Back to the tower

Josh Gister

Director of IT· Greater Boston

Build it, then make sure it doesn't need you.

linkedin.com/in/joshgister

Character sheet

Class
Director of IT
Director since
2013
Party
Team of 11
Supports
750+ people
Glean adoption (AI search)
94%
Saved in 2024
$500,000+
Side quest
ip2geo.org · 99.96%+ uptime
Home base
Greater Boston
Cloud identity
Microsoft 365/Azure, SSO, MFA, passwordless
Network
Palo Alto, Cisco, Extreme, Ruckus
Device management
Intune, Jamf, Zebra
Security programs
Policy framework, audit readiness, company-wide training
AI governance
Evaluation, usage policies, vendors, cost
SaaS portfolio
Salesforce, NetSuite, HRIS/HCM, Procore, Primavera P6
Office IT
6 new corporate offices, 29 teleconference rooms
Vendor strategy
Budgeting, renegotiation, renewals, licensing audits
Automation
Joiner/mover/leaver, SSO/SCIM, provisioning

2026

Floor 2027: under construction

Director of IT since 2013. Today I lead a team of 11 supporting 750+ people.

Since January 2018 I've built IT from the ground up at a clean-energy company, now $3B+, as it grew from ~80 people to 750+.

I report to the SVP of Product & Technology. Ride down to see what was already in place, year by year.

  • 11on the team I lead
  • $500,000+saved in 2024
  • 6new corporate offices

Look closer

Crane

Who builds Floor 2027?

The next floor isn't built yet. If you're hiring someone to build it, talk to Josh.

Solar array

The company, today

A clean-energy company, now $3B+: vertically integrated, with a distributed, hybrid workforce of 750+ employees and contractors. I've been its Director of IT since January 2018.

Elevator motor

How the elevator works

Scroll, swipe or use the arrow keys to ride down through the years. The panel jumps to any floor, and Skip the ride lists every floor as plain text.

2025–2026 · ~700 → ~750 people

AI, adopted and governed

a clean-energy company, now $3B+

Since 2025 I've led AI adoption and governance. Glean search followed in 2026: 94% adoption.

In 2026 a securely deployed team of AI agents built a bespoke, org-wide project-management app linking all the primary enterprise SaaS platforms into one layer.

In 2025 sign-in went passwordless across the company, on the Microsoft 365/Azure identity I set up in 2018.

  • 80–90%gain in speed of discovery (Glean, Jan 2026)
  • 94%Glean adoption
  • 2people in security, from 2025

Prevented

An AI assistant on a personal account, fed confidential documents and paid for on a company card.

Look closer

Approved robot

AI adoption and governance

I led enterprise AI adoption and governance. It started in 2025 with ChatGPT for the whole organization, and covers tool evaluation, vendor management, usage policies and cost governance. Glean followed in 2026, with 94% adoption, and in January 2026 an 80–90% improvement in speed of discovery. Claude came mid-year.

Agent team

Built by a team of AI agents

In 2026 a team of AI agents, OpenClaw with NemoClaw (NVIDIA agentic tooling), securely deployed with agent identities, built a bespoke, org-wide project-management app. It links all the primary enterprise SaaS platforms into one layer. The app itself is not agentic.

Sign-in screen

Passwordless, on the 2018 identity

Since 2025, authentication has been passwordless org-wide. It runs on the Microsoft 365 and Azure identity I established in 2018.

Security desk

Security, a team of two

A Security Analyst joined in 2025, and security became two people: the analyst and the InfoSec Manager I hired in 2023, when the cybersecurity function started.

2024 · ~650 people

$500,000+ saved in 2024

a clean-energy company, now $3B+

Renegotiation, renewals and licensing audits did it, and most of it is recurring.

I own IT budgeting and vendor strategy, and negotiate the core contracts for all technology.

Since 2018 I've led or supported deployments across Salesforce, NetSuite, HR systems, Procore and Primavera P6; the major portfolio work came in 2024.

  • $500,000+mostly recurring (annual run-rate)

Prevented

Every department on its own subscription, two of them for nearly the same product, both quietly renewing every year.

