Director of Information Technology

This role is responsible for ensuring that CounterTrade’s IT environment supports business growth, federal contracting requirements, cybersecurity obligations, internal productivity, and executive strategic priorities. The IT Director serves as both a strategic leader and a hands-on technical authority. This position requires experience across IT leadership, cybersecurity, infrastructure, Microsoft cloud administration, compliance management, application development, AI implementation, networking, telecom/PBX administration, and business systems administration. The role works closely with executive leadership, department heads, external auditors, vendors, and internal technical staff to ensure secure, reliable, compliant, and efficient business operations. This position is onsite, not remote. Salary range is $150k-$175k/year.

Key Responsibilities

IT Leadership and Operations

• Lead the company’s IT and operations functions, including infrastructure, cybersecurity, systems administration, business applications, end-user support, compliance, and technology planning.
• Manage and mentor the IT team, including systems engineers, helpdesk personnel, developers, and technical staff.
• Oversee day-to-day IT operations, escalations, service delivery, endpoint management, user support, and operational technology needs across the organization.
• Develop and maintain IT policies, procedures, standards, and internal controls that support business operations and compliance requirements.

CMMC, Cybersecurity, and Compliance

• Lead the company’s CMMC compliance program, including CMMC Level 2 readiness, remediation, evidence collection, audit preparation, and ongoing compliance management.
• Serve as the primary internal lead for external CMMC assessments, including coordination with C3PAOs, consultants, auditors, executive stakeholders, and internal control owners.
• Manage cybersecurity governance, risk management, policies, procedures, technical controls, and compliance documentation.
• Maintain and improve System Security Plans, POA&Ms, control evidence, audit artifacts, and security documentation aligned to CMMC, NIST 800-171, DFARS, and related federal requirements.
• Oversee cybersecurity architecture, monitoring, vulnerability management, endpoint protection, access control, incident response, and security awareness initiatives.
• Lead hands-on cybersecurity implementations using platforms such as Palo Alto, Cisco Duo, Microsoft Defender, Microsoft Purview, Microsoft Intune, Microsoft Entra ID, Action1, and related tools.
• Ensure appropriate security controls are implemented across network, endpoint, identity, cloud, data, PKI, and application environments.

Infrastructure, Networking, Data Center, and PBX

• Oversee enterprise infrastructure including servers, virtualization, storage, backups, disaster recovery, network systems, firewalls, VPN, switching, wireless, and data center environments.
• Provide hands-on technical leadership for network engineering, particularly in Dell Force10 switching environments.
• Support firewall, routing, switching, VLAN, VPN, GlobalProtect, IPSec tunnels, remote access, wireless, and segmentation initiatives.
• Manage and improve infrastructure reliability, uptime, performance, capacity planning, and resiliency.
• Lead technology modernization efforts involving data center systems, networking, security appliances, cloud services, AI infrastructure, and business-critical infrastructure.
• Manage Dell, HP, and related server, storage, endpoint, and data center hardware platforms, including Dell PowerStore and related storage infrastructure.
• Manage and oversee the company’s self-hosted PBX environment, including system administration, call routing, extensions, user configuration, voicemail, ring groups, call queues, trunks, and more.

Microsoft Cloud, Identity, and Business Systems

• Administer and oversee Microsoft 365 tenant operations, including users, groups, licensing, Exchange, SharePoint, Teams, OneDrive, security, and compliance settings.
• Manage Microsoft cloud and security tools including Microsoft Entra ID, Intune, Purview, Defender, Azure-related services, conditional access, endpoint compliance, and identity governance.
• Administer and support Microsoft Dynamics 365 Business Central, including user access, configuration, reporting needs, integrations, troubleshooting, and operational support.
• Manage and support PKI infrastructure, certificate lifecycle management, authentication-related certificates, VPN certificates, and related security dependencies.
• Ensure Microsoft cloud services are configured securely and aligned with compliance, data protection, and operational requirements.

