APCO Holdings
Ponte Vedra Beach, Florida
Job Description Job Description APCO Holdings partners with dealerships across North America to deliver innovative vehicle protection products and services that enhance the ownership experience for customers and drive growth for our partners. Through our family of brands, we bring together industry expertise, technology, and data-driven insights to help dealers strengthen their finance and insurance performance and build lasting relationships with their customers. Our teams work collaboratively across operations, technology, risk, finance, marketing, and sales to deliver solutions that create measurable value and support the continued growth of APCO and the partners we serve. The Sr. Network Engineer & Connectivity Architect serves as the principal architect of the organization's enterprise connectivity platform ("The Backbone"), with a primary focus on Microsoft Azure networking, Cisco Meraki infrastructure, and identity-driven access (Active Directory & Entra ID). This role is responsible for designing and operating a secure, highly resilient, and cloud-aligned network architecture, where access decisions are governed by user identity, device posture, and real-time risk signals, rather than traditional network boundaries. Leveraging Infrastructure as Code (IaC), AIOps, and Zero Trust principles, this position ensures seamless, secure connectivity across Azure, on-prem environments, branch networks (Meraki), and SaaS platforms such as Microsoft 365, while enabling a scalable, automated, and self-healing infrastructure. Key Responsibilities Identity-Driven Network Architecture (CORE) Design and implement a network architecture where identity is the primary control plane. Integrate Active Directory (on-prem), Entra ID, and identity providers (Okta) with network enforcement points to enable real-time, identity-based access decisions. Active Directory & Hybrid Identity Ownership Architect and support enterprise-scale hybrid identity environments, including: Active Directory design (sites, replication, GPO strategy) Entra Connect (Azure AD Connect) synchronization Authentication protocols (Kerberos, NTLM, modern authentication) Secure integration with cloud and network services Entra ID & Conditional Access Engineering Design, implement, and optimize Conditional Access policies, including: MFA enforcement strategies Device compliance (Intune integration) Risk-based and session-based access controls Location-aware and Zero Trust access models Zero Trust & Identity Enforcement Lead the implementation of a Zero Trust architecture by aligning: Identity (Entra ID / Active Directory / Okta) Network (Azure, Meraki) Endpoint (Intune / device posture) Ensure consistent enforcement of least privilege access across all environments Microsoft 365 Identity & Access Optimization Ensure secure, high-performance access to Microsoft 365 by: Aligning identity policies with network routing and access controls Supporting modern authentication flows and token-based access Optimizing Teams, Exchange, and SharePoint connectivity Azure-Centric Network Architecture Design and implement scalable Azure networking solutions, including: Virtual Networks (VNet) and Hub-and-Spoke architectures Private Endpoints and Private Link Azure Firewall, NSGs, and routing strategies DNS architecture and name resolution Meraki Network Design & Operations Lead the design, deployment, and optimization of Cisco Meraki environments, including: MX (SD-WAN & security appliances) MS (switching) MR (wireless) Auto VPN and centralized cloud-based management Hybrid Connectivity & Interconnects Architect and manage secure connectivity between environments using: ExpressRoute VPN Gateways Meraki SD-WAN (Auto VPN) Ensure low latency, high availability, and seamless failover. Infrastructure as Code (IaC) & Automation Manage network and cloud configurations as code using: Terraform, Bicep, or ARM templates CI/CD pipelines (Azure DevOps, GitHub Actions) Ensure all deployments are standardized, repeatable, and auditable. AI Ops & Observability Implement monitoring and telemetry across Azure and Meraki using: Azure Monitor & Log Analytics Meraki Dashboard Observability tools (Dynatrace, Splunk, etc.) Enable proactive detection, anomaly identification, and automated remediation. Resiliency & Buiness Continuity Engineering (CRITICAL) Design and maintain a highly resilient network architecture across Azure, Meraki, on-prem, and SaaS environments: Eliminate single points of failure Implement redundancy across WAN, LAN, wireless, and cloud Design for automated failover and rapid recovery Ensure identity-dependent services remain available during outages Governance & Policy Enforcement