Do you need to hire a full IT team with an IT director when you leave your MSP? Not always. Your business needs two things covered: someone who supports your employees day to day, and someone who runs the platform behind them. The platform is the tools, settings, security, backups, licensing, and standards your MSP was handling in the background. You can hire people for both. Or you can hire the people you want for daily support and have a partner run the platform and make the director-level decisions behind them.
We talk with companies leaving their MSP almost every day. The reasons are usually good ones: they want someone on site, faster answers, and IT that knows the business. What most of them don't know yet is how much the MSP was doing that nobody saw. This guide covers that work, the hiring traps that follow from it, and the options for staffing IT once the MSP is gone.
Key takeaways
- Leaving an MSP is a reasonable decision. The risk is underestimating the background work the MSP was doing.
- Many MSP tools and licenses belong to the provider and leave when the contract ends.
- Hiring a director to rebuild the platform is the most expensive and hardest hire to get right.
- If someone else runs the platform, you can hire for the daily support work you actually need, often at an earlier career stage.
- Compass can analyze what you need, hire the people for you, and run whatever else you need, as a one-time project or ongoing.
What your MSP was doing that you may not see
Most employees experience an MSP as the help desk. The help desk is the visible part. The larger part runs quietly, and it does not transfer automatically when you hire your own staff.
| Background work | What happens if nobody owns it |
|---|---|
| Patching and device management through the MSP's own tools | The tools leave with the MSP. Updates stop and nobody notices until something breaks. |
| Security software and 24-hour alert monitoring | Alerts still fire, but at night and on weekends they go to nobody. |
| Backups and restore testing | Jobs fail quietly. You find out on the day you need a restore. |
| Microsoft 365 or Google Workspace administration and licensing | Admin access, licenses, and security settings drift or sit in the provider's name. |
| Firewall, network, and Wi-Fi configuration | Firmware falls behind, and nobody remembers why a rule exists. |
| Vendor accounts, domains, internet circuits, and phones | Renewals lapse, and support cases can't be opened without the provider's login. |
| Documentation and administrator passwords | Knowledge sits in the MSP's systems, not yours. |
| Connected applications and vendor access | Old integrations keep broad access to your data long after anyone remembers them. |
That last row is not theoretical. The ConnectWise SkyKick breach showed how a forgotten vendor connection in Microsoft 365 can become a way in. Our MSP handoff checklist covers everything to collect and test before the provider's access ends.
The usual plan: hire a director, then build a team
When a company realizes how much the MSP covered, the natural response is to hire an IT director. The director will choose the tools, set up the security, design the network standards, write the procedures, and then hire technicians to support employees.
That plan can work, but it carries real risk:
- It is the hardest hire to make. A director who can design security, run infrastructure, manage vendors, lead people, and report to leadership is rare and costly. Most companies leaving an MSP have never interviewed for that role and can't easily test for it.
- It starts from scratch. A new director usually rebuilds the platform in their own way, which takes months and new tool contracts before daily support improves.
- It concentrates knowledge in one person. If the director leaves, the business is back where it started, without even an MSP to call.
- Plenty of companies skip the director entirely. They hire one or two technicians and hope the platform takes care of itself. It doesn't. That is the scenario that worries us most.
The leaner plan: hire for daily support, let Compass run the platform
Compass™ is Spot On Tech's service for companies building in-house IT. It splits the work along the line that matters. Your employees handle what needs to be done on site and with people. We handle the platform and the decisions that would otherwise need a director.
- We analyze what you need. We look at your users, locations, systems, vendors, support demand, and risks, and tell you which roles you actually need to hire.
- We hire the people you want. We write the job descriptions, find and screen candidates, and run the technical interviews. The people we hire are your employees, not ours.
- We run the platform, or set it up and hand it over. That means the tools, settings, security, backups, licensing, and standards your team works inside. Your staff escalate to our senior engineers when something is beyond their role. When we keep running the platform, this is a co-managed IT arrangement built around your team.
Because the platform is already built and maintained, your hire does not need to be a director. A capable earlier-career technician can do excellent work inside a well-run environment, with clear procedures and someone senior to call. That does not mean lower standards. It means the person's job matches their experience, and nobody junior is left as the only authority on cybersecurity, disaster recovery, or major infrastructure decisions.
