Sr. Network Engineer -Information Technology - Shift 1

Job Description

Job Description

THE ROLE:

• This position will report to the: Supervisor-Network Engineer 
• Travel requirements: 10%
• FLSA Status: Exempt
• Shift: 1st
• Employment Category: Full-Time Regular
• Pay Range: $100,000-$125,000

STRONG HISTORY. EXCITING FUTURE

Bolthouse Fresh Foods is a leader in carrot production, serving as a grower, packer, processor, and shipper. Headquartered in Bakersfield, California, we are a proud employer to 1,600 dedicated individuals. Since 1915, we have been committed to growing and producing high-quality carrots, and today, we are one of North America’s largest growers and distributors of fresh carrots for cooking and snacking. Additionally, we supply premium natural ingredients for the food and beverage industry. With over a century of excellence, Bolthouse Fresh™ products are available at major retailers across North America. 

Bolthouse Fresh Foods has approximately 1,600 employees. 

WHAT YOU’LL BE RESPONSIBLE FOR IN THIS ROLE

The Senior Network Engineer is responsible for the design, implementation, security, and operational support of enterprise and industrial IT/OT network infrastructure across multiple locations. This position serves as a senior technical resource for network architecture, cybersecurity, cloud connectivity, operational technology environments, and critical infrastructure modernization while helping ensure the availability, reliability, and security of business-critical systems.

Business Value and Strategic Alignment

• Strengthens internal ownership of critical network infrastructure, firewall platforms, cloud connectivity, and IT/OT segmentation initiatives.
• Supports strategic infrastructure initiatives requiring senior-level engineering, including network modernization, secure segmentation, WAN and cloud connectivity, and operational resiliency.
• Reduces operational risk by improving escalation coverage, continuity of technical knowledge, and response capability for critical incidents.
• Provides technical leadership that may reduce dependency on external consulting or managed service resources for routine engineering, design, troubleshooting, and implementation activities.

Network Architecture and Engineering

· Design, implement, and maintain scalable and secure enterprise network architectures across corporate, plant, and remote-site environments.

· Lead routing, switching, VLAN, VRF, DMZ, and zone-based segmentation design efforts.

· Develop and maintain logical and physical network diagrams, IP addressing standards, configuration standards, and architecture documentation.

· Architect resilient network solutions using redundant firewalls, high-availability switching, port-channeling, MLAG, and resilient WAN designs where appropriate.

Network Security and Firewall Engineering

· Design, implement, and maintain firewall policies using least-privilege and Zero Trust principles.

· Administer Fortinet firewall platforms, IPsec VPN, SSL VPN, and secure remote-access technologies.

· Support segmentation, access-control, threat-reduction, and network security initiatives across enterprise and OT environments.

· Participate in security reviews, audit support, incident response, and remediation planning as needed.

WAN, Cloud, and Connectivity

· Design and support WAN connectivity, internet circuits, hybrid WAN, site-to-site VPN, and inter-site routing across multiple locations.

· Support Microsoft Azure and hybrid cloud networking, including secure on-premises to cloud connectivity.

· Troubleshoot complex ISP, routing, VPN, latency, packet loss, and connectivity issues.

· Monitor network health, develop capacity plans, and recommend improvements to support performance and uptime objectives.

Operational Technology and Manufacturing Network Support

· Support industrial network environments including PLCs, HMIs, plant-floor applications, production networks, and utility systems.

· Design and maintain secure IT/OT segmentation models aligned with operational reliability and cybersecurity objectives.

· Coordinate with plant operations, engineering, vendors, and maintenance teams to minimize downtime during network changes.

· Support secure connectivity for manufacturing systems while maintaining business continuity and production availability.

Wireless, Physical Security, and Infrastructure Systems

· Design, support, and continuously improve enterprise wireless networking, coverage, capacity, and performance.

· Support network connectivity for camera systems, NVRs, access control, and other physical security infrastructure.

· Ensure proper segmentation, bandwidth planning, and network resiliency for critical security systems.

Operations, Troubleshooting, and Leadership

· Serve as a senior escalation point for complex network, firewall, routing, switching, wireless, VPN, and connectivity issues.

· Lead root cause analysis, outage response, post-incident review, and corrective action planning.

· Support change management, maintenance windows, implementation planning, rollback planning, and post-change validation.

· Provide technical guidance, mentorship, and knowledge transfer to network engineers, support teams, vendors, and cross-functional stakeholders.

· Act as a subject matter expert for network technologies and participate in architecture planning, vendor evaluations, and roadmap development.

Work Environment and Availability

· Supports office, data center, manufacturing, plant-floor, and remote-site environments as required.

· May participate in scheduled maintenance windows, after-hours changes, escalation support, and incident response activities.