Network & Security Engineer

About the role

J ob Title: Network & Security Engineer ABOUT US: Bayer Built Woodworks is a premier manufacturer and distributor of high-quality interior and exterior doors, millwork, and stair systems. As a family-owned company based in Minnesota, we proudly serve the Midwest with industry-leading service, exceptional craftsmanship, and a deep commitment to customer success. Our team is passionate about providing reliable products and outstanding support to builders, dealers, and homeowners alike. At Bayer Built, we believe our people are the foundation of our continued success, and we're dedicated to fostering a culture of integrity, safety, and growth. THE QUICK DETAILS: Job Type: Full-time, and job is located in Belgrade, MN Pay: $80,000-$120,000/year Hours: Monday - Friday Paid Vacation & ESST Time Holiday Pay Hospital Indemnity, Accident and Critical Illness Insurance Minnesota Paid Family & Medical Leave Job Summary The Network & Security Engineer is responsible for maintaining, securing, and improving the organization's network and security infrastructure across enterprise environments. This role supports network connectivity, firewalls, switching, routing, wireless, VPNs, and cybersecurity technologies while helping protect systems, users, and data from security threats. The position works closely with infrastructure and business teams to ensure reliable, secure, and resilient technology services.

What you'll do

• Networking & Security Configure, maintain, and troubleshoot enterprise switching, routing, wireless, VLANs, firewalls, and VPNs.
• Maintain secure connectivity between company locations, cloud environments, remote users, and external partners.
• Implement network segmentation, firewall policies, IDS/IPS, and other security controls.
• Monitor network performance and security events and proactively identify issues.
• Troubleshoot complex connectivity, performance, and network security problems.
• Cybersecurity Monitor and investigate security alerts involving network, endpoint, identity, and cloud environments.
• Participate in cybersecurity incident response, including investigation, containment, remediation, and documentation.
• Support vulnerability management and coordinate remediation of identified vulnerabilities.
• Assist with Microsoft security technologies including Defender, Entra ID, Intune, Conditional Access, and identity protection.
• Apply security best practices including least privilege, zero trust, and defense in depth.
• Infrastructure & Monitoring Support network connectivity for on-premises infrastructure, Microsoft Azure, SaaS applications, and disaster recovery environments.
• Maintain network and security monitoring, alerting, and logging.
• Assist infrastructure teams with Active Directory, Windows Server, virtualization, and other systems where network or security expertise is required.
• Participate in infrastructure upgrades, lifecycle planning, disaster recovery testing, and technology projects.
• Documentation & Collaboration Maintain network diagrams, configurations, standards, procedures, and security documentation.
• Serve as an escalation resource for network and security issues.
• Coordinate with technology vendors, service providers, and other IT teams.
• Participate in after-hours maintenance and incident response when necessary.

What you'll bring

• A bachelor's degree in information technology, Cybersecurity, Computer Science, or a related discipline with 3–5 years of relevant experience, or an equivalent combination of education and experience.
• Strong knowledge of TCP/IP, switching, routing, VLANs, DNS, DHCP, NAT, firewalls, VPNs, and wireless networking.
• Experience configuring and troubleshooting enterprise network and security technologies.
• Understanding of cybersecurity principles, vulnerability management, and incident response.
• Experience with Active Directory, Microsoft Entra ID, Microsoft 365, and endpoint security technologies.
• Familiarity with cloud networking, preferably
• Microsoft Azure. Strong troubleshooting, analytical, documentation, and communication skills.
• Ability to independently manage technical issues and projects while collaborating with other IT teams.
• Experience with Cisco Meraki, Aruba switching, and enterprise wireless technologies.
• Experience with Microsoft Defender, Intune, Entra ID, and Conditional Access.
• Experience with Dynatrace or similar monitoring and observability platforms.
• Microsoft environments. Familiarity with PowerShell or other automation technologies.
• Knowledge of NIST, CIS Controls, and zero-trust security principles.
• Certifications such as CCNA/CCNP, Security+, AZ-700, SC-200, or SC-300.
• Employment Type: Full Time

Benefits

• Health insurance Dental insurance
• Team Member Life Insurance / Dependent Life Insurance Short- & Long-Term Disability 401(k) - 401(k) matching