Network & Security Engineer

Job Title: Network & Security Engineer

ABOUT US: Bayer Built Woodworks is a premier manufacturer and distributor of high-quality interior and exterior doors, millwork, and stair systems. As a family-owned company based in Minnesota, we proudly serve the Midwest with industry-leading service, exceptional craftsmanship, and a deep commitment to customer success. Our team is passionate about providing reliable products and outstanding support to builders, dealers, and homeowners alike. At Bayer Built, we believe our people are the foundation of our continued success, and we’re dedicated to fostering a culture of integrity, safety, and growth.

THE QUICK DETAILS:

• Job Type: Full-time, and job is located in Belgrade, MN
• Pay: $80,000-$120,000/year
• Hours: Monday - Friday 

BENEFITS:

• Health insurance
• Dental insurance
• Team Member Life Insurance / Dependent Life Insurance
• Short- & Long-Term Disability
• 401(k) - 401(k) matching
• Paid Vacation & ESST Time
• Holiday Pay
• Hospital Indemnity, Accident and Critical Illness Insurance
• Minnesota Paid Family & Medical Leave

Job Summary

The Network & Security Engineer is responsible for maintaining, securing, and improving the organization’s network and security infrastructure across enterprise environments. This role supports network connectivity, firewalls, switching, routing, wireless, VPNs, and cybersecurity technologies while helping protect systems, users, and data from security threats. The position works closely with infrastructure and business teams to ensure reliable, secure, and resilient technology services.

Essential Responsibilities

Networking & Security

• Configure, maintain, and troubleshoot enterprise switching, routing, wireless, VLANs, firewalls, and VPNs.
• Maintain secure connectivity between company locations, cloud environments, remote users, and external partners.
• Implement network segmentation, firewall policies, IDS/IPS, and other security controls.
• Monitor network performance and security events and proactively identify issues.
• Troubleshoot complex connectivity, performance, and network security problems.

Cybersecurity

• Monitor and investigate security alerts involving network, endpoint, identity, and cloud environments.
• Participate in cybersecurity incident response, including investigation, containment, remediation, and documentation.
• Support vulnerability management and coordinate remediation of identified vulnerabilities.
• Assist with Microsoft security technologies including Defender, Entra ID, Intune, Conditional Access, and identity protection.
• Apply security best practices including least privilege, zero trust, and defense in depth.

Infrastructure & Monitoring

• Support network connectivity for on-premises infrastructure, Microsoft Azure, SaaS applications, and disaster recovery environments.
• Maintain network and security monitoring, alerting, and logging.
• Assist infrastructure teams with Active Directory, Windows Server, virtualization, and other systems where network or security expertise is required.
• Participate in infrastructure upgrades, lifecycle planning, disaster recovery testing, and technology projects.

Documentation & Collaboration

• Maintain network diagrams, configurations, standards, procedures, and security documentation.
• Serve as an escalation resource for network and security issues.
• Coordinate with technology vendors, service providers, and other IT teams.
• Participate in after-hours maintenance and incident response when necessary.

Required Qualifications

Education: A bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related discipline with 3–5 years of relevant experience, or an equivalent combination of education and experience.

• Strong knowledge of TCP/IP, switching, routing, VLANs, DNS, DHCP, NAT, firewalls, VPNs, and wireless networking.
• Experience configuring and troubleshooting enterprise network and security technologies.
• Understanding of cybersecurity principles, vulnerability management, and incident response.
• Experience with Active Directory, Microsoft Entra ID, Microsoft 365, and endpoint security technologies.
• Familiarity with cloud networking, preferably Microsoft Azure.
• Strong troubleshooting, analytical, documentation, and communication skills.
• Ability to independently manage technical issues and projects while collaborating with other IT teams.

Preferred Qualifications

• Experience with Cisco Meraki, Aruba switching, and enterprise wireless technologies.
• Experience with Microsoft Defender, Intune, Entra ID, and Conditional Access.
• Experience with Dynatrace or similar monitoring and observability platforms.
• Experience with VMware and hybrid Microsoft environments.
• Familiarity with PowerShell or other automation technologies.
• Knowledge of NIST, CIS Controls, and zero-trust security principles.
• Certifications such as CCNA/CCNP, Security+, AZ-700, SC-200, or SC-300.