6 jobs found

Job Description Job Description Description: Central Conveyor Company, a member of the Tsubaki Group, is a turn-key Systems Integrator with a complete portfolio of conveyance solutions and products for the Automotive, Parcel & Logistics, and Warehouse & Distribution markets. The Systems Administrator will provide hardware and software technical support. Responsibilities will include interfacing with the customer to track, record, and document help desk requests and issues. Essential Duties and Responsibilities: The essential duties and responsibilities of this job are included but not limited to this job description - other tasks may be assigned and expected to be performed. Support users with desktops, laptops, mobile devices, printers, Microsoft 365, Autodesk products, and other business applications. Install, configure, maintain, and troubleshoot Windows workstations, servers, hardware, and software. Install, configure, license, update, and troubleshoot Autodesk applications and CAD/engineering workstations, coordinating with engineering users and vendors as necessary. Administer Active Directory, Microsoft Entra ID, Microsoft 365, VMware, network equipment, wireless infrastructure, and firewalls. Manage user accounts, security groups, permissions, Multi-Factor Authentication (MFA), and access controls. Maintain endpoint security controls, including EDR/antivirus, BitLocker encryption, host firewalls, security policies, and device controls. Perform operating system and application patching, vulnerability remediation, firmware updates, and security configuration management. Investigate and respond to phishing, malware, compromised accounts, unauthorized software, and other cybersecurity incidents. Support vulnerability management, security assessments, access reviews, audit requirements, and compliance documentation. Maintain and test backup, disaster recovery, and business continuity systems. Support VPN, firewall, network segmentation, wireless, and secure remote-access technologies. Support employee onboarding and offboarding, including account provisioning, computer setup, access removal, and equipment recovery. Maintain hardware/software inventories, system documentation, security records, and technical procedures. Monitor Help Desk requests and escalate issues in accordance with established procedures and Service Level Agreements (SLAs). Coordinate with employees, engineering teams, vendors, and other IT resources to resolve technical issues and support technology initiatives. Perform backup, restore, and disaster recovery operations using Cohesity. Deploy, maintain, and troubleshoot Trimble/Accubid software solutions. Create and maintain technical documentation, procedures, and knowledge base articles. Assist with I/T project planning, coordination, and implementation. Deploy, maintain, and troubleshoot GainSeeker Pro software. Develop and maintain PowerShell scripts to automate administrative tasks. Experience with Microsoft Visual Studio 2022 and application development is preferred. Provide after-hours and remote-site support as required. Some travel required Support remote sites Troy, Sandusky, AL, MO, and TN locations Requirements: Minimum of six (6) years' work experience as a Systems Administrator. Bachelor's Degree in an IT or related field Advanced PC/laptop software knowledge and skills, including installation, configuration, troubleshooting and fighting viruses/malware. Demonstrated analytical ability to solve problems. Broad base of technical skills to clearly diagnose and solve problems relating to hardware and software issues. Acts positively upon constructive criticism and coaching. Work independently and in a group across all levels of the organization. Handles confidential information discreetly. Highly detail oriented. Effective interpersonal skills for interaction with all levels of staff, clients, vendors and consultants. Strong communication skills (both oral and written) and demonstrated ability to work as a team player. Detail-oriented, self-motivated and able to quickly adjust priorities and the ability to handle multiple tasks at the same time. Conducts self professionally & ethically. Remains calm under pressure. Places a high emphasis on excellent customer service. Fosters and supports a teamwork environment. Proficient knowledge of VMware Enterprise features Proficient knowledge of Microsoft software including Windows Server, Office 365, SQL, MS RDS, SCCM, AD Knowledge of Rapid 7 SEIM Knowledge of CrowdStrike MDR Knowledge of Delinea Secret server Autodesk Proficient knowledge of networking and enterprise-wide printing. Linux system administration experience a plus Compliance Monitoring tool exposure Varonis DatAdvantage preferred Learn more about U.S. Tsubaki at: U.S. Tsubaki offers a competitive compensation and benefits package, including health benefits effective