Network Administrator

Job Details: Job Location: Karen Brooks Hopkins (KBH) - Brooklyn, NY, Position Type: Full-Time, Salary Range: $85000.00 - $95000.00Salary, Job Category: IT, Brooklyn Academy of Music (BAM) is a multi-disciplinary arts center located in Brooklyn, New York. For more than 150 years, BAM has been the home for adventurous artists, audiences, and ideas—engaging both global and local communities. With world-renowned programming in theater, dance, music, opera, film, and much more, BAM showcases the work of emerging artists and innovative modern masters.    BAM is seeking a Network Administrator!  The ideal candidate will own and maintain BAM's network infrastructure across all campus locations, including the shared network at the L10 Cultural Condo serving BAM KBH, the L10 partner organizations, and common areas, as well as physical and wireless networks, firewalls, VPN, and network security, and serve as the senior on-site technical authority during second-shift hours. The Network Administrator is BAM's primary technical resource for network operations, ensuring that connectivity, performance, and security are maintained across BAM's campus, the L10 shared environment, and remote access. This role requires deep technical expertise in cloud-managed and physical network infrastructure, operates with a high degree of independence within its domain, and makes network-level decisions within established policy and architecture guidelines.   The position works the second shift, when IT leadership and day-shift staff are largely off-site. During those hours, the Network Administrator serves as the senior technical presence for IT support, providing oversight, technical decision-making, and escalation support for junior and temporary IT staff working the same shift, and is BAM's on-site technical presence for the L10 Cultural Condo, supporting partner evening and weekend programming within the scope of BAM's L10 technology services. These responsibilities do not include supervisory authority. Scheduling, performance evaluation, and other supervisory responsibilities for help desk staff remain with the Associate Director of IT. The Network Administrator is not a primary desktop-support or help desk queue resource and does not carry a routine ticket load. Hands-on end-user and event support during the second shift is delivered by junior and temporary IT staff. The Network Administrator independently owns, configures, and maintains BAM's network infrastructure, making technical decisions within its domain without requiring routine supervision. The Network Administrator is the primary escalation point for Network-related issues raised by Tier 1 and Tier 2 roles. Outside standard business hours, the Network Administrator is also the senior on-site escalation point for general IT support issues, resolving them directly or routing them to the appropriate domain owner. Issues requiring architectural changes, cross-domain policy decisions, or organizational impact are escalated to the Director of IT (Tier 4). When IT leadership is unavailable, escalate in accordance with the Technology Division on-call framework. Suspected security incidents are reported to the Cybersecurity Administrator immediately.    Measurable Objectives  Maintain network uptime across BAM campus buildings and the L10 shared network at or above the availability threshold defined by IT leadership, with unplanned outages documented, root-caused, and reported to the Director of IT within one business day of resolution.  Ensure all network devices, including Meraki and UniFi switches and access points and Meraki and WatchGuard firewalls, are maintained at current firmware and configuration standards, with exceptions documented and reported to the Director of IT and Cybersecurity Administrator.  Maintain and test VPN access procedures on a schedule defined by IT leadership, with results documented and reported to the Director of IT. Ensure network readiness for scheduled rental and programming events, including advance setup, testing, and documented handoff of event requirements, with issues identified and resolved or escalated before event start where lead time allows. Provide reliable senior on-site technical coverage across the scheduled second shift, including L10 evening and weekend programming, ensuring junior and temporary staff have escalation support and that second-shift IT needs across campus buildings and L10 are met or escalated.  Produce network performance and capacity reports for IT leadership on a quarterly basis, including recommendations for remediation or upgrade where applicable. Complete evaluations of proposed network infrastructure changes or new technologies with a written analysis of options, costs, and recommendations prior to any procurement decision. Respond to and resolve network-related alerts and outages within the timeframes defined by IT service level agreements, with all incidents logged and documented. Network connectivity for cinema and AV control systems maintained so that scheduled screenings and performances are not disrupted, with issues identified and resolved or escalated before showtime where lead time allows. L10 partner network requests and incidents handled within the service levels defined for L10 operations, with partner-affecting outages communicated through the L10 Property Manager, and with L10 support activity logged in Spiceworks to support reporting to L10 partners and DCLA.  Qualifications: Bachelor's degree in Information Technology, Computer Science, Networking, or a related field, or equivalent professional experience. Demonstrated hands-on experience administering physical and wireless network infrastructure including switches, access points, and firewalls. Working knowledge of Cisco Meraki or equivalent cloud-managed networking platform. Experience with next-generation firewall configuration and management. Experience with VPN solutions and remote access administration. Strong analytical and troubleshooting skills with ability to diagnose and resolve complex network issues independently. Ability to work independently as the senior on-site technical resource during evening and weekend hours. Excellent written and verbal communication skills, including ability to document technical procedures and produce reports and recommendations for IT leadership. Cisco Certified Network Associate (CCNA) or equivalent certification. Experience with Cisco Meraki and Ubiquiti UniFi specifically, including dashboard administration and policy management. Experience with WatchGuard firewalls. Experience supporting networked AV, control, or cinema systems (for example Crestron, digital projection, or AV-over-IP), including TCP and UDP control traffic, multicast, and quality-of-service configuration. Experience managing shared or multi-tenant network environments with segmentation between organizations. Familiarity with network security monitoring and threat detection. Experience managing multi-building or multi-site network environments. Familiarity with PCI DSS network segmentation requirements. Extremely organized Self-motivated Excellent attention to detail Ability to work under a deadline Ability to multi-task Calm and solution-oriented under pressure       Compensation: The salary for this position is $85k - $95k. This role is represented by Local 2110 and will be paid in accordance with the BAM/UAW Local 2110 Collective Bargaining Agreement. This position is full-time, exempt, and eligible for benefits. BAM provides a comprehensive benefits package including medical, dental, and vision insurance, retirement plan opportunities including both 401(k) and pension plans, as well as BAM-related benefits including access to BAM's fantastic programming.    Working conditions: Scheduled hours are Wednesday to Sunday, 12pm to 9pm.  On-call availability required for critical network incidents outside scheduled hours.  Regular presence in and movement across BAM's campus buildings, including L10 partner and common spaces as needed.  Ability to lift up to 60 pounds (network equipment, rack hardware, etc.). Ability to work in network closets and equipment rooms across campus buildings. Location: The position will primarily be onsite (3+ days), with occasional flexibility to work remotely as the workload allows.   Application Instructions: Must complete an online application through BAM's website  - no phone calls, emails or walk-ins, please.    Internal Applicants must apply through BAM's website.   Employees must meet all of the following criteria to be considered for an interview:    Completed at least 1 year of continuous, active service in current position. (Positions excluded include, but are not limited to, temporary assignments, and probationary employees):   Meet the experience and skills requirements as outlined in the job post;  Be employed in the current position for at least one year:  Performed in a satisfactory manner without any corrective actions in the last 12 months        Brooklyn Academy of Music is an Equal Opportunity Employer. BAM recognizes that historic institutional practices lead to a non-inclusive environment and is working to address diversity and inclusion in all forms. Individuals in BAM are experiencing their own pace during this process, which is not uncommon when addressing power and privilege. The Information Technology division supports and continues to take part in this process.