Establish and enforce governance using: Azure Policy and tagging standards Policy-as-Code frameworks Identity governance (access reviews, RBAC, least privilege) Ensure compliance with security, regulatory, and enterprise standards. Technical Expertise Category Requirements Identity & Access (PRIMARY) Deep expertise in Active Directory (architecture, GPOs, replication), Entra ID, Conditional Access, MFA, federation (SAML, OAuth, OIDC), hybrid identity Zero Trust Architecture Experience implementing identity-driven access integrating network, endpoint, and SaaS Azure Networking (PRIMARY) VNets, ExpressRoute, VPN Gateway, Azure Firewall, Private Link, DNS, Hub-Spoke design Meraki (PRIMARY) MX (SD-WAN), MS (switching), MR (wireless), Auto VPN, Meraki Dashboard Automation & IaC Terraform, Bicep, ARM templates, CI/CD pipelines M365 Integration Identity and network dependency across Exchange, Teams, SharePoint Endpoint Integration Intune/device compliance integration with access policies Observability Azure Monitor, Log Analytics, Meraki Dashboard, Dynatrace, Splunk Scripting & DevOps PowerShell, Python, or similar scripting experience Education and Experience Bachelor's degree in Computer Science, Information Technology, or a related technical field; Master's degree in Information Systems Management preferred. In lieu of a degree, 12+ years of enterprise-level infrastructure experience with a proven track record of delivering automation-first networking projects. Required Experience 8-10+ years of enterprise networking experience 5+ years of Active Directory experience (enterprise scale) 3+ years of Entra ID (Azure AD), Conditional Access, and MFA 3+ years of Azure networking experience 3+ years of Cisco Meraki experience (SD-WAN, switching, wireless) Experience designing hybrid connectivity (ExpressRoute, VPN, SD-WAN) Experience implementing IaC (Terraform, Bicep, ARM) Experience integrating identity with network and Zero Trust frameworks Proven experience leading a transition from legacy "box-by-box" management to a centralized, API-driven orchestration model. Preferred Experience Microsoft 365 performance and connectivity optimization Certifications (Preferred) Microsoft Certified: Azure Network Engineer Associate (AZ-700) Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Azure Solutions Architect Expert Cisco Meraki Solutions Specialist (CMSS) Cisco Certified Internetwork Expert (CCIE) or CCNP Enterprise Cisco Certified DevNet Professional Hashi Corp Certified: Terraform Associate Certified Kubernetes Administrator (CKA) At APCO, the way we work matters just as much as the results we deliver. Our values guide how we work, how we partner, and how we deliver results. We C.A.R.E. C ommitted - We build strong, high-trust relationships with our partners and each other. A ccountable - We take ownership of outcomes and hold ourselves to the highest standards of performance and integrity. R esults-Driven - We focus on delivering measurable outcomes that create value for our partners and our business. E xcellent - We strive for excellence in everything we do while balancing short-term performance with long-term success. If you're excited about joining a team that values collaboration, accountability, and continuous improvement, we'd love to hear from you. By submitting your application, you acknowledge that you have read and understand our Privacy Policy and Terms & Conditions. APCO Holdings may collect personal information (such as name, contact details, and employment history) to evaluate your candidacy. We may share this data with our subsidiaries, affiliates, and service providers . click apply for full job details
Job Description Job Description APCO Holdings partners with dealerships across North America to deliver innovative vehicle protection products and services that enhance the ownership experience for customers and drive growth for our partners. Through our family of brands, we bring together industry expertise, technology, and data-driven insights to help dealers strengthen their finance and insurance performance and build lasting relationships with their customers. Our teams work collaboratively across operations, technology, risk, finance, marketing, and sales to deliver solutions that create measurable value and support the continued growth of APCO and the partners we serve. The Sr. Network Engineer & Connectivity Architect serves as the principal architect of the organization's enterprise connectivity platform ("The Backbone"), with a primary focus on Microsoft Azure networking, Cisco Meraki infrastructure, and identity-driven access (Active Directory & Entra ID). This role is responsible for designing and operating a secure, highly