IT Systems Engineer (Cloud, Security, Automat at Schweid & Sons

East Rutherford, New Jersey, United States -

Full Time

Start Date

Immediate

Expiry Date

28 May, 26

Salary

120000.0

Posted On

27 Feb, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Azure, Entra Id, Intune, M365, Automation, Network Infrastructure, Security, PowerShell, Terraform, Vulnerability Assessment, Disaster Recovery, Endpoint Engineering, OT Systems, Firewalls, Conditional Access, IaC

Industry

Food and Beverage Manufacturing

Description

About Schweid & Sons Schweid & Sons is a family-owned and operated premium ground beef company with a proud heritage spanning four generations. We supply top-quality beef to Retail, Foodservice, and National Account customers across the U.S. and are committed to quality, customer service, and innovation in protein manufacturing. Role Overview We are looking for a builder, not just a fixer. The IT Systems Engineer (Cloud, Security, Automation & Network Operations) will own the modernization of our infrastructure, moving us from manual support processes to a "Modern Management" architecture. You will be responsible for the architecture, security, and administration of our Microsoft cloud stack (Azure, Entra ID, Intune, M365), core infrastructure, network systems, and operations technology (OT). Your goal is to engineer out the need for repetitive support tickets through automation and robust policy design while ensuring network reliability and operational continuity. Key Responsibilities 1. Cloud Infrastructure & Identity (Azure/M365) * Serve as the Subject Matter Expert (SME) for Microsoft Entra ID (formerly Azure AD), managing conditional access, app registrations, and lifecycle management. * Manage Azure resources, including VM maintenance, virtual networking, storage accounts, Azure Monitor, and cost optimization. * Execute the upgrade and maintenance roadmap for SQL Server environments, including Azure SQL databases. * Architect and maintain M365 services including Exchange Online, SharePoint, Teams, and OneDrive for Business. * Optimize M365 licensing, service health monitoring, and tenant-wide configuration management. * Implement Azure governance policies, resource tagging strategies, and subscription management best practices. 2. Endpoint Engineering (Intune/Autopilot) * Design and maintain Microsoft Intune for all endpoints (Windows/Mac/Mobile). * Implement Windows Autopilot to achieve zero-touch provisioning for new hires. * Create remediation scripts to automatically fix common endpoint issues before they become tickets. 3. Network Infrastructure & Operations Technology * Design, implement, and maintain enterprise network infrastructure including switches, routers, firewalls, and wireless access points. * Manage VPN configurations, VLAN segmentation, Azure Virtual Network (VNet) peering, and hybrid connectivity solutions (ExpressRoute, Site-to-Site VPN). * Monitor network performance and troubleshoot connectivity issues across on-premises and cloud environments. * Oversee Operations Technology (OT) systems, including building management systems, access control, and industrial network components. * Ensure proper network segmentation between IT and OT environments for security and operational integrity. 4. Security & Compliance * Hardening of the M365 environment using Defender for Endpoint, Defender for Identity, and Microsoft Defender for Cloud. * Manage vulnerability assessments and patch management strategies across IT, OT, and cloud systems. * Lead Disaster Recovery (DR) planning, documentation, and annual testing, including Azure Site Recovery implementation. * Implement and maintain network security controls including firewalls, Azure Firewall, Network Security Groups (NSGs), IDS/IPS, and network access control (NAC). * Manage M365 compliance features including Data Loss Prevention (DLP), retention policies, and eDiscovery. 5. Automation & Escalation * Utilize PowerShell and Azure CLI to automate repetitive administrative tasks (user onboarding, reporting, bulk changes, network configuration, Azure resource deployment). * Act as the final point of escalation (L3) for complex technical issues that L1/L2 cannot resolve. * Mentor junior staff on modern IT practices, cloud architecture, and network operations. * Develop and maintain Infrastructure as Code (IaC) using Azure Resource Manager (ARM) templates or Terraform. Qualifications * Experience: 3-5+ years in Systems Engineering or Administration with demonstrated cloud, network, and operations technology experience. * Core Tech Stack: Deep expertise in the Microsoft ecosystem: Intune, Autopilot, Entra ID, Azure, M365 (Exchange Online, SharePoint, Teams), and Office 365 admin center. * Azure Expertise: Hands-on experience with Azure IaaS/PaaS services, Azure Active Directory (Entra ID), Azure networking, and hybrid cloud architectures. * Network Technologies: Strong hands-on experience with enterprise networking: Cisco/HP/Aruba switches and routers, Palo Alto/Fortinet firewalls, wireless infrastructure, and SD-WAN solutions. * Operations Technology: Familiarity with OT/IoT systems, building automation, and industrial network protocols (Modbus, BACnet, etc.). * Scripting: Intermediate to Advanced proficiency in PowerShell is required; experience with Azure CLI and automation frameworks is preferred. * Networking: Solid understanding of DNS, DHCP, VPN, firewall configurations, routing protocols (BGP, OSPF), Azure networking (VNets, NSGs, ExpressRoute), and network monitoring tools. * Soft Skills: Ability to explain complex technical risks to non-technical stakeholders. * Certifications (Preferred): Microsoft Certified: Azure Administrator Associate, Azure Solutions Architect Expert, M365 Certified: Enterprise Administrator Expert, or equivalent networking certifications (CCNA, CCNP). Success Metrics (First 90 Days) * Full deployment of Intune Autopilot for new laptop provisioning. * Successful audit and security hardening of the existing Entra ID and M365 environment. * Complete Azure infrastructure review, cost optimization recommendations, and governance policy implementation. * Complete network infrastructure audit and documentation of all network devices, topologies, OT systems, and Azure networking architecture. * Documentation of all core infrastructure, cloud services, and network workflows.  What We Offer * The expected compensation for this role is $85,000 - $120,000 per year, depending on experience and qualifications. Final compensation will be discussed during the interview process. * Time Off: PTO, Safe & Sick Time, and Paid Holidays. * Health Benefits: Medical, vision, dental, HRA and voluntary disability benefits. * Financial Benefits: 401(k) + employer match and life insurance. * Location: This is an on-site role located in East Rutherford, NJ (hybrid). * Environment: Our facility is refrigerated. In this role you will be exposed to < 40 degrees for multiple hours of the day.

Responsibilities

The IT Systems Engineer will modernize infrastructure by moving from manual support to a 'Modern Management' architecture, focusing on the architecture, security, and administration of the Microsoft cloud stack, core infrastructure, network systems, and Operations Technology (OT). Key duties include engineering out repetitive support tickets through automation, robust policy design, and ensuring network reliability and operational continuity.