INFORMATION SYSTEMS MANAGER

Title: Information Systems Manager

Department: Information Systems

Reports To: CFO

Supervises: Information Systems Supervisor

Job Type: Full-Time | Exempt

The Information Systems Manager leads SAMA’s internal Information Systems function, and this is a hands-on manager role in a two-person department. The Manager sets IS strategy, owns security and business continuity, administers the museum’s production platforms, and delivers reliable support to staff while mentoring the IS Supervisor.

The role is accountable for a cloud-first environment built around Microsoft 365, Microsoft Defender, Cisco Meraki networking, Proofpoint email security, Veeam backup for Microsoft 365, Microsoft Intune device management, and Keeper for privileged credential management. The Manager must be able to operate these systems directly, not only supervise them. Microsoft Defender for Endpoint and Microsoft Defender for Office 365 are the museum’s primary endpoint detection, response, and Microsoft 365 threat-protection platforms.

Responsibilities and Duties:

Supervisory Responsibilities:

• Supervise, coach, and develop the Information Systems Supervisor, including work assignment, knowledge transfer, and performance feedback.
• Set daily and weekly priorities so the two-person team can cover help desk, infrastructure, and security without an external MSP.
• Serve as the final internal escalation point for complex technical and security issues.
• Cover Supervisor duties during absence, peak periods, and incidents.

Essential Responsibilities:

The duties below represent the majority of time in this position. Management may assign related work as needed.

Security, identity, and access

• Own secure access across Microsoft Entra ID, Cisco Duo MFA, Cisco AnyConnect VPN, and the Meraki MX105 firewall.
• Administer Keeper as the museum’s official password and secrets vault. Enforce vault hygiene, role-based sharing, emergency access, and rotation of privileged credentials. Personal or unofficial password stores are not permitted for museum systems.
• Design and run staff security-awareness programs using Proofpoint Essentials (phishing simulations, training assignments, and reporting).
• Administer Microsoft Defender for Endpoint and Microsoft Defender for Office 365: onboarding devices, attack-surface reduction, alert triage, device isolation, investigation in the Microsoft Defender portal, Secure Score improvement, and coordination with Intune compliance policies.
• Monitor threats using Microsoft Defender as the primary console, supplemented by Cisco Umbrella, Proofpoint, and Meraki security logs. Investigate and remediate alerts with the Supervisor.
• Identify and prioritize infrastructure and endpoint risks for remediation. Coordinate patching through Intune and Defender recommendations. An external vulnerability-scanning platform is not in the current stack; the Manager uses Defender threat and vulnerability management, Intune compliance, Meraki logs, and vendor advisories.
• Enforce the museum’s Acceptable Use, Incident Response, and Data Management policies.

Backup, recovery, and resilience

• Oversee Veeam backup of Microsoft 365 (Exchange, OneDrive, SharePoint, Teams, and Entra ID as licensed). Confirm daily job success, retention, and immutability settings in the Veeam service.
• Perform and document regular restore tests. Maintain the Disaster Recovery Plan and Incident Response Plan and lead tabletop reviews with the CFO.
• Ensure backup failure alerts reach both the Manager and the Supervisor. Do not rely on a separate object-storage vendor; backup storage is part of the Veeam cloud service.

Infrastructure and platforms

• Administer the Cisco Meraki MX105 firewall and related Meraki switching and wireless: policies, VLANs, VPN, content filtering, IDS/IPS, and monitoring alerts to the IS shared mailbox.
• Administer Cisco Umbrella DNS security and keep DNS, SPF, DKIM, and DMARC records accurate with the domain registrar.
• Lead Microsoft Intune for device enrollment, configuration baselines, patching, and application deployment across Windows and macOS endpoints.
• Oversee Microsoft 365 tenant health, licensing, shared mailboxes, SharePoint sites, and the internal IT ticketing site.
• Support museum line-of-business systems in partnership with department owners (including Blackbaud, POS/retail, telephony, Adobe, and related SaaS). IS owns access, integration, and vendor coordination; departments own functional configuration.

Operations, vendors, and governance

• Set the IS roadmap so technology supports museum operations, exhibitions, and visitor services.
• Write and maintain IS procedures, runbooks, and the asset/license inventory.
• Manage vendor relationships and contracts for Microsoft, Cisco/Meraki, Proofpoint (and its reseller), Veeam, Keeper, and other IS providers. Track renewals, invoices, and service performance.
• Manage the IS budget, purchases, and hardware refresh cycles.
• Lead change control for firewall, identity, email, and backup changes. Schedule disruptive work outside public hours when possible.
• Provide high-tier support alongside the Supervisor and communicate status to museum leadership in plain language.
• Use PowerShell and similar automation to reduce repetitive work (licensing reports, offboarding, Intune tasks).
• Prepare materials the CFO needs for cyber-insurance renewals and audits, based on the tools actually in production.

Current Environment:

Candidates should expect to work hands-on with the following production stack. Tools not listed are not part of the current environment.

