> Markdown version of [/jobs/ext/2566717-senior-infrastructure-security-engineer](https://www.wearedevelopers.com/jobs/ext/2566717-senior-infrastructure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Infrastructure & Security Engineer - **Company:** Butcher Power Products - **Location:** Rancho Cordova, CA, United States - **Experience:** Expert - **Salary:** $150,000.0 - $160,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, JIRA, Microsoft Azure, Microsoft Online Services, Cloud Computing, Cloud Engineering, Cyber Security, Identity and Access Management, Virtual Private Networks (VPN), Network Security, Microsoft Security Essentials, Network Architecture, Network Diagrams, Network Planning and Design, Routing, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Virtual Local Area Networks, Software Vulnerability Management, Wide Area Networks, Firewalls (Computer Science), Microsoft InTune, Cisco - **Published:** August 6, 2026 - **Apply:** https://www.careerboard.com/us/en/find-jobs-in-United-States/-FA27406BCEEDD73949/ ## About the Role * 7+ years of experience in systems, infrastructure, networking, or cybersecurity roles. * Experience administering Microsoft 365 environments. * Experience with Microsoft Entra ID and identity security. * Experience with Microsoft Defender security platforms. * Strong networking fundamentals including routing, switching, VLANs, VPNs, wireless, and Firewall technologies. * Experience supporting Cisco or Meraki environments. * Strong troubleshooting and analytical skills. * Experience creating technical documentation and operational procedures. * Ability to work independently and drive technical initiatives. Preferred: * Experience transitioning services from MSP-supported environments to internal ownership. * Experience with Cisco Meraki, Cisco Umbrella, and Duo. * Experience with Microsoft Intune and endpoint management. * Experience supporting Azure environments. * Security Operations Center (SOC) collaboration experience. * Manufacturing or multi-site environment experience. Certifications Preferred: * CCNA * Security+ * SC-300 * AZ-500 * CISSP * Meraki certifications Core Competencies: * Technical Infrastructure & Networking * Cybersecurity & Risk Management * Microsoft Cloud & Endpoint Management * Technical Leadership & Strategic Ownership * Operational Excellence & Service Delivery ## Description BPP has recently completed a significant transformation to a modern Microsoft enterprise platform, including Microsoft 365 E5, Entra ID, Intune, Defender, Azure services, and a Cisco-based network infrastructure. The successful candidate will serve as the primary technical owner and subject matter expert for networking, infrastructure, cloud operations, identity security, and cybersecurity initiatives. Working alongside existing IT staff and strategic service providers, this individual will help establish internal ownership of critical technology platforms and reduce long-term reliance on managed service providers. This is a highly visible, hands-on engineering role that combines architecture, administration, operational support, security, project leadership, and technology strategy.Key Responsibilities: Infrastructure & Network Engineering: * Own and administer Cisco Meraki networking environments, including switching, wireless, SD-WAN, VPN, and Firewall services. * Manage Cisco Umbrella, Duo MFA, and related network security technologies. * Design, implement, and maintain network architecture standards. * Manage network performance, availability, monitoring, and troubleshooting. * Lead network expansion and modernization initiatives. * Serve as primary escalation point for complex infrastructure issues. * Maintain network diagrams, standards, and technical documentation. Security Engineering & Operations: * Own operational administration of Microsoft Defender security solutions. * Administer Microsoft Entra ID security controls, Conditional Access, and identity protection capabilities. * Manage privileged access controls, RBAC, and security governance processes. * Coordinate vulnerability management and remediation activities. * Partner with eSentire and other security providers for incident response and threat management. * Conduct risk assessments and security reviews. * Lead implementation of security best practices aligned to Zero Trust principles. * Develop and maintain cybersecurity policies, standards, and operational procedures. Microsoft Cloud & Identity Administration: * Administer Microsoft 365, Entra ID, Intune, and Azure environments. * Support cloud architecture and platform governance initiatives. * Manage identity lifecycle processes and authentication services. * Support compliance, device management, and endpoint security initiatives. * Participate in future cloud modernization and automation projects. * Evaluate and implement improvements to Microsoft security and infrastructure platforms. Technical Leadership & MSP Transition: * Act as technical owner for infrastructure and security vendors. * Develop plans to transition operational responsibilities from managed service providers to internal IT resources. * Validate vendor recommendations and architectural decisions. * Identify opportunities to improve service quality, operational efficiency, and cost effectiveness. * Provide technical mentorship to engineers and support staff. Service Delivery & Support: * Serve as Tier III escalation resource. * Participate in troubleshooting complex user and infrastructure issues. * Support major incidents and problem management activities. * Contribute to continuous improvement of support processes and documentation. * Utilize Jira Service Management and established ITIL-style processes. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)