Look closer

Renewal calendar

Contracts with an owner

I negotiate the core contracts for all technology and own enterprise IT budgeting and vendor strategy. In 2024 renegotiation, renewals and licensing audits delivered over $500,000 in savings, mostly recurring (annual run-rate).

Portfolio board

A portfolio, not a pile

CRM (Salesforce), ERP (NetSuite), HRIS/HCM and the operational platforms Procore and Primavera P6. I led or supported deployments and optimization across them, partnering with Sales, Finance, HR and Operations leaders. Ongoing since 2018; major portfolio work in 2024.

2023 · ~610 people

Security gets an owner

a clean-energy company, now $3B+

In 2023 I hired an Information Security Manager, and the cybersecurity function started.

The function set up a policy framework, audit readiness and cross-department workflows.

I hired a Network Engineer and introduced leadership layers; until then everyone in IT had reported directly to me.

  • 3offices opened in one year
  • 9people in IT, plus me
  • 6people in support

Prevented

A deal that dies in procurement because the customer asks who owns security, and the answer is nobody.

Later

By 2026 I was leading a hierarchical team of 11, including cybersecurity, infrastructure, IT automation engineering and support.

Look closer

Visitor at the door

Security, with an owner

In 2023 I hired an Information Security Manager and cybersecurity became a function. The function established a policy framework, audit readiness and cross-department workflows. A Security Analyst followed in 2025.

Org chart

Leaders between the team and me

Until the 2023 leadership layers, everyone in IT reported directly to me. In 2023 IT was nine people, plus me. Support, which began with one agent in 2018, was six. IT has always reported into Technology.

Wireless access point

The network becomes a function

A Palo Alto firewall had held the edge since 2018. In 2023 I hired a Network Engineer and the network became a function. Today its access points are Ruckus and Extreme, and its core is Cisco.

New office kits

Three offices in one year

Austin, New York and Washington DC opened in 2023. New York and DC had structured cabling and building access before move-in. Austin was a pre-furnished space, so its video conferencing was intentionally light.

2021–2022 · ~360 → ~490 people

Automate it, hand it off

a clean-energy company, now $3B+

Automation became a function in 2022, when I hired a Systems & Automation Engineer.

Today it handles new hires, role changes and departures, plus single sign-on and new workstations.

In 2021 I handed the product team I'd built to a dedicated lead, as I'd done with software development in 2019.

  • 250contractors on the same automation, by 2026
  • 2functions incubated, then handed off

Prevented

Someone who left last spring can still log in.

Later

By 2026 the same automation covered 250 contractors as well as ~500 employees.

Look closer

New hire's desk

Joiner, mover, leaver

In 2022 I hired a Systems & Automation Engineer, and the automation function started. Its scope today: joiner/mover/leaver operations; SSO and SCIM configuration; Intune, Jamf and Zebra; workstation provisioning; integrations. It removes a leaver's sign-in access. By 2026 contractors went through the same automation as employees.

Server rack

One office with servers

Lawrence, the operations site, opened in 2022 as the one office with servers and OT (operational technology), and Boston took a fourth floor the same year. Lawrence is also an office and warehouse.

Planning room

Reporting to the SVP of Product & Technology

Since the second half of 2022 I've reported to the SVP of Product & Technology. I contribute to strategic planning across the company.

Hat rack

Built it, then handed it off, twice

In 2018 I incubated software development: three developers and a product manager, through a team-extension partner. I handed it to a dedicated lead in 2019. In 2020 I incubated product as Director of Product, and handed it off in 2021.

2020 · ~220 people

Everyone went home

a clean-energy company, now $3B+

In 2020 the meetings moved home without an AV project.

The rooms and their standard were already in place, from the first two in Boston in 2018.

In 2020 I also took the Director of Product title, alongside Director of IT, with two product managers.

  • 29teleconference rooms today
  • 2product managers, when I ran product

Prevented

Meetings that start with four people around one laptop aimed at a TV, and a colleague in another city frozen mid-sentence.

Later

Today there are 29 teleconference rooms across Boston, Chicago, New York, DC and Lawrence.

