Job Information
• Job Title: IT Infrastructure & Security Manager
• Department: Information Technology / Information Systems
• Reports To: Director of Finance
• Location: Bozeman, MT
• Effective/Revision Date: 7.2026

Role Purpose
The IT Infrastructure & Security Manager ensures secure, reliable, and compliant IT operations. This role oversees all infrastructure, cybersecurity, and cloud/on-prem systems, while serving as backup for the Business Systems & Operations IT Manager. The role is responsible for CMMC Level 2 compliance, ITAR-aligned security governance, and modernizing the technology stack through AI and emerging technologies that improve business and production operations.

Scope & Responsibilities

Key Responsibilities:
Perform assigned duties in accordance with documented procedures and work instructions.

Infrastructure Management (Network, Servers, Cloud, Endpoints)

• Administer and optimize all networking systems including switches, routers, firewalls, VPN, segmentation, and secure remote access.
• Manage on-premise and cloud servers, virtualization environments, storage systems, and core business applications.
• Oversee cloud services (Azure, M365, SaaS platforms), ensuring secure configurations and compliance alignment.
• Govern endpoint management including patching, configuration standards, encryption, MDM, and device security baselines.
• Lead facility-wide network design including firewall architecture, Wi-Fi planning, segmentation, and OT/production network considerations.

Page Break

Cybersecurity, CMMC Level 2 & Compliance

• Lead all cybersecurity functions including SIEM monitoring, EDR management, vulnerability remediation, and incident response.
• Own CMMC Level 2 implementation, documentation, and readiness activities, including alignment to NIST SP 800-171 controls.
• Maintain security policies, access control models, MFA enforcement, privileged access, audit logging, and continuous monitoring.
• Oversee compliance with ITAR, ISO credentials, and all manufacturer-specific regulatory security frameworks.

Redundancy, High Availability & Disaster Recovery

• Develop and maintain business continuity and disaster recovery plans covering servers, cloud services, manufacturing systems, and network operations.
• Implement redundancy strategies for critical network components, production systems, and communication paths.
• Conduct regular DR testing, updating documentation and ensuring readiness for audits and compliance assessments.

Vendor Management (MSP, Telecom, Infrastructure Vendors)

• Manage IT service providers including MSPs, telecom carriers, cloud vendors, and security vendors.
• Evaluate vendor performance, SLAs, and compliance with CMMC, ISO, and ITAR requirements.
• Participate in contract reviews, security assessments, and technology procurement aligned with IT strategy.

Production Infrastructure Support (Manufacturing & Operations Systems)

• Ensure reliable operation of production-critical systems including MES, ERP, QMS, automation networks, and specialized engineering/operations hardware.
• Support OT (Operational Technology) security, including segmentation, monitoring, and coordination with manufacturing teams.
• Partner with operations leadership to improve uptime, stability, and security across all production-related technologies.

Shared Responsibilities with Business Systems & Operations IT Manager

• Contribute to IT strategic planning and long-term architecture decisions.
• Provide backup coverage for all systems administration, application support, vendor governance, and infrastructure-related tasks.
• Collaborate on cross-platform initiatives such as ERP improvements, workflow automation, quality system upgrades, and AI adoption.

AI & Emerging Technology Integration

• Identify opportunities to integrate AI, automation, and advanced analytics in engineering, manufacturing, and administrative functions.
• Ensure AI deployments follow CMMC Level 2 security requirements and ITAR restrictions.
• Develop pilot projects, proofs of concept, and guidelines for responsible AI adoption across the organization.

Work Experience & Skills

Education:

• Bachelor's degree in IT, Cybersecurity, Computer Science, or related field preferred.
• CMMC Level 2 training or certification highly preferred (or willingness to obtain).

Experience:

• 5-8 years of experience managing network, server, and cloud infrastructure.
• Experience supporting manufacturing environments and production systems.
• Demonstrated experience with CMMC Level 2, NIST 800-171, ITAR, and ISO security controls.
• Experience working in small IT teams with broad technical responsibility.

Skills / Knowledge:

• Strong proficiency in networking, firewalls, Wi-Fi design, cloud platforms, virtualization, identity systems, and endpoint management.
• Deep knowledge of cybersecurity frameworks, secure design principles, and compliance-driven environments.
• Familiarity with OT/production networks and industrial security considerations.
• Ability to perform gap analyses, prepare for certification audits, and maintain compliance documentation.
• Understanding of AI tools, automation platforms, and emerging technologies relevant to manufacturing.

Personal Attributes:

• Highly self-motivated and able to work independently with minimal supervision
• Organized, proactive, and capable of managing diverse responsibilities.
• Strong communication skills and ability to collaborate cross-functionally.
• Analytical, detail-oriented, and focused on continuous improvement.

Working Conditions & Physical Requirements (if applicable)
• Work environment (office, manufacturing floor, remote):
Combination of office and manufacturing floor environment with exposure to noise, machinery, and varying temperatures
• Physical or operational requirements:
May require lifting up to 25 lbs (equipment installation)
Occasional after-hours or on-call support for system maintenance or emergencies

Your Role in the EMS and QMS (including during an Audit)

1. Be familiar with the Environmental and Quality Policy
   1. Where can you find these?
   2. What are key commitments in each (very high level)?
2. Be familiar with Environmental and Quality Objectives
   1. Where can you find the current list?
   2. Do they relate to your job or are you involved with any?
3. Environmental Aspects
   1. Recycling of germanium (positive aspect)
   2. Energy use and wastewater discharge
   3. Do they relate to your job? What procedures exist to help control these?
4. Be familiar with and follow Emergency Response Procedures
5. Be familiar with and follow Nonconformance Procedures
6. Be familiar with and follow Document Control Procedures
7. Be familiar with and follow Management of Change Procedure

Employee Signature Date