on date of hire, dental and vision benefits effective on the first of the month following date of hire, Paid Time Off ("PTO"), 10 paid holidays, generous 401(k) match and profit sharing, annual bonus potential, life insurance, short and long-term disability, flexible spending accounts, commuter benefits, education reimbursement, home and auto insurance discounts, and pet insurance. The estimated salary range is meant to reflect an anticipated salary range for the position. We may pay more or less than of the anticipated range based upon market data and other factors, all of which are subject to change. Individual pay is based on location, skills and expertise, experience, and other relevant factors. Applicants must be authorized to work for any employer in the United States. Tsubaki does not sponsor or take over sponsorship of employment visas. Tsubaki is an Equal Opportunity Employer - Minorities/Females/Veterans/Disability PM21 PIec3dfafa5-

Description: Central Conveyor Company, a member of the Tsubaki Group, is a turn-key Systems Integrator with a complete portfolio of conveyance solutions and products for the Automotive, Parcel & Logistics, and Warehouse & Distribution markets. The Systems Administrator will provide hardware and software technical support. Responsibilities will include interfacing with the customer to track, record, and document help desk requests and issues. Essential Duties and Responsibilities: The essential duties and responsibilities of this job are included but not limited to this job description - other tasks may be assigned and expected to be performed. Support users with desktops, laptops, mobile devices, printers, Microsoft 365, Autodesk products, and other business applications. Install, configure, maintain, and troubleshoot Windows workstations, servers, hardware, and software. Install, configure, license, update, and troubleshoot Autodesk applications and CAD/engineering workstations, coordinating with engineering users and vendors as necessary. Administer Active Directory, Microsoft Entra ID, Microsoft 365, VMware, network equipment, wireless infrastructure, and firewalls. Manage user accounts, security groups, permissions, Multi-Factor Authentication (MFA), and access controls. Maintain endpoint security controls, including EDR/antivirus, BitLocker encryption, host firewalls, security policies, and device controls. Perform operating system and application patching, vulnerability remediation, firmware updates, and security configuration management. Investigate and respond to phishing, malware, compromised accounts, unauthorized software, and other cybersecurity incidents. Support vulnerability management, security assessments, access reviews, audit requirements, and compliance documentation. Maintain and test backup, disaster recovery, and business continuity systems. Support VPN, firewall, network segmentation, wireless, and secure remote-access technologies. Support employee onboarding and offboarding, including account provisioning, computer setup, access removal, and equipment recovery. Maintain hardware/software inventories, system documentation, security records, and technical procedures. Monitor Help Desk requests and escalate issues in accordance with established procedures and Service Level Agreements (SLAs). Coordinate with employees, engineering teams, vendors, and other IT resources to resolve technical issues and support technology initiatives. Perform backup, restore, and disaster recovery operations using Cohesity. Deploy, maintain, and troubleshoot Trimble/Accubid software solutions. Create and maintain technical documentation, procedures, and knowledge base articles. Assist with I/T project planning, coordination, and implementation. Deploy, maintain, and troubleshoot GainSeeker Pro software. Develop and maintain PowerShell scripts to automate administrative tasks. Experience with Microsoft Visual Studio 2022 and application development is preferred. Provide after-hours and remote-site support as required. Some travel required Support remote sites Troy, Sandusky, AL, MO, and TN locations Requirements: Minimum of six (6) years' work experience as a Systems Administrator. Bachelor's Degree in an IT or related field Advanced PC/laptop software knowledge and skills, including installation, configuration, troubleshooting and fighting viruses/malware. Demonstrated analytical ability to solve problems. Broad base of technical skills to clearly diagnose and solve problems relating to hardware and software issues. Acts positively upon constructive criticism and coaching. Work independently and in a group across all levels of the organization. Handles confidential information discreetly. Highly detail oriented. Effective interpersonal skills for interaction with all levels of staff, clients, vendors and consultants. Strong communication skills (both oral and written) and