Infrastructure Administrator

5920 Dry Creek Ln NE Cedar Rapids, IA 52402, USA Description Role Summary The Network & Infrastructure Administrator is responsible for supporting, maintaining, securing, and continuously improving Engineered Seal Products’ global network and infrastructure environment. This role helps ensure reliable connectivity, secure access, and high availability across branch locations, cloud environments, remote users, and business-critical systems. Who are we? Engineered Seal Products, a 55-year-old employee-owned business that Thrives Together through Employee Ownership to Drive Customer Success. We specialize in Engineered Sealing and Supply Chain Solutions for Global Customers. Our ever-growing list of customers are in the Oil and Gas, Mining, Fuel, Aerospace, EV/Semiconductor, Agriculture, Construction, and Food and Beverage markets. We all work together to hit our Big Hairy Audacious Goals (BHAGs)! What makes us unique? Our Passion and Expertise is driven by an engaged Employee Ownership Culture, providing high level Service to not only our Customers and Suppliers, but each other, making today better and our future secure. We define our culture as one that wants the individual and the company to grow vigorously, flourish and prosper together; in a word: thrive! This is a hands-on technical position with a primary emphasis on network administration, including Azure cloud networking, SD-WAN, WAN and LAN connectivity, Azure ExpressRoute, client VPN, firewalls, wireless infrastructure, routing, switching, network segmentation, and provider-managed network services. This particular role is responsible for: The position also contributes to shared infrastructure responsibilities, including Microsoft 365, Microsoft Azure, identity systems, endpoint connectivity, monitoring, documentation, and operational troubleshooting. The Network & Infrastructure Administrator works closely with systems administrators, support personnel, service providers, and other stakeholders to support infrastructure, security, compliance, and operational initiatives. Core Expectations for All Employees All employees are expected to: Deliver high-quality work within established timelines Work both independently and collaboratively Communicate proactively and professionally Provide excellent service to internal and external customers Demonstrate accountability and ownership mindset Contribute positively to team and company culture Essential Job Functions Administer, monitor, and troubleshoot ESP’s WAN, LAN, SD-WAN, wireless, routing, switching, VLAN, subnetting, segmentation, and remote-access infrastructure across branch locations, cloud environments, and remote users Manage secure network connectivity and access controls, including firewalls, NAT, site-to-site VPNs, client VPNs, security zones, wireless security, administrative access, and least-privilege access practices Support Azure networking and hybrid connectivity, including virtual networks, subnets, route tables, network security groups, Azure ExpressRoute, cloud-to-site connectivity, and access to Microsoft 365 and other cloud services Maintain reliable access to business-critical systems, including ERP platforms, Microsoft cloud services, branch systems, third-party connections, and remote-user resources. Monitor network availability, performance, latency, capacity, and alerts Investigate recurring incidents, perform root-cause analysis, and implement durable corrective actions Maintain accurate network diagrams, IP address records, firewall and VPN documentation, circuit and provider information, configuration standards, troubleshooting notes, and operational procedures Plan and implement network changes using appropriate testing, documentation, communication, and change-management practices Collaborate with MIS team members, ISPs, carriers, vendors, consultants, and managed service providers on support escalations, outages, infrastructure changes, security improvements, compliance activities, and project work Provide Tier 2 technical support for network, connectivity, Microsoft 365, identity, and infrastructure-related issues; collaborate with support personnel on escalations, root-cause analysis, and issue resolution Support end-user technology initiatives including office moves, onboarding activities, connectivity troubleshooting, and operational support efforts as required Participate in scheduled maintenance activities that may occasionally occur outside normal business hours Core Competencies (Role-Specific) Strong ownership, accountability, follow-through, and commitment to reliable outcomes Strong analytical and troubleshooting skills across network, cloud, infrastructure, security, and user-impacting issues Understanding of how networking, identity, endpoints, cloud services, and business applications interact Security-minded approach to configuration, access, monitoring, documentation, and change management Ability to balance urgent support needs with planned maintenance, projects, documentation, and long-term improvements Clear communication skills, including the ability to explain technical issues, risks, options, and recommendations to technical and non-technical stakeholders Strong documentation habits, including maintaining accurate diagrams, procedures, configuration records, troubleshooting notes, and