Look closer

Empty office

The meetings moved

In 2020, when everyone went home, the meetings moved without an AV project. The standard dated from the first two teleconference rooms, in Boston in 2018.

Conference-room screen

29 rooms, one standard

The first two rooms went into Boston in 2018, on one standard from the start. They multiplied through the COVID years, and the kit was unified by the time DC opened in 2023. Today: 29 rooms across Boston, Chicago, New York, DC and Lawrence.

Feature-request board

Product had an owner

In 2020 I also took the Director of Product title, alongside Director of IT, with two product managers: the Salesforce administrator I'd hired in 2019, and an internal move. Product went to a dedicated lead in 2021.

2019 · ~150 people

Devices managed, offices linked

a clean-energy company, now $3B+

In 2019 I deployed Intune: devices encrypted, remotely wipeable, on a standard build.

Chicago, the second office I opened, was on the VPN from day one.

Annual security training began for the whole company, with a button to report suspicious email.

  • ~150people in 2019

Prevented

Offices linked by courier: a padded envelope with a hard drive in it, and someone at the far end checking their watch.

Later

Every office after Chicago opened on the VPN too.

Look closer

Laptop shelf

Encrypted, wipeable, one build

In 2019 I deployed Intune for Windows and mobile devices: encrypted, remotely wipeable, on a standard build. Jamf and Zebra came later. Today the automation function's scope covers Intune, Jamf and Zebra.

Training poster

Training for the whole company

In 2019, at ~150 people, annual security training began for the whole company, with a button to report suspicious email. Security got its own manager in 2023.

VPN router

Chicago, on the VPN from day one

Chicago, the second office I opened, was on the VPN from day one, and so was every office after it. Sturbridge opened the same year with a full build-out, and in June 2025 folded into Lawrence. Every new office opened from one standard playbook: cabling, access, network, video conferencing.

CRM desk

Salesforce, with an administrator

In 2019 I hired a Salesforce administrator for the CRM. In 2020 that administrator became a product manager in the product function I was incubating.

2018 · ~80 people

Day one

a clean-energy company, now $3B+

From day one I chose the cloud over building a server room.

That meant Microsoft 365 and Azure: one identity per person and email in the cloud.

Single sign-on and multi-factor authentication were enforced org-wide from 2018. I chose a support agent as my first hire here; requests went into a ticket queue.

  • ~80people when I started
  • ~22ksq ft Boston office, up from ~9k

Prevented

A server room in a supply closet with a box fan, fine until the Monday it isn't.

Later

Today five of the six offices need only a comms rack, not a server room, because of that cloud-first design.

Look closer

Comms closet

Identity in the cloud, from day one

From day one, at ~80 people, I established cloud-first Microsoft 365 and Azure infrastructure and identity instead of building a server room: one identity per person, email in the cloud, designed for elastic scale and capex-light operations. SSO and MFA were enforced org-wide from 2018. I later hired and scaled the team that matured the platform.

Firewall

A firewall in 2018, a network engineer in 2023

In 2018 a Palo Alto next-generation firewall went in at the edge, with guest Wi-Fi segmented from the start. The network had a boundary and rules before it had a network engineer; that hire came in 2023.

Support desk

My first hire here: a support agent

Before I built IT, laptops were bought on credit cards. My first hire at the company, in 2018, was a support agent. I chose that role to keep staff from avoidable disruption, give a clear path for Support, and create bandwidth to start working on the systems needed for further growth. Support hires since: 2020, 2021, 2022 (two) and 2023.

Floor plan

Boston, the first office I opened

Boston was the first office I opened: ~9k to ~22k sq ft, cabled before move-in, with the first two teleconference rooms. A Haverhill office was already there when I joined, and later moved to Lawrence.

2017

Between buildings

from a Connecticut campus to a Boston office

In December 2017 I left a $200M company on a nine-building campus.

In January 2018 I started at a clean-energy company, now $3B+, in Boston.

ip2geo.org, since July 2017: a free, open-source IP geolocation lookup I run end to end. Uptime: 99.96%+.

