Managed IT Services vs. In-House IT: The Real Cost Comparison for Mid-Market Companies
Most mid-market companies don’t set out to build an IT department. They hire one person to fix laptops, another to manage the network, maybe a third when security keeps them up at night. Before long, they’re running a five-person team that costs north of $800,000 a year, and they’re still not covered at 2 a.m. when something breaks.
I’ve spent 20-plus years building service delivery teams, and now as SVP and General Manager of Virteva, I see the full picture. The question I hear most from CFOs and COOs is simple: “Are we spending the right amount on IT, and are we getting what we should for it?” The answer, more often than not, is that they’re spending more than they realize and getting less than they need.
This isn’t a generic pros-and-cons breakdown. I want to walk through what a mid-market IT operation actually costs when you add up every line item, then compare that to what a managed services engagement looks like in practice.
What a 5-Person Internal IT Team Actually Costs
Let’s build a realistic team for a company with 200 to 500 employees. You need an IT Director to set strategy, a systems administrator, a network engineer, a security analyst, and a help desk technician. That’s a lean team. Most companies this size could justify six or seven.
Here’s what that costs in the Minneapolis market, based on 2025 salary data from Robert Half and the Bureau of Labor Statistics:
| Role | Base Salary | Fully Loaded Cost (benefits, taxes, training) |
|---|---|---|
| IT Director | $145,000 | $195,000 |
| Systems Administrator | $105,000 | $141,000 |
| Network Engineer | $115,000 | $155,000 |
| Security Analyst | $110,000 | $148,000 |
| Help Desk Technician | $55,000 | $74,000 |
| Total Personnel | $530,000 | $713,000 |
That $713,000 assumes a 34% burden rate for benefits, employer taxes, and baseline professional development. According to the Society for Human Resource Management, the actual burden rate for technical roles often runs closer to 40% when you factor in recruiting costs and the premium employers pay to retain cybersecurity talent in a tight labor market.
Now add the tooling and infrastructure your team needs to do their work:
| Category | Annual Cost |
|---|---|
| ITSM / ticketing platform (e.g., ServiceNow or Freshservice) | $25,000 – $60,000 |
| Security stack (EDR, SIEM, vulnerability scanning) | $40,000 – $80,000 |
| Microsoft 365 licensing and management tools | $30,000 – $50,000 |
| Monitoring and RMM software | $15,000 – $30,000 |
| Training and certifications | $15,000 – $25,000 |
| Recruiting costs (assume 1 hire/year at 20% placement fee) | $20,000 – $30,000 |
| Total Tooling and Overhead | $145,000 – $275,000 |
Add it together and you’re looking at $858,000 to $988,000 per year, call it roughly $900K at the midpoint, for a team that works Monday through Friday, 8 to 5, with limited after-hours coverage.
The Hidden Costs Nobody Budgets For
The spreadsheet above captures the obvious expenses. The costs that actually hurt are the ones that never show up in a budget line.
The Coverage Gap
Your five-person team gives you roughly 40 hours of coverage per week per person. But your systems run 168 hours a week. That leaves 128 hours where your infrastructure is effectively unmonitored, unless you’re paying overtime or rotating on-call shifts. According to CompTIA’s 2024 State of IT report, 54% of mid-market firms cite after-hours incident response as a significant gap in their IT operations.
If you want true 24/7 coverage with internal staff, you need a minimum of 8 to 10 people just for the service desk function. That’s not a rounding error. It’s a second team.
The Single Point of Failure Problem
What happens when your one security analyst leaves? According to (ISC)2’s 2024 Cybersecurity Workforce Study, the average time to fill a cybersecurity role is 4.8 months. During that window, your vulnerability management, incident response, and compliance monitoring either falls on someone unqualified or simply doesn’t get done.
I’ve seen this play out dozens of times. A company builds a solid security posture around one person’s expertise, that person takes another offer, and six months later the company is dealing with an audit finding or, worse, an incident that could have been caught.
The Opportunity Cost of Misallocated Leadership
Here’s the one that frustrates me the most. You’re paying an IT Director $145,000 to think strategically about how technology supports your business goals. But when the help desk is short-staffed or a server goes down, that director is pulling tickets. A Deloitte survey on CIO effectiveness found that IT leaders at mid-market companies spend an average of 58% of their time on operational tasks rather than strategic planning.
You’re paying for strategy and getting operations. That’s not a staffing problem. It’s a structural one.
What a Managed Services Engagement Looks Like
A managed IT services engagement for a 200- to 500-employee company typically runs between $300,000 and $550,000 annually, depending on scope and complexity. That range covers 24/7 monitoring and service desk support, infrastructure management, security operations, and vendor coordination.
Here’s why the economics work differently for a managed provider. At Virteva, we operate a delivery model that combines senior engineers in Minneapolis with a trained operations team in Manila. That’s not about cutting corners. It’s about solving the coverage math. Our Manila team handles overnight monitoring, first-response triage, and routine maintenance during U.S. off-hours, so our Minneapolis team can focus on complex engineering and client-facing strategic work during the business day.
This model means a company with 300 employees gets access to a deeper bench of specialists (security, cloud, networking, Microsoft platform) than they could ever afford to hire individually, with actual 24/7 coverage built into the engagement rather than bolted on as an afterthought.
Side-by-Side Comparison
| Factor | In-House (5 persons) | Managed Services |
|---|---|---|
| Annual cost | $860K – $990K | $300K – $550K |
| Coverage hours | ~50 hrs/week (with on-call) | 168 hrs/week |
| Security depth | 1 analyst (single point of failure) | Dedicated security team |
| Scalability | Hire, train, ramp (3-6 months) | Flex capacity on demand |
| Tool licensing | You buy and manage | Included in engagement |
| Strategic IT leadership | Pulled into operations | Freed to focus on strategy |
| Recruiting and retention risk | Ongoing | Provider’s responsibility |
The cost delta is meaningful, often $350,000 to $500,000 per year, but the real value is in what shifts structurally. Your IT Director stops managing tickets and starts working on the projects that move the business forward: ERP migrations, process automation, data strategy.
When In-House Still Makes Sense
I’m not going to pretend every company should outsource IT. If you’re in a heavily regulated industry with strict data residency requirements, or if technology is your core product and IT is deeply embedded in your R&D process, keeping a strong internal team makes sense.
The hybrid model is often the right answer for mid-market companies. Keep your IT Director and maybe one senior engineer in-house for strategic work and institutional knowledge. Shift operations, monitoring, and service desk to a managed provider. You get the cost efficiency and coverage of outsourcing with the strategic continuity of internal leadership.
How to Know Where You Stand
The gap between what companies think they’re spending on IT and what they’re actually spending is almost always larger than expected. When we run IT maturity assessments at Virteva, we typically find 15% to 25% in costs that don’t show up in the IT budget because they’re buried in department credit cards, shadow IT subscriptions, or time that non-IT employees spend troubleshooting their own problems.
If you’re a CFO or COO trying to figure out whether your current IT model is sustainable, start with the real numbers. Map every dollar, every hour of coverage, every gap in your current setup.
We offer a complimentary IT maturity assessment that benchmarks your current spend, coverage, and capabilities against companies of similar size and complexity. No pitch, just a clear picture of where you are and what your options look like.
