May 25, 2026
If you've talked to more than one IT provider, you've probably heard them mention "Tier 1" and "Tier 2" support. It's one of those industry conventions that's never really explained to customers.
Here's what the tiers actually mean — and more importantly, why understanding them helps you read your IT bill and evaluate quotes more accurately.
The three tiers (and a fourth)
Tier 1 (L1): the front line
Tier 1 is the help desk technician who picks up the phone or answers the email when something goes wrong. Their job is to resolve common, recurring issues quickly — password resets, printer drivers, "Outlook won't open," "my screen flickers," "I can't connect to the VPN."
A good L1 tech resolves 60–75% of tickets without escalating. They follow runbooks for known issues and document everything they touch. The skill ceiling is moderate; the volume is high; the response time should be measured in minutes, not hours.
Tier 2 (L2): the workhorse
Tier 2 is where the trickier stuff goes — things L1 couldn't resolve in 15 minutes. Network troubleshooting, Active Directory / Entra ID issues, Microsoft 365 administration problems, more involved Windows or macOS issues, line-of-business application problems that require deeper investigation.
L2 techs have stronger Windows, networking, and infrastructure experience. They can investigate root cause, not just patch symptoms. Most MSPs have 1 L2 for every 3–4 L1s.
Tier 3 (L3): the engineers
Tier 3 is where the deep technical work happens — server migrations, firewall design, complex network architecture, security incident response, performance tuning, virtualization, cloud architecture. These are senior engineers, typically with 8+ years of experience and significant certifications.
L3 tickets are rare but high-impact. When an L3 gets involved, something significant is either broken or being designed.
"Tier 4" (sometimes called L4 or escalation): vendor and specialist support
Some MSPs call this fourth tier "L4" — the cases that have to escalate to a vendor (Microsoft, Cisco, Fortinet, Sophos) or a specialist firm (e.g. cybersecurity incident response). These tickets are usually the highest-stakes and slowest to resolve because they involve coordinating multiple parties.
Why this matters for your IT bill
Tier costs vary dramatically:
- L1 tech: typically $35–$55/hr fully loaded
- L2 tech: $65–$95/hr
- L3 engineer: $125–$185/hr
- L4 / vendor escalation: $200–$400/hr
When an MSP says "our managed services include unlimited support" but you're seeing surprise charges, look at what tier the work was done at. Many MSPs include L1/L2 in their flat rate but bill L3 work as a project.
An honest contract will tell you in writing what's included and what isn't. Our standard managed IT services include all four tiers without additional billing — including after-hours emergencies. You can see what we put in writing on our pricing page.
What "follow the sun" and "shift coverage" actually mean
National MSPs often advertise "24/7 follow-the-sun coverage." In practice this usually means: during business hours, you're talking to L1 techs in their primary US office. After-hours, you're talking to L1 techs in a Manila or Pune offshore office, with a US-based on-call L3 available for emergencies.
This is fine if all you need is password resets. It's a problem if you're calling at 2am because your Exchange server is corrupted.
Our model is different: every Ener Systems engineer is in Louisiana. Day or night, the person you reach knows your environment. We don't have offshore coverage. The trade-off is that our after-hours response is "best-effort within 60 minutes" rather than "always-on within 5 minutes" — for most SMBs, that's the right trade-off, but you should know which model your MSP runs.
How to use this when evaluating MSPs
When you're comparing quotes, ask:
- What tier does my routine work get done at? If everything gets routed through L1 (and L1 is offshore), you're going to spend a lot of time getting escalated.
- Is L3 work included in the flat rate, or billed as projects? Server migrations, firewall replacements, and security incident response shouldn't appear as line items if you're paying for "managed services."
- What's the on-call structure for after-hours emergencies? Is there an L3 you can actually reach, or just an L1 who has to escalate?
- Who's on the account? Many MSPs assign a "primary contact" who is L1. You want named L2 and L3 engineers who know your environment.
Want to talk through your specific situation?
Book a free 15-minute discovery call. No high-pressure pitch — just a straight conversation about whether we're a fit.
