Somewhere around the twenty-employee mark, most business owners have the same thought: maybe we should just hire someone.
It’s a reasonable instinct. Technology has become a daily concern rather than an occasional one. Waiting on an outside provider feels inefficient. Having someone in the building who knows your systems, sits in your meetings, and answers immediately sounds obviously better than a support queue.
Sometimes it is. Often it isn’t, and the reasons have less to do with cost than most people expect.
The honest cost picture
Let’s deal with money first, since it drives most of these decisions — but let’s do it properly, because the comparison people usually run is misleading.
Hiring an IT person means a salary, and salary is only part of it. Add payroll taxes, benefits, paid leave, equipment, training and certification, recruitment costs, and the management time someone will spend supervising a role they don’t fully understand.
For a competent generalist IT professional in Northern California, the fully loaded annual cost typically lands somewhere between $85,000 and $120,000 depending on experience. A genuine security specialist costs considerably more, and they’re hard to recruit.
Managed IT services for a business of twenty to thirty staff generally cost a fraction of that — often between a quarter and a third, depending on scope.
That gap looks decisive, and it’s the number most comparisons stop at. But cost isn’t really the interesting part of this decision, because it’s not where in-house arrangements actually run into trouble.
Where in-house genuinely wins
Being fair about this matters, because the answer isn’t universally one direction.
Institutional knowledge. Someone who has been in your business for three years knows why that process works the odd way it does, which client hates change, and what happened the last time you tried to standardise something. That knowledge is real and it takes an outside provider a long time to accumulate.
Immediate physical presence. For businesses with unusual hardware, laboratory equipment, manufacturing systems, or anything requiring hands-on attention regularly, having someone in the building has obvious value.
Bespoke internal systems. If your business runs on custom software or a heavily customised setup, having someone dedicated to understanding it deeply can be worth more than broad general expertise.
Cultural fit. An in-house person attends meetings, understands strategy, and can advocate for technology decisions in a way an external provider can’t quite manage.
Businesses with fifty-plus staff, complex custom environments, or genuinely unusual technical requirements are frequently better served by an internal team — often supplemented by outside specialists rather than replacing them entirely.
The three problems nobody anticipates
Where in-house arrangements struggle, they struggle for reasons that aren’t visible when the decision gets made.
One person cannot cover the ground
The expectation placed on a single hire is quietly enormous.
They’re supposed to handle helpdesk work, network administration, server maintenance, security, backup management, vendor relationships, procurement, strategic planning, and compliance documentation. Those are genuinely different disciplines, and no individual is strong across all of them.
What happens in practice is predictable: the urgent crowds out the important. Helpdesk tickets arrive constantly and visibly, so they get handled. Backup testing, patch compliance, security reviews, and documentation produce no immediate pressure, so they slide.
Eighteen months later the business has someone who is genuinely busy every day and a security posture that hasn’t been reviewed since they started. Not through any failing of theirs — there simply weren’t enough hours, and nobody was measuring the things that got dropped.
Coverage has gaps by definition
One person is one person.
They take holidays. They get ill. They attend training. They have evenings and weekends, and eventually they leave — at which point institutional knowledge that was never documented walks out with them.
Businesses handle this by having the IT person available on their phone during time off, which works until it doesn’t and tends to accelerate the departure it was meant to prevent.
Meanwhile, problems don’t confine themselves to business hours. Ransomware is typically triggered on Friday evenings and holiday weekends specifically because nobody is watching.
Nobody is monitoring while they’re doing something else
This is the structural issue, and it’s the one that matters most.
An in-house person handling a helpdesk queue is not simultaneously watching for a drive reporting errors, a backup that silently failed, unusual login activity, or the network reconnaissance an attacker performs during the weeks before triggering anything.
Monitoring isn’t a task someone does. It’s a system that runs continuously and escalates to people when something warrants attention. A single hire without that system is doing skilled work with no visibility into what’s happening underneath.
What managed services actually provide
Setting aside marketing language, here’s what the model genuinely delivers that a single hire cannot.
Breadth of expertise. A network specialist, a security specialist, a backup and recovery specialist, and a Microsoft 365 specialist — accessed as needed rather than hoped for in one person. You’re buying a team’s range at a fraction of one salary.
