Infrastructure Network Engineer (Onsite)

We are seeking an experienced Infrastructure Network & Security Engineer to design, implement, and secure our customers' enterprise network infrastructures. This mid-level hybrid engineering position requires 5-7 years of hands-on experience spanning network architecture, implementation, and security operations. The ideal candidate will be a proactive problem-solver who can balance network infrastructure engineering with security monitoring and threat response, working both independently and collaboratively to deliver robust, scalable, and secure network solutions., Network Design & Architecture

• Design and architect enterprise LAN/WAN network solutions that meet business and security requirements
• Lead network infrastructure projects including upgrades, migrations, and new deployments
• Configure and deploy Cisco routing/switching platforms, firewalls (SonicWall, Cisco, Fortinet), and enterprise wireless solutions
• Monitor and respond to security alerts from Intune, Microsoft Defender, and other security platforms
• Utilize Auvik for network monitoring, mapping, performance analysis, and configuration management
• Implement and manage network security controls including firewalls, VPNs, IDS/IPS, and network access control (NAC)
• Troubleshoot complex network and security issues and perform root cause analysis
• Create and maintain network documentation including topology diagrams, security policies, and implementation plans
• Implement routing protocols (OSPF, BGP), network segmentation, VLANs, and ACLs
• Configure endpoint security policies through Intune and integrate with conditional access
• Mentor junior team members and collaborate with cross-functional IT teams

• 5-7 years of progressive experience in network engineering and infrastructure design
• Bachelor's degree in IT, Computer Science, or related field preferred

Technical Skills - Networking

• Expert knowledge of Cisco platforms (Nexus, Catalyst, ISR/ASR routers)
• Proficiency with SonicWall, Cisco Firewalls, or Fortinet
• Strong understanding of routing protocols (OSPF, BGP), TCP/IP, VLANs, ACLs
• Experience with enterprise wireless (Cisco, Aruba, or Ruckus)
• VPN technologies and network access control (NAC) experience
• Experience with Auvik or similar network monitoring platforms

Technical Skills - Security

• Experience with Microsoft Intune and Defender for Endpoint
• Security alert monitoring and incident response
• Knowledge of security frameworks (NIST, CIS Controls, Zero Trust)
• Familiarity with IDS/IPS, SIEM, and vulnerability scanners
• Understanding of conditional access and identity-based security

Professional Skills

• Excellent troubleshooting and problem-solving abilities
• Strong communication skills for technical and non-technical audiences
• Project management experience with infrastructure initiatives
• Ability to manage multiple priorities in a fast-paced environment, * CCIE or expert-level networking certifications
• Experience with Cisco ISE deployment
• Network automation tools (Ansible, Python, Terraform)
• Cloud networking experience (AWS, Azure, GCP)
• SIEM platforms (Splunk, Sentinel)
• MSP environment experience

Physical Requirements:

• Ability to stand and walk.
• Ability to reach above, at, or below waist height
• Ability to kneel, bend, stoop, turn and twist
• Ability to lift 25lb regularly and occasionally up to 50 lbs.

Safety:

• The incumbent must be able to perform this job safely without endangering the health or safety of self or others.

Supervisory Responsibility:

• The position currently has no people supervisory responsibility

Kretek International is America's #1 importer, marketer and distributor of specialty tobacco products, including high-end cigars, tobacco and alternative products, with such well-known brands as Djarum, Cuban Rounds and High Tea Herbal Wraps. Founded 38+ years ago, Kretek continues to grow and consistently seeks talented employees who can help the company do that. For more information, please visit: http://www.kretek.com