Systems Network Administrator, Senior

Mister Car Wash•Tucson, AZ

About The Position

We’re currently seeking a Sr. Systems Network Administrator to join our Headquarters team! The Systems Network Administrator, Sr. is responsible for the reliability, security, and performance of store and enterprise infrastructure across 500+ locations. You’ll be the hands-on lead across switching/routing, firewalls/VPNs, Wi-Fi, Windows Server, identity, and endpoint management automating wherever possible (Intune, Tanium, PowerShell & Python) and partnering closely with Field Operations to protect uptime, speed transactions, meet SOX & PCI DSS 4.0 compliance.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Network Engineering, or a related technical field, or equivalent practical experience. Relevant industry certifications may be considered in lieu of a formal degree when paired with demonstrated enterprise and multi-site infrastructure experience. Continued professional development through certifications such as Cisco, Microsoft, AWS, security, or networking disciplines is strongly encouraged.
7+ years enterprise networking (VLAN, QoS, routing/switching, firewalls, site-to-site & client VPNs) with Cisco Meraki and Dell switching (or equivalent).
5+ years' experience with: Ruckus Wi-Fi administration (RF design, roaming, auth/EAP, troubleshooting tools).
Windows Server, AD/Entra ID hybrid, DNS/DHCP, Group Policy; strong PowerShell.
Intune and Tanium for endpoint compliance, patching, and configuration.
Clear communicator who can translate technical issues for field and non-technical stakeholders.
Familiarity with PCI DSS 4.0 and SOX controls for network segmentation, secure wireless, logging/monitoring, and change management.
Exposure to AWS/Azure operations and basic IaC (Terraform/ARM) and CI/CD for infra.
Experience with observability/log pipelines (Grafana/Prometheus, Azure Monitor/Log Analytics, SIEM).
Experience in retail/branch or multi-site experience (car count spikes, POS/payment reliability, cellular backup/failover).
Scripting beyond PowerShell (Python), and automation of Meraki/Ruckus via APIs.

Nice To Haves

Preferred certifications (e.g., CCNP/DevNet, Ruckus WiSE, AZ-104/AZ-305, AWS SysOps, Security+).

Responsibilities

Network (Store + Enterprise): Administer and harden Cisco Meraki (MX/MS/MR) and Dell switching; maintain VLAN/QoS/IPAM standards and site-to-site/client VPNs.
Operate and optimize Ruckus Wi-Fi (RF tuning, roaming, auth/EAP, 802.11 standards); reduce disconnects and interference at high-throughput sites.
Build and maintain repeatable templates and runbooks for new sites, remodels, and acquisitions; drive consistent configs and zero-touch provisioning.
Servers/Identity/Endpoints: Administer Windows Server 2016/2019/2022, ADDS/Entra ID (hybrid), DNS/DHCP, modernize auth and conditional access.
Use Intune and Tanium to standardize device compliance, patching, BIOS/driver updates, and Windows 11 posture across stores and HQ.
Security & Compliance: Implement segmentation and least-privilege networking for PCI DSS 4.0 (CDE isolation, secure wireless, logging, change control).
Partner with InfoSec on vulnerability remediation (firmware/patch cadence, SSL/TLS, cipher standards) and evidence collection for audits/SOX.
Support core M365 services (Exchange Online, Teams, SharePoint/OneDrive) with an Operations-friendly approach.
Cloud & Automation: Operate workloads in AWS/Azure; script/automate with PowerShell (and Python as needed); contribute to Infrastructure as Code (IaC) patterns.
Build monitoring/alerting and KPIs (uptime, latency, packet loss, Wi-Fi health, patch compliance) using the existing stack (e.g., Grafana/Prometheus/Log Analytics, Meraki/Ruckus dashboards, Tanium reporting).
Lifecycle & Standards (ITOM/ITAM): Maintain accurate asset/config documentation, golden images, and store standards; plan End of Life/ End of Support (EoL/EoS) refresh cycles (Switch/AP/firewall/manager PCs/tablets).
Partner with Procurement/Vendors (SHI, carriers, etc.) on cost-effective, supportable solutions aligned to corporate pillars.