demonstrated ability to work as a team player. Detail-oriented, self-motivated and able to quickly adjust priorities and the ability to handle multiple tasks at the same time. Conducts self professionally & ethically. Remains calm under pressure. Places a high emphasis on excellent customer service. Fosters and supports a teamwork environment. Proficient knowledge of VMware Enterprise features Proficient knowledge of Microsoft software including Windows Server, Office 365, SQL, MS RDS, SCCM, AD Knowledge of Rapid 7 SEIM Knowledge of CrowdStrike MDR Knowledge of Delinea Secret server Autodesk Proficient knowledge of networking and enterprise-wide printing. Linux system administration experience a plus Compliance Monitoring tool exposure Varonis DatAdvantage preferred Learn more about U.S. Tsubaki at: U.S. Tsubaki offers a competitive compensation and benefits package, including health benefits effective on date of hire, dental and vision benefits effective on the first of the month following date of hire, Paid Time Off ("PTO"), 10 paid holidays, generous 401(k) match and profit sharing, annual bonus potential, life insurance, short and long-term disability, flexible spending accounts, commuter benefits, education reimbursement, home and auto insurance discounts, and pet insurance. The estimated salary range is meant to reflect an anticipated salary range for the position. We may pay more or less than of the anticipated range based upon market data and other factors, all of which are subject to change. Individual pay is based on location, skills and expertise, experience, and other relevant factors. Applicants must be authorized to work for any employer in the United States. Tsubaki does not sponsor or take over sponsorship of employment visas. Tsubaki is an Equal Opportunity Employer - Minorities/Females/Veterans/Disability PM21 PIe48bb04c6b97-9172

Job Description Job Description Overview We are seeking a CSfC Senior Network Engineer to join our team supporting Network Enterprise Technology Command (NETCOM) in Honolulu, HI. TekSynap is a fast growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. "Technology moving at the speed of thought" embodies these principles - the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers. We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. Visit us at . Apply now to explore jobs with us! The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation. By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP". As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration. Responsibilities RESPONSIBILITIES Assists the PM in the day-to-day management of leading Network Engineers. Must have an in-depth understanding of advanced networking O&M Commercial Solutions for Classified (CSfC) concepts and processes and experience applying these with little to no guidance. Must be able to provide guidance to others. Must be able to perform successfully in complex, unstructured situations. Must be proficient in multivendor networking environments in configuring firewalls, Intrusion Prevention/Detection systems, VPN gateways, routers, and switches (Cisco, Aruba, Juniper, Cisco ASA, etc.) Be able to develop and modify system scripts. Write standardized system documentation, including configuration guides, test procedures, test results, and training materials. Provide onsite training to technical and non-technical users on the daily use, management, and troubleshooting of the solution after installation. Support all Cross-Domain solution requirements Collaborate with other operations departments to design approved infrastructure Serve as the escalation contact during large outages for Tier 2 and 3 systems. Author network Engineering Design Packages to include detailed implementation project plans and procedures. Configures network, software, and hardware components to meet NSA CSfC, NIAP, and DoD requirements Performs network design and systems integration Designs, develops, implements, tests, and maintains complex secure communications networks Configuring/managing PKI Certificate Authorities for CSfC solutions Familiarity with Certificate Authority configuration (ISC CertAgent/MS Windows Server/Red Hat Certificate systems) Document configuration, test procedure, results, and training materials Preparing test reports and configuration documentation according to customer standards. Providing customer on-site training on solution daily use, management, and troubleshooting Provide tier 2 and 3 support as part of a technical team. Identify and recommend hardware and support solutions based on research and analysis of new technologies, interfacing with customers and vendors. Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to the company. Apply DoD STIGs and IAVAs Perform special projects and other duties as assigned. REQUIRED QUALIFICATIONS Top Secret OR Higher OR Secret Clearance level with completed T5 investigation Active Professional Network certification (CCNP-Security, CCNA, HPE Aruba Networking Certified Professional - Switching, etc.) Must have experience with one or more networking vendors: Cisco, Aruba, Juniper, etc. One of the following DoD8140 Certifications : SecurityX/CASP+ CCNA CCNP Security CCSP (Certified Cloud Security Professional) GCED (GIAC Certified Enterprise Defender) GCIA (GIAC Certified Intrusion Analyst) GCLD (GIAC Cloud Security Essentials) GDSA (GIAC Defensible Security Architecture) GFACT (GIAC Foundational Cybersecurity Technologies) 10 or more years of experience in engineering MA/MS= 10 years; BS=12 years Qualifications WORK ENVIRONMENT AND PHYSICAL DEMANDS The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Location: Honolulu, HI Type of environment: Office Noise level: Low Work schedule: CONUS Schedule is day shift Monday - Friday. May be requested to work evenings and weekends to meet program and contract needs. Amount of Travel: Less than 20% PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus. WORK AUTHORIZATION/SECURITY CLEARANCE United States Citizenship Top Secret Clearance requirement WAGE INFORMATION Target salary range: $133,000.00 - $165,000.00. The salary range displayed is an estimate only and is not a guarantee of compensation or salary, and will be determined on several factors regarding the individual's particular combination of education, knowledge, skills, competencies and experience, as well as contract parameters and organizational requirements. The displayed salary is one component of the total compensation package for employees. OTHER INFORMATION Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. TekSynap is a drug-free workplace. We reserve the right to conduct drug testing in accordance with federal, state, and local laws. All employees and candidates may be subject to drug screening if deemed necessary to ensure a safe and compliant working environment. Many positions require specific certifications and/or the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. Applicants who accept an offer of employment may be subject to investigations performed by TekSynap and/or the Government to verify the candidate meets the required qualifications and other eligibility requirements. EQUAL EMPLOYMENT OPPORTUNITY In order to provide equal employment and advancement opportunities to all individuals, employment decisions will be based on merit, qualifications, and abilities. TekSynap does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age, genetic information or any other characteristic protected by law (referred to as "protected status"). This nondiscrimination policy extends to all terms, conditions, and privileges of employment as well as the use of all company facilities, participation in all company-sponsored activities, and all employment actions such as promotions, compensation, benefits, and termination of employment.

Job Description Job Description About the Company : Sungrow North America is a leading provider of renewable energy solutions, specializing in the development and manufacturing of photovoltaic inverters and energy storage systems. The company offers a comprehensive range of products and services designed to optimize the performance and efficiency of solar power installations. Sungrow North America aims to provide sustainable and reliable energy solutions to meet the growing demand for clean power and is known for its commitment to innovation, high-quality standards, and exceptional customer service. Security Engineer - Network & Identity: The Security Engineer (Network & Identity) is a hands-on engineering role within the IT team responsible for designing, implementing, securing, and automating Sungrow USA's network security, PKI and certificate management, and identity & access infrastructure across on-premises, cloud, and SaaS environments. This role serves as the technical owner for network security architecture, cryptographic services, certificate lifecycle management, authentication, and access controls. The position focuses on Zero Trust security, network segmentation, certificate-based authentication, and identity protection to reduce organizational risk and enable secure business operations and platform ownership rather than SOC operations, threat monitoring, or incident response. Essential Duties and Responsibilities: Network Security Design, implement, and maintain secure enterprise network architectures across corporate offices, data centers, cloud platforms, and remote workforce environments. Architect network segmentation, Zero Trust access controls, and secure connectivity standards using Fortinet and Zscaler security solutions. Develop and maintain Zero Trust architectures across network, identity, endpoint, application, and cloud environments. Design and administer secure remote access using Zscaler Private