Systems Network Administrator, Senior

Mister Car Wash•Tucson, AZ

About The Position

Mister Car Wash is rewriting the rules of the car wash industry. Headquartered in Tucson, Arizona, we are the nation's largest and fastest growing multibillion dollar car wash company with over 500 car washes in 21 states! We wash cars for the fun of it. We put people first. We help turn jobs into careers. We’re currently seeking a Sr. Systems Network Administrator to join our Headquarters team! The Systems Network Administrator, Sr. is responsible for the reliability, security, and performance of store and enterprise infrastructure across 500+ locations. You’ll be the hands-on lead across switching/routing, firewalls/VPNs, Wi-Fi, Windows Server, identity, and endpoint management automating wherever possible (Intune, Tanium, PowerShell & Python) and partnering closely with Field Operations to protect uptime, speed transactions, meet SOX & PCI DSS 4.0 compliance.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Network Engineering, or a related technical field, or equivalent practical experience.
7+ years enterprise networking (VLAN, QoS, routing/switching, firewalls, site-to-site & client VPNs) with Cisco Meraki and Dell switching (or equivalent).
5+ years' experience with: Ruckus Wi-Fi administration (RF design, roaming, auth/EAP, troubleshooting tools).
Windows Server, AD/Entra ID hybrid, DNS/DHCP, Group Policy; strong PowerShell.
Intune and Tanium for endpoint compliance, patching, and configuration.
Clear communicator who can translate technical issues for field and non-technical stakeholders.
Familiarity with PCI DSS 4.0 and SOX controls for network segmentation, secure wireless, logging/monitoring, and change management.
Exposure to AWS/Azure operations and basic IaC (Terraform/ARM) and CI/CD for infra.
Experience with observability/log pipelines (Grafana/Prometheus, Azure Monitor/Log Analytics, SIEM).
Experience in retail/branch or multi-site experience (car count spikes, POS/payment reliability, cellular backup/failover).
Scripting beyond PowerShell (Python), and automation of Meraki/Ruckus via APIs.

Nice To Haves

Relevant industry certifications may be considered in lieu of a formal degree when paired with demonstrated enterprise and multi-site infrastructure experience.
Continued professional development through certifications such as Cisco, Microsoft, AWS, security, or networking disciplines is strongly encouraged.
Preferred certifications (e.g., CCNP/DevNet, Ruckus WiSE, AZ-104/AZ-305, AWS SysOps, Security+).

Responsibilities

Network (Store + Enterprise): Administer and harden Cisco Meraki (MX/MS/MR) and Dell switching; maintain VLAN/QoS/IPAM standards and site-to-site/client VPNs.
Operate and optimize Ruckus Wi-Fi (RF tuning, roaming, auth/EAP, 802.11 standards); reduce disconnects and interference at high-throughput sites.
Build and maintain repeatable templates and runbooks for new sites, remodels, and acquisitions; drive consistent configs and zero-touch provisioning.
Servers/Identity/Endpoints: Administer Windows Server 2016/2019/2022, ADDS/Entra ID (hybrid), DNS/DHCP, modernize auth and conditional access.
Use Intune and Tanium to standardize device compliance, patching, BIOS/driver updates, and Windows 11 posture across stores and HQ.
Security & Compliance: Implement segmentation and least-privilege networking for PCI DSS 4.0 (CDE isolation, secure wireless, logging, change control).
Partner with InfoSec on vulnerability remediation (firmware/patch cadence, SSL/TLS, cipher standards) and evidence collection for audits/SOX.
Support core M365 services (Exchange Online, Teams, SharePoint/OneDrive) with an Operations-friendly approach.
Cloud & Automation: Operate workloads in AWS/Azure; script/automate with PowerShell (and Python as needed); contribute to Infrastructure as Code (IaC) patterns.
Build monitoring/alerting and KPIs (uptime, latency, packet loss, Wi-Fi health, patch compliance) using the existing stack (e.g., Grafana/Prometheus/Log Analytics, Meraki/Ruckus dashboards, Tanium reporting).
Lifecycle & Standards (ITOM/ITAM): Maintain accurate asset/config documentation, golden images, and store standards; plan End of Life/ End of Support (EoL/EoS) refresh cycles (Switch/AP/firewall/manager PCs/tablets).
Partner with Procurement/Vendors (SHI, carriers, etc.) on cost-effective, supportable solutions aligned to corporate pillars.