resilient, and cloud-aligned network architecture, where access decisions are governed by user identity, device posture, and real-time risk signals, rather than traditional network boundaries. Leveraging Infrastructure as Code (IaC), AIOps, and Zero Trust principles, this position ensures seamless, secure connectivity across Azure, on-prem environments, branch networks (Meraki), and SaaS platforms such as Microsoft 365, while enabling a scalable, automated, and self-healing infrastructure. Key Responsibilities Identity-Driven Network Architecture (CORE) Design and implement a network architecture where identity is the primary control plane. Integrate Active Directory (on-prem), Entra ID, and identity providers (Okta) with network enforcement points to enable real-time, identity-based access decisions. Active Directory & Hybrid Identity Ownership Architect and support enterprise-scale hybrid identity environments, including: Active Directory design (sites, replication, GPO strategy) Entra Connect (Azure AD Connect) synchronization Authentication protocols (Kerberos, NTLM, modern authentication) Secure integration with cloud and network services Entra ID & Conditional Access Engineering Design, implement, and optimize Conditional Access policies, including: MFA enforcement strategies Device compliance (Intune integration) Risk-based and session-based access controls Location-aware and Zero Trust access models Zero Trust & Identity Enforcement Lead the implementation of a Zero Trust architecture by aligning: Identity (Entra ID / Active Directory / Okta) Network (Azure, Meraki) Endpoint (Intune / device posture) Ensure consistent enforcement of least privilege access across all environments Microsoft 365 Identity & Access Optimization Ensure secure, high-performance access to Microsoft 365 by: Aligning identity policies with network routing and access controls Supporting modern authentication flows and token-based access Optimizing Teams, Exchange, and SharePoint connectivity Azure-Centric Network Architecture Design and implement scalable Azure networking solutions, including: Virtual Networks (VNet) and Hub-and-Spoke architectures Private Endpoints and Private Link Azure Firewall, NSGs, and routing strategies DNS architecture and name resolution Meraki Network Design & Operations Lead the design, deployment, and optimization of Cisco Meraki environments, including: MX (SD-WAN & security appliances) MS (switching) MR (wireless) Auto VPN and centralized cloud-based management Hybrid Connectivity & Interconnects Architect and manage secure connectivity between environments using: ExpressRoute VPN Gateways Meraki SD-WAN (Auto VPN) Ensure low latency, high availability, and seamless failover. Infrastructure as Code (IaC) & Automation Manage network and cloud configurations as code using: Terraform, Bicep, or ARM templates CI/CD pipelines (Azure DevOps, GitHub Actions) Ensure all deployments are standardized, repeatable, and auditable. AI Ops & Observability Implement monitoring and telemetry across Azure and Meraki using: Azure Monitor & Log Analytics Meraki Dashboard Observability tools (Dynatrace, Splunk, etc.) Enable proactive detection, anomaly identification, and automated remediation. Resiliency & Buiness Continuity Engineering (CRITICAL) Design and maintain a highly resilient network architecture across Azure, Meraki, on-prem, and SaaS environments: Eliminate single points of failure Implement redundancy across WAN, LAN, wireless, and cloud Design for automated failover and rapid recovery Ensure identity-dependent services remain available during outages Governance & Policy Enforcement Establish and enforce governance using: Azure Policy and tagging standards Policy-as-Code frameworks Identity governance (access reviews, RBAC, least privilege) Ensure compliance with security, regulatory, and enterprise standards. Technical Expertise Category Requirements Identity & Access (PRIMARY) Deep expertise in Active Directory (architecture, GPOs, replication), Entra ID, Conditional Access, MFA, federation (SAML, OAuth, OIDC), hybrid identity Zero Trust Architecture Experience implementing identity-driven access integrating network, endpoint, and SaaS Azure Networking (PRIMARY) VNets, ExpressRoute, VPN Gateway, Azure Firewall, Private Link, DNS, Hub-Spoke design Meraki (PRIMARY) MX (SD-WAN), MS (switching), MR (wireless), Auto VPN, Meraki Dashboard Automation & IaC Terraform, Bicep, ARM templates, CI/CD pipelines M365 Integration Identity and network dependency across Exchange, Teams, SharePoint Endpoint Integration Intune/device compliance integration with access policies Observability Azure Monitor, Log Analytics, Meraki Dashboard, Dynatrace, Splunk Scripting & DevOps