Systems & Network Engineer

Are you interested in joining a small, dynamic IT team that supports live and internet numismatic auctions on a global scale? Stacks Bowers Galleries, a subsidiary of Gold.com. We are seeking a Systems & Network Engineer to join our Platforms & Engineering team, reporting directly to the Sr. Director of IT. This is an in-office position based at our Costa Mesa headquarters.

This role is responsible for high level end-to-end IT support across the organization from desktop support through enterprise VoIP, LAN/WAN/Wi-Fi networking, hybrid cloud infrastructure (predominantly Azure), and security operations supporting remote offices in Denmark, Hong Kong, SFO, Philly, Boston, New York, and other locations around the world. Because auctions and business operations run continuously across time zones, this is a role requiring on-call availability.

This role will also support Griffin Studios; a state-of-the-art broadcast studio located within our Costa Mesa corporate office powering live and internet sales broadcasts worldwide., Auction & Broadcast Support

• Provide comprehensive technical support for live and internet auctions, both onsite and remotely, supporting critical auction operations including Griffin Studio Auctions (Stacks Bowers) and Apex Streams auctions (Costa Mesa & Vegas).
• Onsite Auctions: Maintain uptime and studio network to support operations from our corporate facility, ensuring seamless execution of live broadcasts.
• Remote Sales: Configure ad-hoc networks and streaming setups at offsite venues to ensure smooth audio/video transmission and system functionality.

Cloud & Virtualization Infrastructure

• Nutanix Hyper-Converged Infrastructure: Support and maintain the Nutanix Acropolis AOS (AHV) platform for production servers, including cluster health, capacity planning, upgrades, and troubleshooting to minimize physical server footprint.
• Azure Architecture: Design, deploy, and manage complex Azure environments: networking (VNets, peering, ExpressRoute/VPN gateways), Front Door, Identity (Azure AD/Entra ID), storage, backup, and disaster recovery across a multi-region, multi-office footprint.
• Linux & Containerization: Working experience with Linux systems administration and containerization technologies such as Docker and Portainer.
• AWS: Manage AWS storage (S3 buckets) as repositories for immutable Veeam Backups, archival and data storage; note that Azure is the organization’s primary cloud platform and hosts the vast majority of production workloads.
• Infrastructure as Code: Use Terraform to provision, version, and manage cloud and on-prem infrastructure in a consistent, repeatable, and auditable manner.
• Version Control & Collaboration: Use GitHub to manage infrastructure-as-code, scripts, automation, and technical documentation, following change-control best practices.
• Single Sign-On (SSO): Implement, configure, and maintain SSO/identity federation (Azure AD/Entra ID, SAML, OAuth) across enterprise applications to streamline secure access.

Systems & Network Administration

• Monitor, analyze, and perform corrective actions on-premise, in the cloud, and across network or VoIP services to ensure production continuity.
• Administer Active Directory, DNS, DHCP, Group Policy, VPN RAS, Veeam Backup, Barracuda Email Spam, and 8x8 VoIP systems.
• Networking: Deep expertise of LAN, WAN, and Wi-Fi design, configuration, administration, and troubleshooting, including routing, switching, firewall configuration and policy management, and site-to-site and client VPN tunnels.
• Implement and support IT infrastructure systems, including hardware, software, and network components; oversee documentation, configuration, updates, and knowledge transfer.

Endpoint Management, Patching & Automation

• Remote Endpoint Management: Use Action1 for remote management of endpoints, deployment and monitoring of Windows updates, and third-party application patching across the organization.
• Scripting & Automation: Develop and maintain scripts (e.g., PowerShell, Bash, Python) to automate routine tasks, deployments, and monitoring, power automate.
• Software Package Deployment: Package and deploy software across desktops and servers, ensuring consistent, tested rollouts organization-wide.
• Maintenance Windows: Participate in scheduled after-hours maintenance windows, generally occurring once per month to perform patching, upgrades, and infrastructure changes with minimal business disruption.

Security & Monitoring

Monitor, respond to, and help remediate findings across the organization’s security toolset, including:

• eSentire - managed detection and response (MDR)
• Sumo Logic - log management and SIEM
• Tenable.one - vulnerability management
• CrowdStrike - endpoint detection and response (EDR)
• Follow security best practices across identity, network, endpoint, and cloud environments, and support incident response activities as needed.

IT Support & User Management (escalation tier)

• Configure, install, and maintain IT hardware, including Windows and Office 365 products, and manage user accounts through Office 365, Exchange Online, SharePoint, and OneDrive.
• Provide desktop support across the organization, in person and remotely, using tools such as Action 1 and GoToAssist.

Building & Access Management

• Manage building access control with Brivo door systems.
• Familiar with NVR, IP Cameras, security systems, etc.

AI Proficiency

• Demonstrate comfort and proficiency using AI-assisted tools (e.g., Copilot, ChatGPT, Claude) to support scripting, documentation, troubleshooting, and process automation, and to improve day-to-day efficiency., * 24x7 On-Call: This is a 24x7 role. On-call support is required to serve global offices in Denmark, Hong Kong, New York, and other locations, as well as critical auction operations.
• Maintenance Windows: Monthly scheduled maintenance windows are required. After-hours and weekend work is minimal but necessary during system upgrades and/or outages.
• Travel: Domestic and international travel is required, potential travel to New York, Philadelphia, Baltimore, Denmark, and Hong Kong and other locations.
• Professionalism: Ability to manage multiple tasks, think critically, and maintain professionalism under pressure. Must be able to work well with others. This position touches many areas so a good professional attitude is a must!

• Active Directory & Systems Administration: Minimum 7 years in Active Directory, server administration, email Exchange administration, terminal services, and general systems administration.
• Cloud & Infrastructure: Minimum 5 years of hands-on experience with cloud and virtualization infrastructure, including complex Azure architecture (our primary cloud platform), Nutanix AHV/Acropolis, AWS (S3/storage), Terraform (Infrastructure as Code), and GitHub for version control and collaboration.
• Identity & Access: Minimum 3 years of experience implementing and supporting SSO/identity federation (Azure AD/Entra ID, SAML, OAuth).
• Networking: Minimum 7 years of experience with LAN/WAN/Wi-Fi, routing, switching, firewalls, VPNs, SD-WAN, and SAN technologies.
• Scripting & Automation: Proficiency in scripting (PowerShell, Bash, and/or Python) for automation and software package deployment.
• Security Tools: Familiarity with, or willingness to quickly learn, eSentire, Sumo Logic, Tenable.one, CrowdStrike, and Action1.
• AI Proficiency: Practical, hands-on comfort using AI tools to improve productivity, troubleshooting, and documentation quality.
• Communication: Strong written and verbal communication skills with a customer-oriented approach to documenting processes and procedures.
• Critical Thinking: Strong judgment, dependability, and the ability to remain calm under pressure., Equal Opportunity Employer. Candidates must be authorized to work in U.S. Thorough background check. This is a full-time position. No recruiters.

• Health Insurance - Including: Medical, Vision, Dental, Life insurance, AD& D, Disability Insurance
• Flexible Spending Account
• Employee Assistance
• Paid vacation and holidays
• 401K Plan W/Company Match