Senior Infrastructure and Security Engineer
Summary
Own and secure a modern Microsoft and Cisco-based IT stack: administer Azure, Entra ID, Defender, Intune, Cisco Meraki networks, and identity security while transitioning services from external providers to internal teams.
Senior Infrastructure & Security Engineer
Location: 3249 Quality Drive Rancho Cordova, CA 95670
Department: Information Technology (Network, Security, Service Desk)
Location Type: IN_OFFICE
Employment Type: FULL_TIME
Job Summary:
Butcher Power Products (BPP) is seeking a Senior Infrastructure & Security Engineer to join our growing Information Technology team. This is a unique opportunity for an experienced technology professional to help shape the future of IT operations within a rapidly evolving organization.
BPP has recently completed a significant transformation to a modern Microsoft enterprise platform, including Microsoft 365 E5, Entra ID, Intune, Defender, Azure services, and a Cisco-based network infrastructure. The successful candidate will serve as the primary technical owner and subject matter expert for networking, infrastructure, cloud operations, identity security, and cybersecurity initiatives.
Working alongside existing IT staff and strategic service providers, this individual will help establish internal ownership of critical technology platforms and reduce long-term reliance on managed service providers. This is a highly visible, hands-on engineering role that combines architecture, administration, operational support, security, project leadership, and technology strategy.
Key Responsibilities:
Infrastructure & Network Engineering:
- Own and administer Cisco Meraki networking environments, including switching, wireless, SD-WAN, VPN, and firewall services.
- Manage Cisco Umbrella, Duo MFA, and related network security technologies.
- Design, implement, and maintain network architecture standards.
- Manage network performance, availability, monitoring, and troubleshooting.
- Lead network expansion and modernization initiatives.
- Serve as primary escalation point for complex infrastructure issues.
- Maintain network diagrams, standards, and technical documentation.
Security Engineering & Operations:
- Own operational administration of Microsoft Defender security solutions.
- Administer Microsoft Entra ID security controls, Conditional Access, and identity protection capabilities.
- Manage privileged access controls, RBAC, and security governance processes.
- Coordinate vulnerability management and remediation activities.
- Partner with eSentire and other security providers for incident response and threat management.
- Conduct risk assessments and security reviews.
- Lead implementation of security best practices aligned to Zero Trust principles.
- Develop and maintain cybersecurity policies, standards, and operational procedures.
Microsoft Cloud & Identity Administration:
- Administer Microsoft 365, Entra ID, Intune, and Azure environments.
- Support cloud architecture and platform governance initiatives.
- Manage identity lifecycle processes and authentication services.
- Support compliance, device management, and endpoint security initiatives.
- Participate in future cloud modernization and automation projects.
- Evaluate and implement improvements to Microsoft security and infrastructure platforms.
Technical Leadership & MSP Transition:
- Act as technical owner for infrastructure and security vendors.
- Develop plans to transition operational responsibilities from managed service providers to internal IT resources.
- Validate vendor recommendations and architectural decisions.
- Identify opportunities to improve service quality, operational efficiency, and cost effectiveness.
- Provide technical mentorship to engineers and support staff.
Service Delivery & Support:
- Serve as Tier III escalation resource.
- Participate in troubleshooting complex user and infrastructure issues.
- Support major incidents and problem management activities.
- Contribute to continuous improvement of support processes and documentation.
- Utilize Jira Service Management and established ITIL-style processes.
Qualifications:
Required:
- 7+ years of experience in systems, infrastructure, networking, or cybersecurity roles.
- Experience administering Microsoft 365 environments.
- Experience with Microsoft Entra ID and identity security.
- Experience with Microsoft Defender security platforms.
- Strong networking fundamentals including routing, switching, VLANs, VPNs, wireless, and firewall technologies.
- Experience supporting Cisco or Meraki environments.
- Strong troubleshooting and analytical skills.
- Experience creating technical documentation and operational procedures.
- Ability to work independently and drive technical initiatives.
Preferred:
- Experience transitioning services from MSP-supported environments to internal ownership.
- Experience with Cisco Meraki, Cisco Umbrella, and Duo.
- Experience with Microsoft Intune and endpoint management.
- Experience supporting Azure environments.
- Security Operations Center (SOC) collaboration experience.
- Manufacturing or multi-site environment experience.
Certifications Preferred:
- CCNA
- Security+
- SC-300
- AZ-500
- CISSP
- Meraki certifications
Core Competencies:
- Technical Infrastructure & Networking
- Cybersecurity & Risk Management
- Microsoft Cloud & Endpoint Management
- Technical Leadership & Strategic Ownership
- Operational Excellence & Service Delivery