Application Development, Reporting, and AI

• Lead and support internal application development, including sales tools, operational reporting tools, business process automation, and internally developed AI applications.
• Maintain and enhance existing internal applications, scripts, databases, reports, integrations, and custom tools.
• Scope, evaluate, and implement AI solutions that improve business efficiency, reporting, sales operations, compliance workflows, or internal productivity.
• Support in-house AI infrastructure planning and implementation, including NVIDIA GPU-based hardware, supporting server infrastructure, storage, power, cooling, security, and operational considerations.

Technologies and Platforms

• Palo Alto firewalls, GlobalProtect VPN, firewall policy management, VPN configuration, threat prevention, and secure remote access.
• Dell data center and infrastructure hardware, including Dell PowerStore and related storage, server, and infrastructure platforms.
• Dell Force10 switching and related enterprise networking technologies.
• HP hardware, systems, endpoints, or infrastructure platforms.
• Cisco Duo for MFA, VPN authentication, identity protection, and secure access workflows.
• Microsoft 365 and related Microsoft cloud suite, including Exchange, SharePoint, Teams, OneDrive, Entra ID, Intune, Purview, Defender, and Azure-related services.
• Action1 for endpoint management, patch management, vulnerability visibility, and remediation workflows.
• IPSec tunnels, site-to-site VPNs, secure network connectivity, routing, firewall rules, and related network security configurations.
• AI technologies, especially in-house AI infrastructure using NVIDIA GPUs and related server, storage, networking, power, and cooling requirements.
• PKI infrastructure, certificate management, certificate authorities, SSL/TLS certificates, VPN certificates, authentication certificates, and certificate lifecycle processes.
• Microsoft Dynamics 365 Business Central administration and operational support.
• Self-hosted PBX, VoIP, SIP trunking, call routing, phone provisioning, voicemail, call queues, and telecom provider coordination.

Required Qualifications

• Significant experience leading IT, cybersecurity, infrastructure, and operations functions in a business environment.
• Strong hands-on technical background across systems administration, networking, cybersecurity, Microsoft cloud services, telecom/PBX systems, PKI, and business applications.
• Experience managing CMMC compliance, NIST 800-171 controls, federal contracting cybersecurity requirements, or similar regulated compliance programs.
• Experience leading external audits or assessments, preferably including CMMC assessments with C3PAOs.
• Experience administering Microsoft 365 environments, including tenant administration, user administration, Exchange, SharePoint, Teams, Intune, Entra ID, Purview, Defender, and related Microsoft cloud tools.
• Experience with Microsoft Dynamics 365 Business Central administration or operational support.
• Experience with Palo Alto, Cisco Duo, Microsoft security platforms, endpoint management, firewalls, VPN, PKI, identity security, and network security controls.
• Strong network engineering experience, preferably including Dell Force10 networking environments.
• Experience managing or supporting self-hosted PBX, VoIP, SIP trunking, phone provisioning, call routing, and voice system troubleshooting.
• Experience supporting or leading application development, internal reporting tools, automation, scripting, databases, or custom business applications.
• Experience evaluating, scoping, and implementing AI tools or internal AI-enabled applications.
• Familiarity with in-house AI infrastructure, NVIDIA GPU-based systems, or related hardware used to support AI workloads.
• Ability to work on-site in Arvada, Colorado. Ability to travel occasionally to New Mexico as business needs require.

Preferred Qualifications

• Experience working with DoD customers, federal contractors, federal procurement environments, or organizations subject to federal cybersecurity and compliance requirements.
• Experience supporting organizations that handle CUI, FCI, or other regulated federal contract information.

Preferred Certifications

• Aruba Certified Associate: Campus Access
• Aruba Networking Certified Professional: Campus Access
• ISC2 CISSP
• ISACA CISM
• CompTIA CASP+
• CompTIA CySA+
• ITIL certification
• cture and emerging technologies