PowerShell, Python, or similar scripting experience Education and Experience Bachelor's degree in Computer Science, Information Technology, or a related technical field; Master's degree in Information Systems Management preferred. In lieu of a degree, 12+ years of enterprise-level infrastructure experience with a proven track record of delivering automation-first networking projects. Required Experience 8-10+ years of enterprise networking experience 5+ years of Active Directory experience (enterprise scale) 3+ years of Entra ID (Azure AD), Conditional Access, and MFA 3+ years of Azure networking experience 3+ years of Cisco Meraki experience (SD-WAN, switching, wireless) Experience designing hybrid connectivity (ExpressRoute, VPN, SD-WAN) Experience implementing IaC (Terraform, Bicep, ARM) Experience integrating identity with network and Zero Trust frameworks Proven experience leading a transition from legacy "box-by-box" management to a centralized, API-driven orchestration model. Preferred Experience Microsoft 365 performance and connectivity optimization Certifications (Preferred) Microsoft Certified: Azure Network Engineer Associate (AZ-700) Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Azure Solutions Architect Expert Cisco Meraki Solutions Specialist (CMSS) Cisco Certified Internetwork Expert (CCIE) or CCNP Enterprise Cisco Certified DevNet Professional Hashi Corp Certified: Terraform Associate Certified Kubernetes Administrator (CKA) At APCO, the way we work matters just as much as the results we deliver. Our values guide how we work, how we partner, and how we deliver results. We C.A.R.E. C ommitted - We build strong, high-trust relationships with our partners and each other. A ccountable - We take ownership of outcomes and hold ourselves to the highest standards of performance and integrity. R esults-Driven - We focus on delivering measurable outcomes that create value for our partners and our business. E xcellent - We strive for excellence in everything we do while balancing short-term performance with long-term success. If you're excited about joining a team that values collaboration, accountability, and continuous improvement, we'd love to hear from you. By submitting your application, you acknowledge that you have read and understand our Privacy Policy and Terms & Conditions. APCO Holdings may collect personal information (such as name, contact details, and employment history) to evaluate your candidacy. We may share this data with our subsidiaries, affiliates, and service providers . click apply for full job details
Circet USA
Orlando, Florida
Job Description Job Description Overview Circet USA is a leading provider of telecommunications and data center infrastructure services in North America, and we're looking for talented professionals to join our team. We deliver comprehensive engineering, construction, and network solutions that support the evolving connectivity and infrastructure needs of our customers. With nearly 50 years of industry experience, we partner with major telecom providers, cloud service providers, general contractors, data center operators, and utilities to design and deliver customized solutions that solve complex challenges. At Circet USA, you'll have the opportunity to make an impact, contribute to critical infrastructure projects, and help shape the future of connectivity. If you're passionate about innovation and thrive in a dynamic environment, we'd love to hear from you. Responsibilities SUMMARY As part of the division's portfolio, this position provides Engineering, Furnish and Installation services to our customers within the Central Office, Data Center, Mobile Telephone Switching Office and Cell Site environments. The purpose of this position is to support Commissioning, Integration and Maintenance service deployments for KGPCo customers. ESSENTIAL DUTIES & RESPONSIBILITIES include the following; other duties may be assigned: Loads software, determines initial network parameters and commissions equipment by testing and validating functionality. Supports customer activation of new circuits by testing connections to other pieces of equipment and integrating/mapping circuits on the network. Performs preventive or reactive maintenance of network equipment. Uses test equipment such as: STT, MTT, JDSU and Fiber Optic Power meters to perform circuit testing such as, DS-1 / 3's; OC-3 to 192; GIG-E; Fast Ethernet. Performs the Long Haul Integration as needed. Sonet, DWDM and ROADM knowledge required. Experience with Cisco, Ciena, Fujitsu, Tellabs preferred. Assist Installation in completing related projects C&IS when necessary to meet customer expectations. Learn new equipment software and interfaces to help