continuously improve our Microsoft 365 and identity platform, including Entra ID, Exchange Online, SharePoint, Teams, conditional access, MFA, and license management.
Own endpoint management and hygiene across Windows and macOS through Intune and MDM tooling — compliance policies, configuration profiles, patching, imaging, and application lifecycle.
Own cybersecurity operations and controls, including endpoint detection and response, vulnerability and patch management, email security, data protection, and identity security, working alongside our managed security partner.
Design, deploy, and maintain office network infrastructure across our locations, including Ubiquiti switching and wireless, firewalls, VPN, and Azure networking.
Serve as the Tier 3 escalation point for our third-party support partner, who owns day-to-day end-user support, and manage that relationship across SLAs, escalations, quality, and scope.
Own the IT infrastructure roadmap and budget, and make the build-versus-buy and vendor-versus-in-house calls that go with it.
Partner with the Vice President, Data & Technology on planning, spend, and the sequencing of infrastructure investment.
Manage IT vendors and third parties, including our AV and conference room support partner, and own the technical side of vendor evaluation, onboarding, performance, and oversight.
Administer core business applications including Slack and the Microsoft platform, and support the evaluation and rollout of new tools as the business adopts them.
Support IT controls and evidence in service of audit, cyber-insurance, and regulatory requirements, partnering closely with Compliance and our security partner.
Automate and script routine provisioning, maintenance, and reporting tasks using PowerShell and native Microsoft tooling.
Actively create and maintain documentation of our systems, configurations, and runbooks.
Provide hands-on support to Generate’s userbase where senior expertise or escalation is genuinely required, including executive support.
Candidate qualifications & core characteristics:
A demonstrated passion for, or commitment to, our mission.
7-10 years of progressive experience across IT infrastructure, systems engineering, and IT operations, including time as the senior technical owner of an environment.
Deep, hands-on experience administering Microsoft Azure, including virtual networking, compute, storage, backup, and native security services.
Deep, hands-on experience across the Microsoft 365 and identity stack, including Entra ID, Exchange Online, SharePoint, Teams, conditional access, and Intune.
Practical experience running Windows Server and Active Directory in a hybrid environment.
Working knowledge of office networking, including switching, wireless, VLANs, DNS, DHCP, VPN, and firewall administration; hands-on Ubiquiti experience is a plus.
Demonstrated ownership of cybersecurity operations and controls, including EDR (CrowdStrike or comparable), vulnerability management, and identity security.
A track record of managing third-party providers and MSPs — holding them to their SLAs, escalating effectively, and knowing when a partner needs to change.
Comfort operating as a hands-on individual contributor with broad ownership and no team beneath you.
Scripting and automation ability, particularly PowerShell.
Experience in financial services, investment management, or another regulated environment is advantageous.
Azure certifications (AZ-104, AZ-500) or comparable Microsoft certifications are preferred.
Ability to organize time and prioritize tasks independently.
Unimpeachable integrity and glowing references.
Outstanding communication and interpersonal skills, including empathy, intuition, and listening as well as strong writing and documentation skills.
High level of self-awareness and humility, with excitement about confronting uncomfortable situations or new challenges.
Intellectual agility, curiosity, and creativity; problem-solving is your default mode.
Entrepreneurial spirit: flexibility, comfort with risk, recognition that “perfect can be the enemy of the good”.
Generate’s compensation packages are dependent on the facts and circumstances of each case. Salary decisions take into account a wide variety of factors including, but not limited to: skill sets, experience and training, licensure and certifications, geographic location, and other business and organizational needs. A reasonable estimate of the base salary range for this role is $160,000 - $190,000. In addition, the compensation package may include a discretionary bonus and other benefits, including health care benefits, retirement benefits, benefits permitting paid days off (including sick leave, parental leave, and paid time off or vacation benefits), and other benefits that must be reported for federal tax purposes. It is not typical for an individual to be hired at the top of this range.
Generate Capital is an equal opportunity employer and does not discriminate against otherwise qualified applicants on the basis of actual or perceived race, color, creed, religion, ancestry, citizenship status, age, sex, marital status, sexual orientation, gender identity, national origin, disability or handicap, veteran status, or any other characteristic protected by applicable federal, state, or local laws.
