Senior Infrastructure & Security Engineer

BPP has recently completed a significant transformation to a modern Microsoft enterprise platform, including Microsoft 365 E5, Entra ID, Intune, Defender, Azure services, and a Cisco-based network infrastructure. The successful candidate will serve as the primary technical owner and subject matter expert for networking, infrastructure, cloud operations, identity security, and cybersecurity initiatives. Working alongside existing IT staff and strategic service providers, this individual will help establish internal ownership of critical technology platforms and reduce long-term reliance on managed service providers. This is a highly visible, hands-on engineering role that combines architecture, administration, operational support, security, project leadership, and technology strategy.Key Responsibilities: Infrastructure & Network Engineering:

• Own and administer Cisco Meraki networking environments, including switching, wireless, SD-WAN, VPN, and Firewall services.
• Manage Cisco Umbrella, Duo MFA, and related network security technologies.
• Design, implement, and maintain network architecture standards.
• Manage network performance, availability, monitoring, and troubleshooting.
• Lead network expansion and modernization initiatives.
• Serve as primary escalation point for complex infrastructure issues.
• Maintain network diagrams, standards, and technical documentation.

Security Engineering & Operations:

• Own operational administration of Microsoft Defender security solutions.
• Administer Microsoft Entra ID security controls, Conditional Access, and identity protection capabilities.
• Manage privileged access controls, RBAC, and security governance processes.
• Coordinate vulnerability management and remediation activities.
• Partner with eSentire and other security providers for incident response and threat management.
• Conduct risk assessments and security reviews.
• Lead implementation of security best practices aligned to Zero Trust principles.
• Develop and maintain cybersecurity policies, standards, and operational procedures.

Microsoft Cloud & Identity Administration:

• Administer Microsoft 365, Entra ID, Intune, and Azure environments.
• Support cloud architecture and platform governance initiatives.
• Manage identity lifecycle processes and authentication services.
• Support compliance, device management, and endpoint security initiatives.
• Participate in future cloud modernization and automation projects.
• Evaluate and implement improvements to Microsoft security and infrastructure platforms.

Technical Leadership & MSP Transition:

• Act as technical owner for infrastructure and security vendors.
• Develop plans to transition operational responsibilities from managed service providers to internal IT resources.
• Validate vendor recommendations and architectural decisions.
• Identify opportunities to improve service quality, operational efficiency, and cost effectiveness.
• Provide technical mentorship to engineers and support staff.

Service Delivery & Support:

• Serve as Tier III escalation resource.
• Participate in troubleshooting complex user and infrastructure issues.
• Support major incidents and problem management activities.
• Contribute to continuous improvement of support processes and documentation.
• Utilize Jira Service Management and established ITIL-style processes.

• 7+ years of experience in systems, infrastructure, networking, or cybersecurity roles.
• Experience administering Microsoft 365 environments.
• Experience with Microsoft Entra ID and identity security.
• Experience with Microsoft Defender security platforms.
• Strong networking fundamentals including routing, switching, VLANs, VPNs, wireless, and Firewall technologies.
• Experience supporting Cisco or Meraki environments.
• Strong troubleshooting and analytical skills.
• Experience creating technical documentation and operational procedures.
• Ability to work independently and drive technical initiatives.

Preferred:

• Experience transitioning services from MSP-supported environments to internal ownership.
• Experience with Cisco Meraki, Cisco Umbrella, and Duo.
• Experience with Microsoft Intune and endpoint management.
• Experience supporting Azure environments.
• Security Operations Center (SOC) collaboration experience.
• Manufacturing or multi-site environment experience.

Certifications Preferred:

• CCNA
• Security+
• SC-300
• AZ-500
• CISSP
• Meraki certifications

Core Competencies:

• Technical Infrastructure & Networking
• Cybersecurity & Risk Management
• Microsoft Cloud & Endpoint Management
• Technical Leadership & Strategic Ownership
• Operational Excellence & Service Delivery

CompensationThe base pay range for this role is $150,000 - $160,000 per year. Equal Opportunity Employer Butcher Power Products is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic. If you require a reasonable accommodation during the application or interview process, please let us know. Compensation ranges are provided in accordance with applicable state and local pay transparency laws.

Butcher Power Products (BPP) designs and manufactures mission critical and industrial power solutions for essential infrastructure nationwide. Headquartered in Sacramento, CA, our teams collaborate closely across engineering, manufacturing, and operations to build reliable, high quality systems and take pride in delivering work that truly matters.