> Markdown version of [/jobs/ext/4721526-network-and-systems-engineer](https://www.wearedevelopers.com/jobs/ext/4721526-network-and-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Network and Systems Engineer

- **Company:** Domani Salon & Spa, LLC
- **Location:** St. Helena, CA, United States
- **Experience:** Experienced
- **Salary:** $100,000 - $120,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Apple Mac Systems, Systems Engineering, Bash Shell, Spanning Tree Protocols, Software as a Service, Linux, Multi-Factor Authentication, Firmware, Hyper-V, Virtual Private Networks (VPN), Internet Service Provider, Python (Programming Language), Windows Servers, Network Diagrams, Network Planning and Design, Routing, Open Shortest Path First (OSPF), Windows PowerShell, Runbook, Microsoft SharePoint, Security Information and Event Management, Virtual Local Area Networks, Wide Area Networks, Wireless Access Point, Wi-Fi Technology, Scripting, Peripherals, Sonicwall, Firewalls (Computer Science), Microsoft InTune, National Institute of Standards and Technology Cybersecurity Framework, CIS Benchmarks, Firewall Services Module, Veeam, Network Server, SentinelOne Expertise, Cisco, Docker
- **Published:** November 14, 2026
- **Apply:** https://www.winebusiness.com/classifieds/winejobs/?go=replyExternal&listingid=315701

## About the Role

6+ years in IT, including 3+ owning infrastructure
Deep Microsoft 365, Windows Server, Hyper V, and AD experience; strong Windows 10/11 troubleshooting; Linux and Docker
Enterprise networking: routing, VLANs, OSPF, BPDU Guard, firewall rules, VPN, Wi-Fi
EDR/SIEM and incident response; backup and DR design and testing
Scripting in PowerShell, Python, Bash, or comparable scripting language; SSO and SCIM setup
Track record of delivering infrastructure projects end to end
Valid driver's license, travel between sites, and ability to lift 50 lbs and work in server rooms, offices and outdoor areas

Preferred qualifications
Experience with Unifi network design and migration from Cisco, Ruckus, or SonicWall
Familiarity with security frameworks (NIST CSF, CIS Controls)
Bilingual (English/Spanish) and able to provide support to diverse teams, desired but not required

Culture Fit
Clear, patient communication with non-technical users and organized ticket and documentation habits
Positive attitude with a passion for IT and continuous learning
Natural problem-solving skills focused on finding quality resolutions
Must be a team player, willing to support the team where needed
Takes on any task, from network and systems configuration changes to swapping out printer toner

Physical requirements
Able to lift up to 50 lbs.
Sit for extended periods.
Able to walk up and downstairs frequently.
Able to bend, kneel, push, and pull.

## Description

Join a small, highly technical team supporting a world-renowned winery, helping modernize IT from on-premises systems to a cloud-first, zero-trust model. The role combines infrastructure support with hands-on helpdesk and end-user support. Ensuring that employees are supported for their technical needs, while also delivering on core infrastructure responsibilities.

The role is entrusted with
Networking: Manage LAN/WAN/Wi-Fi, firewalls, VPN and help implement a zero-trust model. Help migrate from Cisco, Ruckus and SonicWall to a standardized UniFi platform. Handle hands-on tasks like cable patching, labeling, cameras, and access point and switch replacements.

Systems and identity: Administer Dell servers, Docker, Hyper-V, Windows Servers/AD, and help in the retirement of on-premises AD in favor of Entra ID, SharePoint and OneDrive. Serve as Microsoft 365 tenant admin (Intune, Conditional Access, MFA, Exchange, Teams) and govern app registrations and admin roles.

Security: Harden configurations and manage patching and firmware. Respond to SentinelOne and Blumira alerts, from first response through incident response.

SaaS and backup: Manage SaaS platforms (Freshservice, Level.io), including SSO, SCIM, and licensing. Run Veeam backups and DRaaS with scheduled restore testing.

Helpdesk and end-user support: Work the Freshservice queue, triaging and closing tickets within agreed response times and documenting fixes. Set up, image and enroll Windows devices in Intune, and support Windows, macOS, Linux, Microsoft 365 apps, mobile devices, and peripherals. Handle onboarding and offboarding (accounts, licenses, mailboxes, MFA, equipment) and routine Entra ID tasks like password resets and group changes. Support AV for meetings and events, and maintain printers, scanners, desk phones and conference room equipment.

Operations: Maintain network diagrams, runbooks, and hardware and software inventory with asset tags. Write knowledge base articles and how-to guides, work with vendors and ISPs.