support information Resourcefulness and willingness to research and learn unfamiliar technologies Collaborative approach with a willingness to share knowledge, support teammates, and contribute to shared MIS objectives Calm, methodical, and professional response during outages, security events, connectivity issues, and other business-impacting incidents Practical decision-making that balances reliability, security, business requirements, cost, and operational complexity Commitment to providing responsive, professional support to internal customers while balancing operational priorities and project responsibilities Technical and Functional Skills Required Technical Skills Strong WAN and LAN networking fundamentals, including routing, switching, VLANs, subnetting, segmentation, DNS, DHCP, IP addressing, and L2/L3 troubleshooting Hands-on experience administering and troubleshooting firewalls, NAT, access policies, security zones, site-to-site VPNs, and client VPN technologies Experience supporting wireless infrastructure, remote access, branch connectivity, and multi-site network availability Working knowledge of Azure networking, including virtual networks, subnets, route tables, network security groups, cloud connectivity, and hybrid access patterns Ability to monitor network performance, respond to alerts, troubleshoot packet flow and latency issues, identify root causes, and implement corrective actions Familiarity with Microsoft 365, Active Directory, Microsoft Entra ID, multifactor authentication, Conditional Access, and secure remote-access concepts Understanding of secure administration practices, including hardened configurations, logging, vulnerability remediation, and incident response support Strong technical documentation skills, including network diagrams, configuration records, standards, procedures, and troubleshooting notes Experience supporting and troubleshooting end-user connectivity, Microsoft 365, authentication, remote access, and infrastructure-related service requests Preferred Technical Skills Experience supporting or administering SD-WAN in a production business environment Experience with Azure ExpressRoute, hybrid networking, cloud-to-site connectivity, or segmented cloud network design Experience supporting a multi-branch, distributed, or international organization Experience with enterprise firewall platforms, centralized firewall management, security policy reviews, and firewall-rule cleanup Experience with infrastructure monitoring, centralized logging, vulnerability management, or alert-tuning platforms Exposure to NIST SP 800-171, CMMC, CUI handling requirements, customer security requirements, or comparable cybersecurity frameworks Experience coordinating with ISPs, telecommunications carriers, managed service providers, consultants, or cybersecurity vendors Experience with PowerShell, scripting, automation, or infrastructure as code Relevant certifications, such as CCNA, Network+, Security+, Microsoft Azure certifications, firewall vendor certifications, or equivalent practical experience Education & Experience Required Bachelor’s degree in Information Systems, Computer Science, Information Technology, Network Administration, Cybersecurity, or a related field; or an equivalent combination of education, certifications, and relevant professional experience Five or more years of progressive experience in network administration, infrastructure support, systems administration, cybersecurity operations, or a related information technology role Working Conditions & Physical Requirements Work is primarily performed in an office environment with generally quiet noise levels. Physical requirements associated with performing the essential functions of this position include: Regularly sitting, speaking, listening, and viewing a computer monitor Frequently using hands and fingers to operate a computer and other equipment Occasionally standing, walking, reaching, bending, or working near network and infrastructure equipment Occasionally lifting or moving computer and networking equipment Occasional travel to branch or business locations Participation in a rotating on-call schedule, currently approximately once week every five weeks, which may require responding to urgent incidents outside normal business hours Reasonable accommodations may be made to enable individuals with disabilities to perform essential job functions. If you have experience working in the area explained above, or want to learn, this role could be a great fit. You will love it here if you: Take Ownership Have Fun Create Raving Fans Have your co-worker’s back Put value in every day As a member of our team, you will have a leader who: Makes sure you have the necessary tools Acts with the greater good in mind Delegates appropriately Takes time to truly understand your role and how you can help the company Makes their expectations clear Communicates well Meets one-on-one with you quarterly or more, if needed Rewards and recognizes your performance Disclaimer This job description reflects the general nature and level of work performed in this role and is not intended to be a complete list of all responsibilities. Duties may change based on business needs.Engineered Seal Products is an equal opportunity employer. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor. #J-18808-Ljbffr