expand business opportunities. Acts as a customer contact. Interface with customers and local supervisors to clarify project status Qualifications QUALIFICATION REQUIREMENTS To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 6+ years working field knowledge of SONET/DWDM based systems. Experience commissioning and Integrating optical transport equipment such as Cisco 15454, Adtran 6100, Lucent DMX, Ciena 4200 & 6500, or Tellabs 7100 TP76300 Standards Knowledge Review Method of Procedure (MOP) with customer prior to start of project. Strong written and verbal communication skills. Strong computer skills; MS Office and database experience a plus. Must be adaptable to changing environments. Must be willing to travel extensively EDUCATION and/or EXPERIENCE Associate Degree in an appropriate technology desirable PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position. WORK ENVIRONMENT The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment is usually moderate. Circet USA is an Equal Opportunity Employer - Veteran/Disabled. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. Pay Range in the United States: $26 - $39 based upon geography, skills, and experience. May also be eligible for performance incentive opportunity based on company and individual goals and performance
Job Description Job Description Overview Circet USA is a leading provider of telecommunications and data center infrastructure services in North America, and we're looking for talented professionals to join our team. We deliver comprehensive engineering, construction, and network solutions that support the evolving connectivity and infrastructure needs of our customers. With nearly 50 years of industry experience, we partner with major telecom providers, cloud service providers, general contractors, data center operators, and utilities to design and deliver customized solutions that solve complex challenges. At Circet USA, you'll have the opportunity to make an impact, contribute to critical infrastructure projects, and help shape the future of connectivity. If you're passionate about innovation and thrive in a dynamic environment, we'd love to hear from you. Responsibilities SUMMARY As part of the division's portfolio, this position provides Engineering, Furnish and Installation services to our customers within the Central Office, Data Center, Mobile Telephone Switching Office and Cell Site environments. The purpose of this position is to support Commissioning, Integration and Maintenance service deployments for KGPCo customers. ESSENTIAL DUTIES & RESPONSIBILITIES include the following; other duties may be assigned: Loads software, determines initial network parameters and commissions equipment by testing and validating functionality. Supports customer activation of new circuits by testing connections to other pieces of equipment and integrating/mapping circuits on the network. Performs preventive or reactive maintenance of network equipment. Uses test equipment such as: STT, MTT, JDSU and Fiber Optic Power meters to perform circuit testing such as, DS-1 / 3's; OC-3 to 192; GIG-E; Fast Ethernet. Performs the Long Haul Integration as needed. Sonet, DWDM and ROADM knowledge required. Experience with Cisco, Ciena, Fujitsu, Tellabs preferred. Assist Installation in completing related projects C&IS when necessary to meet customer expectations. Learn new equipment software and interfaces to help expand business opportunities. Acts as a customer contact. Interface with customers and local supervisors to clarify project status Qualifications QUALIFICATION REQUIREMENTS To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 6+ years working field knowledge of SONET/DWDM based systems. Experience commissioning and Integrating optical transport equipment such as Cisco 15454, Adtran 6100, Lucent DMX, Ciena 4200 & 6500, or Tellabs 7100 TP76300 Standards Knowledge Review Method of Procedure (MOP) with customer prior to start of project. Strong written and verbal communication skills. Strong computer skills; MS Office and database experience a plus. Must be adaptable to changing environments. Must be willing to travel extensively EDUCATION and/or EXPERIENCE Associate Degree in an appropriate technology desirable PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position. WORK ENVIRONMENT The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment is usually moderate. Circet USA is an Equal Opportunity Employer - Veteran/Disabled. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. Pay Range in the United States: $26 - $39 based upon geography, skills, and experience. May also be eligible for performance incentive opportunity based on company and individual goals and performance