Systems & Network Engineer

Stack's Bowers Galleries; Costa Mesa (CA); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Health Insurance

Flexible Spending Account

Employee Assistance

Paid vacation and holidays

401K Plan W/Company Match

Job summary

Stack's Bowers Galleries in Costa Mesa, CA seeks a Systems & Network Engineer to join our Platforms & Engineering team. This in-office role covers end‑to‑end IT support from desktops to enterprise VoIP, LAN/WAN/Wi‑Fi, and hybrid cloud infrastructure (Azure), including security operations for remote offices worldwide.

The role also supports Griffin Studios for live and internet broadcasts, with on-call availability across time zones and travel as needed.

Qualifications

• 7+ years in Active Directory, server administration, email Exchange administration, terminal services.
• 5+ years in cloud and virtualization infrastructure, Azure architecture.
• 3+ years SSO/identity federation (Azure AD/Entra ID, SAML, OAuth).
• 7+ years LAN/WAN/Wi‑Fi, routing, switching, firewalls, VPNs.
• Proficiency in PowerShell, Bash, Python for automation.
• Familiarity with AI tools to aid scripting and documentation.
• Experience with security tooling: eSentire, Sumo Logic, Tenable.one, CrowdStrike.
• Strong written and verbal communication, customer-oriented process documentation.
• Ability to work in 24x7 on-call, travel as needed.

Responsibilities

• Provide 24x7 IT support for live auctions and Griffin Studio operations.
• Maintain on-site studio network for live broadcasts and offsite venue setups.
• Design, deploy, and manage Azure, networks, and security controls across regions.

Skills

Active Directory

Cloud & Virtualization

Identity & Access

Networking

Scripting & Automation

Security Tools

AI Proficiency

Communication

Critical Thinking

Tools

Azure

Nutanix AHV/Acropolis

AWS (S3)

Terraform

GitHub

Action1

Job description

Job Summary

Are you interested in joining a small, dynamic IT team that supports live and internet numismatic auctions on a global scale? Stacks Bowers Galleries, a subsidiary of Gold.com. We are seeking a Systems & Network Engineer to join our Platforms & Engineering team, reporting directly to the Sr. Director of IT. This is an in-office position based at our Costa Mesa headquarters.

Job Summary

Are you interested in joining a small, dynamic IT team that supports live and internet numismatic auctions on a global scale? Stacks Bowers Galleries, a subsidiary of Gold.com. We are seeking a Systems & Network Engineer to join our Platforms & Engineering team, reporting directly to the Sr. Director of IT. This is an in-office position based at our Costa Mesa headquarters. This role is responsible for high level end-to-end IT support across the organization from desktop support through enterprise VoIP, LAN/WAN/Wi‑Fi networking, hybrid cloud infrastructure (predominantly Azure), and security operations supporting remote offices in Denmark, Hong Kong, SFO, Philly, Boston, New York, and other locations around the world. Because auctions and business operations run continuously across time zones, this is a role requiring on-call availability. This role will also support Griffin Studios; a state‑of‑the‑art broadcast studio located within our Costa Mesa corporate office powering live and internet sales broadcasts worldwide.

Key Responsibilities

Auction & Broadcast Support

• Provide comprehensive technical support for live and internet auctions, both onsite and remotely, supporting critical auction operations including Griffin Studio Auctions (Stacks Bowers) and Apex Streams auctions (Costa Mesa & Vegas).
• Onsite Auctions: Maintain uptime and studio network to support operations from our corporate facility, ensuring seamless execution of live broadcasts.
• Remote Sales: Configure ad‑hoc networks and streaming setups at offsite venues to ensure smooth audio/video transmission and system functionality.

Cloud & Virtualization Infrastructure

• Nutanix Hyper‑Converged Infrastructure: Support and maintain the Nutanix Acropolis AOS (AHV) platform for production servers, including cluster health, capacity planning, upgrades, and troubleshooting to minimize physical server footprint.
• Azure Architecture: Design, deploy, and manage complex Azure environments: networking (VNets, peering, ExpressRoute/VPN gateways), Front Door, Identity (Azure AD/Entra ID), storage, backup, and disaster recovery across a multi‑region, multi‑office footprint.
• Linux & Containerization: Working experience with Linux systems administration and containerization technologies such as Docker and Portainer.
• AWS: Manage AWS storage (S3 buckets) as repositories for immutable Veeam Backups, archival and data storage; note that Azure is the organization’s primary cloud platform and hosts the vast majority of production workloads.
• Infrastructure as Code: Use Terraform to provision, version, and manage cloud and on‑prem infrastructure in a consistent, repeatable, and auditable manner.
• Version Control & Collaboration: Use GitHub to manage infrastructure‑as‑code, scripts, automation, and technical documentation, following change‑control best practices.
• Single Sign‑On (SSO): Implement, configure, and maintain SSO/identity federation (Azure AD/Entra ID, SAML, OAuth) across enterprise applications to streamline secure access.

