Senior Infrastructure & Security Engineer

Location: 3249 Quality Drive Rancho Cordova, CA 95670

Department: Information Technology (Network, Security, Service Desk)

Location Type: IN_OFFICE

Employment Type: FULL_TIME

Infrastructure & Network Engineering:

• Own and administer Cisco Meraki networking environments, including switching, wireless, SD-WAN, VPN, and firewall services.
• Manage Cisco Umbrella, Duo MFA, and related network security technologies.
• Design, implement, and maintain network architecture standards.
• Manage network performance, availability, monitoring, and troubleshooting.
• Lead network expansion and modernization initiatives.
• Serve as primary escalation point for complex infrastructure issues.
• Maintain network diagrams, standards, and technical documentation.

Security Engineering & Operations:

• Own operational administration of Microsoft Defender security solutions.
• Administer Microsoft Entra ID security controls, Conditional Access, and identity protection capabilities.
• Manage privileged access controls, RBAC, and security governance processes.
• Coordinate vulnerability management and remediation activities.
• Partner with eSentire and other security providers for incident response and threat management.
• Conduct risk assessments and security reviews.
• Lead implementation of security best practices aligned to Zero Trust principles.
• Develop and maintain cybersecurity policies, standards, and operational procedures.

Microsoft Cloud & Identity Administration:

• Administer Microsoft 365, Entra ID, Intune, and Azure environments.
• Support cloud architecture and platform governance initiatives.
• Manage identity lifecycle processes and authentication services.
• Support compliance, device management, and endpoint security initiatives.
• Participate in future cloud modernization and automation projects.
• Evaluate and implement improvements to Microsoft security and infrastructure platforms.

Technical Leadership & MSP Transition:

• Act as technical owner for infrastructure and security vendors.
• Develop plans to transition operational responsibilities from managed service providers to internal IT resources.
• Validate vendor recommendations and architectural decisions.
• Identify opportunities to improve service quality, operational efficiency, and cost effectiveness.
• Provide technical mentorship to engineers and support staff.

Service Delivery & Support:

• Serve as Tier III escalation resource.
• Participate in troubleshooting complex user and infrastructure issues.
• Support major incidents and problem management activities.
• Contribute to continuous improvement of support processes and documentation.
• Utilize Jira Service Management and established ITIL-style processes.

Required:

• 7+ years of experience in systems, infrastructure, networking, or cybersecurity roles.
• Experience administering Microsoft 365 environments.
• Experience with Microsoft Entra ID and identity security.
• Experience with Microsoft Defender security platforms.
• Strong networking fundamentals including routing, switching, VLANs, VPNs, wireless, and firewall technologies.
• Experience supporting Cisco or Meraki environments.
• Strong troubleshooting and analytical skills.
• Experience creating technical documentation and operational procedures.
• Ability to work independently and drive technical initiatives.

Preferred:

• Experience transitioning services from MSP-supported environments to internal ownership.
• Experience with Cisco Meraki, Cisco Umbrella, and Duo.
• Experience with Microsoft Intune and endpoint management.
• Experience supporting Azure environments.
• Security Operations Center (SOC) collaboration experience.
• Manufacturing or multi-site environment experience.

Certifications Preferred:

• CCNA
• Security+
• SC-300
• AZ-500
• CISSP
• Meraki certifications

• Technical Infrastructure & Networking
• Cybersecurity & Risk Management
• Microsoft Cloud & Endpoint Management
• Technical Leadership & Strategic Ownership
• Operational Excellence & Service Delivery