How the options compare
| Hire a director | With Compass | |
|---|---|---|
| Daily support | Your technicians | Your technicians |
| Tools, security, backups | Your director | Spot On Tech, or your team after setup |
| Senior decisions | Your director | Our engineers, with your sign-off |
| Who you hire | A director plus technicians | Support staff you choose, with our help |
| If a key person leaves | Knowledge leaves too | The platform and records stay |
For how this compares with an MSP and typical co-managed IT, see in-house IT vs MSP vs co-managed IT.
We have run this model before. In our healthcare ransomware recovery case study, an overwhelmed in-house setup was replaced with an internal employee the client hired, supported by our team.
If you still want an IT director
Some companies are big enough, or complex enough, to need a full-time IT leader. Compass helps there too. We define what the director should own, help you find and interview candidates, and make sure the platform is documented and working before they start. Your new director inherits a working environment instead of a rebuild, and can spend the first months on your business instead of on cleanup.
One time or ongoing, in whatever mix you need
There is no single Compass package. Companies use it in any capacity, alone or combined:
- Evaluation only: a clear picture of what the MSP was doing and what you need to replace it.
- Hiring help: what roles to hire and who to hire, with role design, recruiting, and technical interviews.
- Tools and procurement: which tools to use, buying the hardware, software, and licenses, and setting up the tools and ticketing system.
- Support levels: L1 help desk, L2 systems support, or L3 senior engineering, only the levels your team needs.
- Coverage and security: 24/7 coverage for after-hours and urgent issues, and security operations center (SOC) monitoring.
- Transition project: the MSP handoff, setup, documentation, and training, then we step back.
- Ongoing platform management: we keep running the tools, settings, and security behind your team for as long as it helps.
Many companies start with more of our help and take on more ownership as their team grows. The arrangement can change as you do.
Questions to answer before you post a job
- Which work has to happen on site, and which can be run remotely?
- Who will own security alerts at night and on weekends?
- Which MSP tools and licenses leave when the contract ends?
- Who will hold the administrator access to Microsoft 365, the firewall, and your backups?
- Who will your new hire escalate to when something is beyond their experience?
- How will leadership see what IT is doing and where the risks are?
If any of these don't have a clear answer yet, it is worth sorting them out before you hire. For the full operating model, read our guide to building or improving an internal IT department.
Talk to us before you post the job
Spot On Tech works with businesses across New York and New Jersey that are moving IT in-house. A short conversation about what your MSP covers today and what you plan to hire can save months of trial and error. Talk with Spot On Tech about Compass, or start with our IT assessment.
Frequently asked questions
Do we need an IT director when we bring IT in-house?
Not necessarily. Someone has to own the platform, security, and technology decisions, but that can be a partner rather than a full-time hire. With Compass, Spot On Tech runs the platform and provides that senior oversight while your employees handle daily support. Larger or more complex companies may still want a director, and we can help hire one.
Can we hire a less experienced IT person when we leave our MSP?
Yes, if the platform behind them is well run. An earlier-career technician can support employees, devices, and accounts effectively when tools, procedures, and senior escalation are already in place. The risk comes from leaving a junior employee as the only authority on security and infrastructure.
What does an MSP do that we might not know about?
Beyond the help desk, an MSP usually runs patching and device management tools, security monitoring, backups and restore tests, Microsoft 365 or Google Workspace administration, firewall and network configuration, vendor accounts, and documentation. Many of those tools are licensed to the MSP and leave when the contract ends.
Can Spot On Tech hire IT staff for us?
Yes. Compass covers role design, job descriptions, candidate search and screening, and technical interviews. The people hired are your employees.
Is Compass a one-time project or ongoing?
Either. Some companies use Compass for an assessment, a hiring effort, or a transition project. Others keep Spot On Tech running the platform behind their in-house team on an ongoing basis.
Can we keep our MSP for some things and bring the rest in-house?
Yes. Many companies keep outside help for security monitoring, after-hours coverage, or specialized projects while their own staff handle daily support. The important part is writing down who owns each responsibility so nothing is duplicated or missed.