• Microsoft 365, Entra ID, Intune, Microsoft Defender for Endpoint, and Microsoft Defender for Office 365 (primary endpoint EDR and Microsoft 365 threat protection)
• Cisco Meraki MX105 firewall, Meraki switching/wireless, Cisco Umbrella, Cisco Duo, Cisco AnyConnect
• Proofpoint Essentials (email security, DLP, encryption, continuity, awareness training)
• Veeam Backup for Microsoft 365 / Veeam Data Cloud
• Keeper (enterprise password and secrets management)
• Microsoft SharePoint (ticketing and knowledge base)

This role does not administer Qualys, Arctic Wolf, Wasabi, or 1Password. Do not list those products as required experience.

Supportive Functions:

• Prioritize and delegate in a small team; finish the work that cannot wait.
• Communicate clearly with executives, curators, visitor services staff, and vendors.
• Attend leadership, finance, and facilities meetings as required.
• Follow and enforce all San Antonio Museum of Art policies.
• Maintain professional on-site presence for hardware, network, and exhibition-support work.

Education, Experience, and Skills:

• Five or more years of professional IT experience with systems administration, networking, and Microsoft 365 in a cloud-first or hybrid environment.
• Two or more years of supervisory, team-lead, or project-management experience. Direct supervision of helpdesk or desktop staff is preferred.
• Hands-on administration of Microsoft Defender for Endpoint and/or Defender for Office 365 (alert triage, investigation, device actions). Also expected: Meraki or equivalent firewall, Microsoft Intune, Proofpoint or equivalent email security gateway, Veeam or equivalent SaaS backup, and an enterprise password vault (Keeper preferred).
• Working knowledge of identity and access: Entra ID, MFA, VPN, least-privilege admin roles, and joiner/mover/leaver processes.
• Ability to restore Microsoft 365 data from backup and to explain restore results to non-technical leadership.
• Proficiency with Windows and macOS support and with PowerShell or similar automation.
• Strong written and verbal communication; able to translate firewall, backup, and identity topics for staff and the CFO.
• Microsoft 365 Certified: Security Administrator, Endpoint Administrator, CompTIA Security+, or Cisco Meraki credentials are advantageous. CompTIA A+ alone is not sufficient for this level.
• Museum, nonprofit, or cultural-institution experience is helpful but not required.

Working Conditions and Requirements:

• Primarily on site at the museum, with occasional after-hours or weekend work for cutovers, incidents, and exhibition openings.
• Must be able to lift and move typical IT equipment (generally up to 40 pounds) and work in network closets and gallery-adjacent spaces.
• Employment is contingent on successful completion of background screening appropriate to a cultural institution that holds collections and donor data.

Success in First 90 Days:

• Complete a full access review: Entra ID roles, Meraki admins, Proofpoint admins, Veeam admins, Duo, Keeper vault ownership, and break-glass accounts.
• Confirm the Supervisor can perform core tasks (ticket triage, Intune enrollment, Defender alert review, Proofpoint quarantine, a Veeam test restores) without the Manager present.
• Deliver a written snapshot to the CFO: open risks, license true-up, vendor renewal calendar, and the date of the last successful restore test.
• Update the Incident Response roster and after-hours contact path so they no longer depend on a former MSP or a single person.

Physical Requirements:

The physical requirements of the position described here are representative of those that must be met by an employee to perform successfully.

• Walking, bending, climbing, stooping, and lifting up to 35 pounds.
• Must be able to sit and stand for long periods of time.
• Physical ability to climb stairs and work in a multi-level building.

• Health Insurance (with low-cost options for employee-only plans)
• Dental
• Vision
• Life Insurance
• Short-Term and Long-Term Disability
• 403(b) Retirement Plan
• Paid Time Off
• Paid Sick Time Off
• Paid Holidays

About the San Antonio Museum of Art  

The San Antonio Museum of Art serves as a forum to explore and connect with art that spans the world’s geographies, artistic periods, genres, and cultures. Its collection contains nearly 30,000 works representing 5,000 years of history and is particularly strong in arts of the Americas; ancient Egyptian, Greek and Roman art; Asian art; and contemporary art.

San Antonio is the nation’s seventh-largest city and is consistently listed as one of its fastest-growing. The Museum is housed in the historic Lone Star Brewery on the Museum Reach of San Antonio’s River Walk and is committed to promoting the rich cultural heritage and life of the city. It hosts hundreds of events and public programs each year, including concerts, performances, tours, lectures, symposia, and interactive experiences. As an active civic leader, the Museum is dedicated to enriching the cultural life of the city and the region, and to supporting its creative community.

E-Verify Participation:

San Antonio Museum of Art participates in E-Verify to confirm the identity and employment eligibility of all new hires. Candidates must provide documentation to establish identity and legal authorization to work in the United States.

EEO Statement:

San Antonio Museum of Art is an Equal Opportunity Employer.  We recognize that it is highly unlikely that an applicant meets 100% of the qualifications for a given role.  Therefore, if much of this job posting describes you, then you are highly encouraged to apply for this role. 

 SAMA is committed to equal employment opportunity.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.