Senior Infrastructure & Security Engineer

Butcher Power Products•Rancho Cordova, CA

About The Position

Butcher Power Products (BPP) is seeking a Senior Infrastructure & Security Engineer to join our growing Information Technology team. This is a unique opportunity for an experienced technology professional to help shape the future of IT operations within a rapidly evolving organization. BPP has recently completed a significant transformation to a modern Microsoft enterprise platform, including Microsoft 365 E5, Entra ID, Intune, Defender, Azure services, and a Cisco-based network infrastructure. The successful candidate will serve as the primary technical owner and subject matter expert for networking, infrastructure, cloud operations, identity security, and cybersecurity initiatives. Working alongside existing IT staff and strategic service providers, this individual will help establish internal ownership of critical technology platforms and reduce long-term reliance on managed service providers. This is a highly visible, hands-on engineering role that combines architecture, administration, operational support, security, project leadership, and technology strategy.

Requirements

7+ years of experience in systems, infrastructure, networking, or cybersecurity roles.
Experience administering Microsoft 365 environments.
Experience with Microsoft Entra ID and identity security.
Experience with Microsoft Defender security platforms.
Strong networking fundamentals including routing, switching, VLANs, VPNs, wireless, and firewall technologies.
Experience supporting Cisco or Meraki environments.
Strong troubleshooting and analytical skills.
Experience creating technical documentation and operational procedures.
Ability to work independently and drive technical initiatives.

Nice To Haves

Experience transitioning services from MSP-supported environments to internal ownership.
Experience with Cisco Meraki, Cisco Umbrella, and Duo.
Experience with Microsoft Intune and endpoint management.
Experience supporting Azure environments.
Security Operations Center (SOC) collaboration experience.
Manufacturing or multi-site environment experience.
CCNA
Security+
SC-300
AZ-500
CISSP
Meraki certifications

Responsibilities

Own and administer Cisco Meraki networking environments, including switching, wireless, SD-WAN, VPN, and firewall services.
Manage Cisco Umbrella, Duo MFA, and related network security technologies.
Design, implement, and maintain network architecture standards.
Manage network performance, availability, monitoring, and troubleshooting.
Lead network expansion and modernization initiatives.
Serve as primary escalation point for complex infrastructure issues.
Maintain network diagrams, standards, and technical documentation.
Own operational administration of Microsoft Defender security solutions.
Administer Microsoft Entra ID security controls, Conditional Access, and identity protection capabilities.
Manage privileged access controls, RBAC, and security governance processes.
Coordinate vulnerability management and remediation activities.
Partner with eSentire and other security providers for incident response and threat management.
Conduct risk assessments and security reviews.
Lead implementation of security best practices aligned to Zero Trust principles.
Develop and maintain cybersecurity policies, standards, and operational procedures.
Administer Microsoft 365, Entra ID, Intune, and Azure environments.
Support cloud architecture and platform governance initiatives.
Manage identity lifecycle processes and authentication services.
Support compliance, device management, and endpoint security initiatives.
Participate in future cloud modernization and automation projects.
Evaluate and implement improvements to Microsoft security and infrastructure platforms.
Act as technical owner for infrastructure and security vendors.
Develop plans to transition operational responsibilities from managed service providers to internal IT resources.
Validate vendor recommendations and architectural decisions.
Identify opportunities to improve service quality, operational efficiency, and cost effectiveness.
Provide technical mentorship to engineers and support staff.
Serve as Tier III escalation resource.
Participate in troubleshooting complex user and infrastructure issues.
Support major incidents and problem management activities.
Contribute to continuous improvement of support processes and documentation.
Utilize Jira Service Management and established ITIL-style processes.