Network & Security Engineer

Bayer Built Woodworks•Belgrade, MN

12d•$80,000 - $120,000•Onsite

About The Position

The Network & Security Engineer maintains, secures, and improves Bayer Built Woodworks’ network and security infrastructure across enterprise environments. The role supports network connectivity, firewalls, switching, routing, wireless, VPNs, and cybersecurity technologies, helping protect systems, users, and data from security threats. The engineer works with infrastructure and business teams to provide reliable, secure, and resilient technology services. The position is based in Belgrade, Minnesota, is full-time, and is scheduled Monday through Friday. The stated pay range is $80,000–$120,000 per year. The role may involve after-hours maintenance and incident response when necessary.

Requirements

A bachelor’s degree in information technology, cybersecurity, computer science, or a related discipline with 3–5 years of relevant experience, or an equivalent combination of education and experience.
Strong knowledge of TCP/IP, switching, routing, VLANs, DNS, DHCP, NAT, firewalls, VPNs, and wireless networking.
Experience configuring and troubleshooting enterprise network and security technologies.
Understanding of cybersecurity principles, vulnerability management, and incident response.
Experience with Active Directory, Microsoft Entra ID, Microsoft 365, and endpoint security technologies.
Familiarity with cloud networking, preferably Microsoft Azure.
Strong troubleshooting, analytical, documentation, and communication skills.
Ability to independently manage technical issues and projects while collaborating with other IT teams.

Nice To Haves

Experience with Cisco Meraki, Aruba switching, and enterprise wireless technologies.
Experience with Microsoft Defender, Intune, Entra ID, and Conditional Access.
Experience with Dynatrace or similar monitoring and observability platforms.
Experience with VMware and hybrid Microsoft environments.
Familiarity with PowerShell or other automation technologies.
Knowledge of NIST, CIS Controls, and zero-trust security principles.
Certifications such as CCNA/CCNP, Security+, AZ-700, SC-200, or SC-300.

Responsibilities

Configure, maintain, and troubleshoot enterprise switching, routing, wireless, VLANs, firewalls, and VPNs.
Maintain secure connectivity between company locations, cloud environments, remote users, and external partners.
Implement network segmentation, firewall policies, IDS/IPS, and other security controls.
Monitor network performance and security events and proactively identify issues.
Troubleshoot complex connectivity, performance, and network security problems.
Monitor and investigate security alerts involving network, endpoint, identity, and cloud environments.
Participate in cybersecurity incident response, including investigation, containment, remediation, and documentation.
Support vulnerability management and coordinate remediation of identified vulnerabilities.
Assist with Microsoft security technologies, including Defender, Entra ID, Intune, Conditional Access, and identity protection.
Apply security best practices, including least privilege, zero trust, and defense in depth.
Support network connectivity for on-premises infrastructure, Microsoft Azure, SaaS applications, and disaster recovery environments.
Maintain network and security monitoring, alerting, and logging.
Assist infrastructure teams with Active Directory, Windows Server, virtualization, and other systems where network or security expertise is required.
Participate in infrastructure upgrades, lifecycle planning, disaster recovery testing, and technology projects.
Maintain network diagrams, configurations, standards, procedures, and security documentation.
Serve as an escalation resource for network and security issues.
Coordinate with technology vendors, service providers, and other IT teams.
Participate in after-hours maintenance and incident response when necessary.