Sr. Network Engineer -Information Technology - Shift 1

NEW CARROT FARMS•Bakersfield, CA

21d•Hybrid

About The Position

This position will report to the Supervisor-Network Engineer and has a 10% travel requirement. The FLSA status is Exempt, and the shift is 1st. This is a Full-Time Regular position with a pay range of $100,000-$125,000. Bolthouse Fresh Foods is a leader in carrot production, serving as a grower, packer, processor, and shipper. Headquartered in Bakersfield, California, we are a proud employer to 1,600 dedicated individuals. Since 1915, we have been committed to growing and producing high-quality carrots, and today, we are one of North America’s largest growers and distributors of fresh carrots for cooking and snacking. Additionally, we supply premium natural ingredients for the food and beverage industry. With over a century of excellence, Bolthouse Fresh™ products are available at major retailers across North America. Bolthouse Fresh Foods has approximately 1,600 employees. The Senior Network Engineer is responsible for the design, implementation, security, and operational support of enterprise and industrial IT/OT network infrastructure across multiple locations. This position serves as a senior technical resource for network architecture, cybersecurity, cloud connectivity, operational technology environments, and critical infrastructure modernization while helping ensure the availability, reliability, and security of business-critical systems.

Requirements

Advanced knowledge of enterprise networking concepts, including TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, STP, QoS, and routing protocols.
Strong experience with Cisco, Palo Alto, Fortinet, Aruba, Meraki, or similar networking technologies.
Thorough understanding of network security principles and best practices.
Experience with SD-WAN, wireless network architecture, and cloud networking technologies.
Strong troubleshooting and analytical skills.
Ability to manage multiple projects and priorities in a fast-paced environment.
Excellent verbal and written communication skills.
Strong project management and organizational abilities.
Ability to mentor and develop technical team members.
Ability to communicate technical concepts to non-technical stakeholders.
Strong attention to detail and commitment to operational excellence
Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field; equivalent work experience may be considered.
Minimum of 7 years of progressive experience in network engineering, infrastructure management, or related IT roles.
Experience supporting enterprise-level network environments across multiple locations.
Experience configuring and managing routers, switches, firewalls, and wireless infrastructure.
Candidates must have a verifiable history of safe vehicle operation and meet company standards for driving eligibility. This includes maintaining a clean driving record, which will be verified through a background check.

Nice To Haves

Experience supporting manufacturing, distribution, operational technology, or industrial network environments.
Experience with firewall governance, segmentation strategy, network separation, merger/divestiture support, or major infrastructure migration initiatives.
Experience with camera systems, access control systems, NVRs, and physical security network infrastructure.
Experience developing technical standards, SOPs, runbooks, change-control documentation, and architecture diagrams.
Experience coordinating vendors, MSPs, consultants, plant operations teams, and cross-functional business stakeholders.
Palo Alto, Fortinet, Aruba, Meraki, AWS, or Azure networking certifications.
Project Management experience.

Responsibilities

Strengthens internal ownership of critical network infrastructure, firewall platforms, cloud connectivity, and IT/OT segmentation initiatives.
Supports strategic infrastructure initiatives requiring senior-level engineering, including network modernization, secure segmentation, WAN and cloud connectivity, and operational resiliency.
Reduces operational risk by improving escalation coverage, continuity of technical knowledge, and response capability for critical incidents.
Provides technical leadership that may reduce dependency on external consulting or managed service resources for routine engineering, design, troubleshooting, and implementation activities.
Design, implement, and maintain scalable and secure enterprise network architectures across corporate, plant, and remote-site environments.
Lead routing, switching, VLAN, VRF, DMZ, and zone-based segmentation design efforts.
Develop and maintain logical and physical network diagrams, IP addressing standards, configuration standards, and architecture documentation.
Architect resilient network solutions using redundant firewalls, high-availability switching, port-channeling, MLAG, and resilient WAN designs where appropriate.
Design, implement, and maintain firewall policies using least-privilege and Zero Trust principles.
Administer Fortinet firewall platforms, IPsec VPN, SSL VPN, and secure remote-access technologies.
Support segmentation, access-control, threat-reduction, and network security initiatives across enterprise and OT environments.
Participate in security reviews, audit support, incident response, and remediation planning as needed.
Design and support WAN connectivity, internet circuits, hybrid WAN, site-to-site VPN, and inter-site routing across multiple locations.
Support Microsoft Azure and hybrid cloud networking, including secure on-premises to cloud connectivity.
Troubleshoot complex ISP, routing, VPN, latency, packet loss, and connectivity issues.
Monitor network health, develop capacity plans, and recommend improvements to support performance and uptime objectives.
Support industrial network environments including PLCs, HMIs, plant-floor applications, production networks, and utility systems.
Design and maintain secure IT/OT segmentation models aligned with operational reliability and cybersecurity objectives.
Coordinate with plant operations, engineering, vendors, and maintenance teams to minimize downtime during network changes.
Support secure connectivity for manufacturing systems while maintaining business continuity and production availability.
Design, support, and continuously improve enterprise wireless networking, coverage, capacity, and performance.
Support network connectivity for camera systems, NVRs, access control, and other physical security infrastructure.
Ensure proper segmentation, bandwidth planning, and network resiliency for critical security systems.
Serve as a senior escalation point for complex network, firewall, routing, switching, wireless, VPN, and connectivity issues.
Lead root cause analysis, outage response, post-incident review, and corrective action planning.
Support change management, maintenance windows, implementation planning, rollback planning, and post-change validation.
Provide technical guidance, mentorship, and knowledge transfer to network engineers, support teams, vendors, and cross-functional stakeholders.
Act as a subject matter expert for network technologies and participate in architecture planning, vendor evaluations, and roadmap development.
Supports office, data center, manufacturing, plant-floor, and remote-site environments as required.
May participate in scheduled maintenance windows, after-hours changes, escalation support, and incident response activities.
May require occasional travel to company locations, remote sites, or vendor facilities based on business needs.
Reliable and secure operation of enterprise, cloud, WAN, wireless, firewall, and IT/OT network environments.
Timely delivery of approved network initiatives with clear documentation, validation, and change-control discipline.
Reduced operational risk through improved escalation coverage, knowledge transfer, standardization, and proactive remediation.
Performs other duties as assigned.