System Administrator / Network Engineer - Dallas, TX

Building Controls & Solutions•Farmers Branch, TX

13h•$89,000 - $95,000•Onsite

About The Position

We are seeking a skilled System Administrator / Network Engineer to support, modernize, and secure our multi-site IT infrastructure. This role is hands-on, operational, and project-focused—spanning Microsoft 365, Azure, network engineering, firewall/wireless modernization, endpoint management, and cross‑team collaboration. You will play a key role in our transition from Fortinet/FortiGate firewalls, switches and APs to an Ubiquiti UniFi-based infrastructure, while also supporting ongoing Azure, Microsoft 365, SD‑WAN, and site‑to‑site modernization efforts. Who are we? Building Controls & Solutions (BCS) is a leading provider of energy management, building controls, automation, and gas detection solutions for the commercial HVAC community, including distribution of products, in-market value added services, and a “smart” path towards using IoT and the Cloud for building automation. Serving mechanical, electrical and controls contractors working in the Commercial building markets, as well as end users (property management companies, school districts, hospitals, etc.) and integrators, the company offers a wide array of HVAC controls, gas detection systems, flow measurement, security and access control, lighting control, wireless, analytics and IoT technologies. As a distributor and service provider, BCS brings global product brands and inventory together with local in-market technical resources. “Our value starts with high quality products and is truly enhanced by solutions that bring customized value-added services to our commercial building customers every day,” says CEO, Eric Chernik. www.buildingcontrolsandsolutions.com

Requirements

5+ years combined experience in system administration and network engineering.
Strong hands-on knowledge of Microsoft 365/Entra ID, Windows Server, and Azure fundamentals.
Experience administering firewalls (Fortinet preferred) and strong familiarity with network concepts: TCP/IP, routing, switching, VLANs, DHCP, DNS, and VPN.
Experience with multi-site architecture and site-to-site connectivity.
Experience with Ubiquiti UniFi (gateways, switches, APs) or strong willingness to ramp up quickly.
Experience with RMM/endpoint tools (NinjaOne strongly preferred).
PowerShell or similar automation/scripting proficiency.
Strong troubleshooting skills across identity, OS, network, and cloud layers.

Nice To Haves

Experience executing network infrastructure migrations (firewalls, wireless, switching).
Experience with SD‑WAN technologies.
Experience with Azure ExpressRoute, VNET gateways, or BGP‑based connectivity.
Certifications such as:
Fortinet NSE 4–7 (or equivalent network certs)
Ubiquiti UEWA/UXG/UNS
Microsoft AZ‑104, SC‑300, or related
CCNA/CCNP

Responsibilities

Systems Administration (Microsoft 365, Entra ID & Azure)
Manage Microsoft 365/Entra ID identity lifecycle, licensing, MFA, Conditional Access, and security baselines.
Support Azure network integrations including firewalls, VNET gateways, routing, and hybrid connectivity.
Manage Windows endpoints and servers; automate administrative tasks with PowerShell.
Maintain compliance and security posture across enterprise endpoints.
Administrate endpoint monitoring, patching, and deployment using NinjaOne.
Network Engineering (Fortinet → Ubiquiti UniFi Migration)
Support current Fortinet/FortiGate infrastructure during transition, including firewall policies, NAT, VPN/IPsec tunnels, VLANs, and multi‑site routing.
Participate in the organization-wide migration from Fortinet/FortiGate to Ubiquiti UniFi by:
Designing UniFi gateway, switching, and wireless architectures.
Standing up and managing UniFi Network Controllers / UniFi OS.
Migrating sites from Fortinet to UniFi with minimal downtime.
Converting firewall policies, SSIDs, VLANs, and routing configurations.
Documenting UniFi baselines, standards, and deployment procedures.
Maintain stable and secure multi-site connectivity, including SD‑WAN, VPN, and cloud‑connected services.
Security & Compliance
Maintain identity, endpoint, network, and cloud security baselines.
Review and update firewall rules, segmentation, and zero-trust-aligned controls.
Respond to incidents across endpoints, identity, network, and cloud.
Ensure consistent patching, alerting, and configuration hardening.
Operations & Support
Act as Tier‑3 escalation for complex tickets involving networking, cloud, identity, and endpoint issues.
Produce runbooks, SOPs, and configuration documentation.
Collaborate with MSPs, vendors, and cross‑functional internal teams.
Contribute to change management through planning, testing, and approvals.
Project Leadership & Continuous Improvement
Lead or support projects such as:
Site network cutovers and SD‑WAN transitions.
Azure connectivity improvements.
Endpoint fleet modernization.
Wireless redesigns.
Firewall and network segmentation transformations.
Evaluate and implement emerging technologies to strengthen performance, security, and operational efficiency.