Information Technology Manager
About this role
Employer-provided description, formatted for easier reading.
Overview
Role Description
You will run IT for 50+ users across our Colorado headquarters and Texas operations hub. You are the primary point of contact for everything from network infrastructure to a locked-out user, with the rest of the technology team available to help. This is a hands-on individual contributor position.
You manage systems and vendors, not people.
We are looking for someone who plans for the worst case. You assume systems will fail and accounts will be compromised, and you build the safeguards before anything goes live. You will have the authority to put structure in place before an incident forces it, and your security recommendations will get a real hearing.
Responsibilities
Security and access governance (40%)
- Prevent exposure before it happens. Set up and enforce least-privilege sharing and permissions across M365, calendars, and SharePoint, with regular access reviews.
- Plan for failure. Threat-model new systems, vendors, and access before launch. Keep incident response and restore plans tested, not just written.
- Run our security controls. MFA, endpoint protection, patching, backups, threat monitoring, and incident response.
- Stay current on threats, including AI-driven phishing and data leakage through AI tools, and harden the environment against them.
- Lead the domain and SharePoint separation. Split our integrated AD and SharePoint environments by business entity. This is a business-structure project, separate from the governance work above.
Operations (40%)
- Own day-to-day support. Most of your workload is KB Custom Ag, with defined support expectations for our affiliated companies.
- Administer M365 (identity, access, licensing, security) and Active Directory (accounts, GPOs, devices).
- Manage MDM for our Apple and Samsung fleets (Jamf, Intune), including deploying our custom in-house apps to tablets and laptops.
- Manage SharePoint as our primary file platform: structure, permissions, and lifecycle.
- Administer Teams Phone across all locations.
- Maintain the network at both sites, stand up our new Colorado location, and run hardware refreshes.
Strategic (20%)
- Use AI and automation to improve IT operations, monitoring, and response.
- Partner with the development team on infrastructure, train staff on systems and security, keep documentation current, and manage vendor spend.
What You'll
Support:
- Northern Colorado - Headquarters (your base, existing infrastructure)
- Texas Panhandle - Operations hub (majority of users, existing infrastructure)
- Additional Colorado Location - Sister company operations
- New Colorado Location (coming soon) - Requires infrastructure deployment
What You Need:
Required:
- You have been the IT person for a distributed company of about this size and owned the whole environment.
- A preventive security track record. You have put access governance, sharing policies, and security reviews in place ahead of incidents, not after.
- You can make the case for security. You explain risk in plain business terms, recommend a clear course of action, and push back on requests that create unacceptable risk while still finding a safe way to get the business what it needs.
- Security+ or an equivalent certification, plus hands-on experience with network security, endpoint protection, and MFA.
- Active Directory and M365 administration, including SharePoint administration and permissions management.
- MDM administration for Apple and Android devices (Jamf, Intune, or similar).
- You like the full range of IT work. A domain migration and a misbehaving tablet are both interesting to you. You work well with people at every level and are fine being interrupted. Help requests are the job.
- Valid driver's license. Able to lift up to 50 lb, work on ladders for cabling and access points, and drive between sites.
Preferred
- Domain consolidation or separation project experience
- Teams Phone or other VOIP administration
- PowerShell or Bash scripting, and hands-on use of AI tools in IT operations
- Experience running tabletop exercises, incident response drills, or disaster recovery tests
- Agriculture, logistics, trucking, or industrial operations background
Travel Requirements:
- Travel 12 times per year (1x Monthly) initially (reducing to quarterly or semi-annually after infrastructure is optimized), includes overnight stays
- After-hours/weekend work occasionally required during peak harvest season
Work Environment:
- In-Person in Northern Colorado or Texas Panhandle with several users in remote locations
- Multi-state IT operations (Colorado and Texas)
- Support users across agricultural, logistics, and equipment operations
- Seasonal business with peak activity during harvest season
- Work closely with development team on strategic initiatives
- Small company culture with cross-functional collaboration
What We Offer:
- $85-110K based on experience and qualifications
- Comprehensive benefits package
- You design the security posture from the ground up, with leadership behind it
- You work alongside an in-house technology team rather than as a one-person IT department
- How the role grows depends on how you establish yourself and where our technology needs go
Pay: $85,000.00 - $110,000.00 per year
Benefits:
- 401(k)
- Dental insurance
- Health insurance
- Paid time off
Work Location: In person