IT Network Infrastructure Engineer

DiGeronimo Companies•Brecksville, OH

3d•Onsite

About The Position

The IT Network Infrastructure Engineer is responsible for the administration, maintenance, and continuous improvement of DiGeronimo Companies’ network infrastructure and IT systems across all locations and operating companies. This role serves as a senior technical resource for network services, systems administration, and infrastructure security, ensuring the availability, integrity, and performance of the technology environment that supports DiGCo’s construction and civil engineering operations. The position partners with team members throughout the organization to deliver effective, secure solutions that promote business continuity and operational growth.

Requirements

Bachelor’s degree in information systems, computer science, or a related field, with 3–5 years of relevant work experience, or an equivalent combination of education and experience.
Proficiency in network infrastructure design, administration, and troubleshooting across LAN/WAN/SD-WAN environments.
Hands-on experience administering Palo Alto next-generation firewall and SD-WAN infrastructure.
Experience with Microsoft Azure, Entra ID, and Microsoft 365 administration, including Active Directory, Group Policy, and cloud identity services.
Experience with virtualization platforms (VMware or equivalent) and enterprise server administration.
Strong understanding of network security principles, including segmentation, NAC, identity and access management, and endpoint security.
Experience developing system requirements, technical documentation, and implementation plans.
Familiarity with ITIL/ITSM processes and change management frameworks.
Excellent communication and organizational skills; ability to convey technical information clearly to both technical and non-technical audiences.
Willingness to work outside of normal business hours and travel to other offices and job sites as needed. Participation in an on-call rotation is required.

Nice To Haves

Relevant professional certifications preferred but not required (CCNA, CCNP, PCNSE, CompTIA Security+, Network+, ITIL, MCSE).
Familiarity with managed SOC/SIEM platforms; Arctic Wolf experience preferred.

Responsibilities

Design, integrate, and implement secure technology solutions to support business operations across all DiGeronimo Companies locations and entities.
Provide senior-level administration for network infrastructure services, including: Software-Defined, Wide Area, and Local Area Networks (SD-WAN, WAN, LAN); Network hardware, operating systems, and routing protocols; Network authentication protocols (RADIUS, 802.1x, port security); Wireless networks, VoIP, VPN components, and firewall administration; Network security systems and applications (IDS/IPS, EDR, XDR, vulnerability scanners); Network servers and operating systems (virtual and physical); Microsoft Windows domain services (Active Directory, Group Policy, Microsoft 365); Enterprise storage systems, file and print services, and corporate messaging systems; Enterprise monitoring, alerting, and data management and restoration.
Manage network infrastructure implementations and changes, ensuring adherence to change management policies and procedures.
Provide advanced (Tier 2/3) troubleshooting support, root cause analysis, and problem resolution across infrastructure and systems platforms.
Utilize monitoring tools to analyze network traffic, system utilization, vulnerabilities, and uptime; generate usage reports and identify trends.
Conduct capacity planning through ongoing performance measurement and monitoring of network infrastructure.
Lead periodic network health and security assessments; provide recommendations for tuning, hardening, and improvement.
Engage in platform and enterprise-level solution architecture and design in partnership with IT leadership.
Advise on IT operational procedures and project initiatives to assess security requirements and implement appropriate controls.
Ensure secure identity and access management practices, including MFA and SSO (SAML/OAuth).
Administer and maintain Microsoft Azure and Entra ID environments, including virtual machine management, cloud networking, Conditional Access policies, and integration with on-premises infrastructure.
Administer and maintain SharePoint and Dropbox environments, including user access management, storage governance, sharing policies, and integration with organizational workflows.
Administer Palo Alto next-generation firewall and SD-WAN infrastructure across all DigCo facilities and connected sites.
Support Arctic Wolf SIEM/SOC operations, including participation in alert triage, incident response workflows, and detection improvement.
Familiar with NIST SP 800-171 compliance activities.
Drive operational efficiency through script development, automation, and adherence to technical standards.
Contribute to disaster recovery and business continuity plans; support periodic tests and simulations.
Assist in developing and maintaining information security awareness programs; support KnowBe4 administration and cybersecurity training initiatives.
Maintain accurate documentation for network design, processes, procedures, equipment inventory, and knowledge base.
Deliver technical and operational cross-training and mentorship to team members.
Demonstrate initiative in independent work and remain current on emerging technologies and security threats.
Undertake additional duties as assigned.