Systems & Network Administration

• Monitor, analyze, and perform corrective actions on‑premise, in the cloud, and across network or VoIP services to ensure production continuity.
• Administer Active Directory, DNS, DHCP, Group Policy, VPN RAS, Veeam Backup, Barracuda Email Spam, and 8x8 VoIP systems.
• Networking: Deep expertise of LAN, WAN, and Wi‑Fi design, configuration, administration, and troubleshooting, including routing, switching, firewall configuration and policy management, and site‑to‑site and client VPN tunnels.
• Implement and support IT infrastructure systems, including hardware, software, and network components; oversee documentation, configuration, updates, and knowledge transfer.

Endpoint Management, Patching & Automation

• Remote Endpoint Management: Use Action1 for remote management of endpoints, deployment and monitoring of Windows updates, and third‑party application patching across the organization.
• Scripting & Automation: Develop and maintain scripts (e.g., PowerShell, Bash, Python) to automate routine tasks, deployments, and monitoring, power automate.
• Software Package Deployment: Package and deploy software across desktops and servers, ensuring consistent, tested rollouts organization‑wide.
• Maintenance Windows: Participate in scheduled after‑hours maintenance windows, generally occurring once per month to perform patching, upgrades, and infrastructure changes with minimal business disruption.

Security & Monitoring

Monitor, respond to, and help remediate findings across the organization’s security toolset, including:

• eSentire — managed detection and response (MDR)
• Sumo Logic — log management and SIEM
• Tenable.one — vulnerability management
• CrowdStrike — endpoint detection and response (EDR)

Follow security best practices across identity, network, endpoint, and cloud environments, and support incident response activities as needed.

IT Support & User Management (escalation tier)

• Configure, install, and maintain IT hardware, including Windows and Office 365 products, and manage user accounts through Office 365, Exchange Online, SharePoint, and OneDrive.
• Provide desktop support across the organization, in person and remotely, using tools such as Action 1 and GoToAssist.

Building & Access Management

• Manage building access control with Brivo door systems.
• Familiar with NVR, IP Cameras, security systems, etc.

AI Proficiency

• Demonstrate comfort and proficiency using AI‑assisted tools (e.g., Copilot, ChatGPT, Claude) to support scripting, documentation, troubleshooting, and process automation, and to improve day‑to‑day efficiency.

Desired Candidate Qualifications

• Active Directory & Systems Administration: Minimum 7 years in Active Directory, server administration, email Exchange administration, terminal services, and general systems administration.
• Cloud & Infrastructure: Minimum 5 years of hands‑on experience with cloud and virtualization infrastructure, including complex Azure architecture (our primary cloud platform), Nutanix AHV/Acropolis, AWS (S3/storage), Terraform (Infrastructure as Code), and GitHub for version control and collaboration.
• Identity & Access: Minimum 3 years of experience implementing and supporting SSO/identity federation (Azure AD/Entra ID, SAML, OAuth).
• Networking: Minimum 7 years of experience with LAN/WAN/Wi‑Fi, routing, switching, firewalls, VPNs, SD‑WAN, and SAN technologies.
• Scripting & Automation: Proficiency in scripting (PowerShell, Bash, and/or Python) for automation and software package deployment.
• Security Tools: Familiarity with, or willingness to quickly learn, eSentire, Sumo Logic, Tenable.one, CrowdStrike, and Action1.
• AI Proficiency: Practical, hands‑on comfort using AI tools to improve productivity, troubleshooting, and documentation quality.
• Communication: Strong written and verbal communication skills with a customer‑oriented approach to documenting processes and procedures.
• Critical Thinking: Strong judgment, dependability, and the ability to remain calm under pressure.

What’s Expected

• 24x7 On‑Call: This is a 24x7 role. On‑call support is required to serve global offices in Denmark, Hong Kong, New York, and other locations, as well as critical auction operations.
• Maintenance Windows: Monthly scheduled maintenance windows are required. After‑hours and weekend work is minimal but necessary during system upgrades and/or outages.
• Travel: Domestic and international travel is required, potential travel to New York, Philadelphia, Baltimore, Denmark, and Hong Kong and other locations.
• Professionalism: Ability to manage multiple tasks, think critically, and maintain professionalism under pressure. Must be able to work well with others. This position touches many areas so a good professional attitude is a must!

Job Type: Full‑time

Pay Range: $120,000 - $130,000 Annually

Benefits

• Health Insurance - Including: Medical, Vision, Dental, Life insurance, AD& D, Disability Insurance
• Flexible Spending Account
• Employee Assistance
• Paid vacation and holidays
• 401K Plan W/Company Match

Ability To Commute/relocate

Costa Mesa, CA 92626: Reliably commute or planning to relocate before starting work (Preferred)

Work Location: In office

Equal Opportunity Employer. Candidates must be authorized to work in U.S. Thorough background check. This is a full‑time position. No recruiters.