Continuous monitoring as infrastructure. Systems watching everything around the clock, escalating to humans when something needs attention. This is what catches problems that produce no visible symptom, which is most of the ones that matter.
Coverage that doesn’t take holidays. No single point of failure. No knowledge walking out the door.
Documentation as a by-product. Monitoring produces logs. Scheduled testing produces reports. Automated patching produces compliance figures. When an insurer or a client asks for evidence, the answer takes an afternoon rather than a scramble.
Tools that are uneconomic for one business. Enterprise monitoring platforms, threat intelligence, and security tooling cost more than most businesses could justify alone but get spread across a provider’s client base.
Predictable cost. A fixed monthly figure you can budget around, rather than salary plus whatever specialist help turns out to be necessary.
Making the comparison honestly
| Consideration | In-House Hire | Managed Services |
| Annual cost (20–30 staff) | $85k–$120k+ loaded | Typically a quarter to a third |
| Range of expertise | One person’s skill set | Multiple specialists |
| Coverage | Business hours, minus leave | Continuous |
| Monitoring | Manual, when there’s time | Automated, always |
| Business knowledge | Deep | Builds over time |
| Physical presence | Immediate | Remote-first, onsite as needed |
| Documentation | Depends entirely on the person | Systematic |
| Scaling | Hire another person | Adjust the agreement |
| Key-person risk | High | Minimal |
A model most businesses overlook
The choice isn’t actually binary, and the hybrid arrangement suits a great many organisations better than either extreme.
Here, the business employs someone internal — often not a pure IT specialist, but an operations person who handles day-to-day requests, knows the business intimately, and coordinates with users. Meanwhile a managed provider handles infrastructure, security, monitoring, backup, and the specialist work that a generalist shouldn’t be expected to cover.
The internal person gets to focus on what they’re genuinely good at, without the pressure of being solely responsible for things they were never trained for. The business gets specialist depth and continuous monitoring without a second and third hire.
This works particularly well for businesses in the thirty-to-eighty range, where a single hire is stretched but a full internal team isn’t yet justified.
Which fits your business
Rough guidance, based on what we see rather than what sounds tidy:
Managed services usually make sense if you have fewer than about forty staff, you hold client financial, medical, or legal data, you’re asked for security evidence by insurers or clients, or you don’t have anyone qualified to supervise a technical hire.
An in-house hire usually makes sense if you’re above fifty or sixty staff, you run genuinely unusual or custom systems, you need regular hands-on attention to physical equipment, or you already have technical leadership who can manage and develop the role.
A hybrid arrangement usually makes sense if you’re somewhere between, or if you have an internal person who’s stretched, or if you value having someone in the building but recognise they can’t cover everything alone.
What to do before deciding
If you’re weighing this now, three steps will clarify things considerably.
First, list what actually needs doing. Not “IT support” as a category, but the specific work: helpdesk requests, patch management, backup verification, security monitoring, vendor coordination, strategic planning, compliance documentation. Then estimate hours against each. Most businesses are surprised by how much sits outside the helpdesk work they were picturing.
Second, check what’s currently being missed. Ask when the last actual restore test happened, what your patch compliance percentage is, and whether MFA is enforced on every account without exception. The answers tell you what your current arrangement — whatever it is — isn’t covering.
Third, price the real comparison. Fully loaded salary against a managed proposal for the same scope. And be honest about whether one hire genuinely covers the list from step one, because that’s usually where the calculation turns.
Where to leave it
The instinct to hire someone comes from a real place: technology has become important enough to your business that occasional attention isn’t sufficient anymore.
That instinct is correct. The question is whether one person, however capable, is the right way to answer it — or whether what you actually need is continuous coverage, specialist depth in several disciplines, and someone watching while everyone gets on with their work.
For most businesses under forty staff, it’s the second. For larger or more unusual operations, it genuinely isn’t. And for a good number in between, some combination serves better than either.
Request a free quote and we’ll price a managed arrangement against the specific work your business needs covered — then tell you honestly whether hiring would serve you better. We’ve told businesses that before, and we’d rather do that than take on work that doesn’t fit. Call 209-920-4077 or send through your details.