  • 99.96%+ip2geo.org uptime
  • JUL 2017ip2geo.org registered

Look closer

Server shack

ip2geo.org

Registered 19 July 2017: a free IP geolocation lookup service, open source on GitHub. I run it end to end: the code, CI/CD, infrastructure and monitoring. Uptime: 99.96%+.

Lobby directory

A new employer

Director of IT at a $200M company on a nine-building campus in Connecticut until December 2017. From January 2018, Director of IT at a clean-energy company, now $3B+, in Boston.

2015–2017

Nine buildings on private fiber

a $200M company on a nine-building campus

Between 2014 and 2017 I linked all nine buildings on the campus with private fiber.

I also directed IT infrastructure for two new 200k+ sq ft facilities, from 2015 to 2017.

For disaster recovery I added Commvault in 2015, with the restore tested at setup.

  • 2new 200k+ sq ft facilities
  • 300+employees supported on the campus

Prevented

A backup that is a schedule rather than a tested restore.

Look closer

Fiber spool

Nine buildings, one private network

Between 2014 and 2017 I linked all nine buildings on the campus with private fiber. That private network was separate from the 33% rise in wide-area network capacity.

Backup server

Restore tested at setup

In 2015 I added Commvault for disaster recovery. The restore was tested once, at setup.

Badge reader

Two new facilities

From 2015 to 2017 I directed the IT infrastructure for two new 200k+ sq ft facilities: the network, telecom and access control systems.

2013–2014

Promoted, then costs down ~40%

Director of IT · Connecticut

In 2013, my first year as Director of IT, I moved physical servers to VMware.

Over 2013 and 2014 I cut network, telecom and web hosting costs by ~40%, through vendor negotiations and infrastructure reorganization, while wide-area network capacity rose 33%.

As Director, through December 2017, I also centralized company data on NetApp and led the move to VoIP, which cut communication costs by 33%.

  • ~40%cut from network, telecom and hosting costs
  • +33%wide-area network capacity

Prevented

Under somebody's desk, a tower PC hand-labeled MAIN SERVER.

Look closer

Server rack

Virtualized

In 2013 I migrated physical servers to a VMware virtual environment.

VoIP desk phone

Communication costs down 33%

As Director of IT (2013 – December 2017), I led the transition to VoIP, reducing communication costs by 33% and giving remote and call-center teams more flexibility.

NetApp shelf

Company data, centralized

As Director of IT (2013 – December 2017), I centralized company data on NetApp. Before, it lived on workstations, portable drives and consumer NAS.

Nameplate

Promoted to Director of IT

In 2013 I was promoted from Senior Web Specialist to Director of IT. In that role, through December 2017, I led IT strategy and infrastructure for a $200M organization with 300+ employees on a nine-building campus, built a cross-functional IT team and aligned its processes with sales, marketing, creative and development.

2007–2013

Four to 80

Senior Web Specialist · Connecticut

As Senior Web Specialist from 2007, I helped grow the web marketing team from four to 80.

The department's revenue reached $20M, and it supported over 500 companies.

I guided the development of a custom content management and lead-generation platform: over 35,000 leads a month.

  • $20Mdepartment revenue
  • 35,000+leads a month
  • 4 → 80web marketing team

Later

In 2013 my leadership and technical work got me promoted to Director of IT.

Look closer

Row of desks

Four to 80

I helped grow the web marketing team from four people to 80. The department's revenue reached $20M, and it supported over 500 companies.

Web server

Over 1.2 million visitors a month

I designed and maintained server infrastructure for high-traffic websites with over 1.2 million monthly visitors.

Lead counter

35,000+ leads a month

I guided the development of a custom content management and lead-generation platform. It generated over 35,000 leads a month.

Whiteboard

DNS, explained

I mentored team members in DNS, email infrastructure and other technical areas.

Outside the timeline

The backbone

the end of the ride

Fiber, power, the main cable runs: nobody sees them, and every floor stands on them.

Floor 2027 will stand on them too.

Look closer

Main cable runs

6 new corporate offices (100k+ sq ft)

I planned and coordinated IT for 6 new corporate offices (100k+ sq ft), including structured network cabling, building access, intrusion detection and video conferencing/AV.