Access, VPN technologies, and identity-aware access controls. Manage firewall policies, network security controls, routing security, DNS security, and hybrid-cloud connectivity. Design and support Network Access Control architectures using IEEE 802.1X, RADIUS, and certificate-based authentication. Assess network security posture, develop remediation plans, and drive continuous security improvements. Cryptography, PKI & Certificate Management Own the enterprise PKI, cryptography, and certificate lifecycle management architecture, standards, and governance program. Design and manage certificate-based authentication and machine identity solutions for users, devices, servers, applications, cloud workloads, and network infrastructure across Azure, AWS, and hybrid environments. Implement and maintain certificate lifecycle automation using Microsoft Cloud PKI, Keyfactor, CyberArk Certificate Manager, EJBCA, DigiCert, AppViewX, or comparable platforms. Manage certificate issuance, enrollment, discovery, deployment, monitoring, renewal, revocation, auditing, and compliance across the enterprise. Design and support cryptographic services and certificate-based security controls, including TLS/mTLS, code signing, PKI trust hierarchies, certificate-based authentication, SCEP, PKCS, and machine identities. Establish PKI and cryptographic standards, key management practices, and security controls to support Zero Trust, regulatory compliance, and enterprise security requirements. Troubleshoot and resolve complex certificate, cryptographic, trust chain, authentication, and secure communications issues across enterprise systems and applications. Identity & Access Define authentication and authorization standards for workforce, partner, application, service, and machine identities. Design, implement, and maintain Microsoft Entra ID architecture, tenant governance, and identity security controls. Develop, test, and enforce Conditional Access policies and Zero Trust access controls. Implement and maintain MFA, passwordless authentication, phishing-resistant authentication, and Microsoft Entra ID Protection capabilities. Design and support enterprise SSO and federation integrations using SAML, OAuth 2.0, OpenID Connect, and SCIM. Implement least-privilege and risk-based access models across enterprise platforms. Administer RBAC, administrative separation, Microsoft Entra Privileged Identity Management, and least-privilege access controls. Govern application registrations, service principals, enterprise applications, API permissions, and managed identities. Support B2B collaboration, guest-user governance, external workforce access, and third-party identity integrations. Design and implement security controls across Microsoft Azure and AWS environments. Apply least privilege, RBAC, encryption, secrets management, and secure configuration standards to on-prem and cloud resources. Automate identity provisioning and deprovisioning, access governance, certificate management, configuration validation, and security operations. Create reusable secure-by-default templates and reduce manual administration through automation and orchestration Conduct access reviews, entitlement certifications, and identity governance activities. Education or Desired License and Certificates: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent professional experience. Microsoft Certified: Identity and Access Administrator Associate (SC-300) preferred. Microsoft Certified: Azure Security Engineer Associate (AZ-500) preferred. CCNA, Fortinet, Zscaler, AWS Security, CISSP, CISM, Terraform, or relevant PKI certification preferred Preferred Experience & Qualifications: 5+ years of experience in security engineering, identity & access management (IAM), network security, cloud security, or a related enterprise IT discipline. Hands-on experience with Microsoft Entra ID, including Conditional Access, MFA, SSO, Identity Protection, PIM, RBAC, identity governance, and modern authentication protocols (SAML, OAuth, OpenID Connect, SCIM). Experience designing, implementing, and securing enterprise identity, privileged access, and machine identity solutions across hybrid and multi-cloud environments. Hands-on experience with Fortinet, Zscaler (ZIA/ZPA), Zero Trust architectures, least-privilege access models, and network security controls. Experience designing and operating enterprise PKI, certificate lifecycle management, certificate-based authentication, and machine identity platforms such as Keyfactor, DigiCert, EJBCA, AppViewX, CyberArk Certificate Manager, or similar solutions. Experience securing Azure and AWS environments, including identity, networking, encryption, secrets management, logging, and security monitoring. Experience with PAM and IGA platforms such as CyberArk, Delinea, BeyondTrust, SailPoint, Saviynt, or similar technologies. Experience integrating identity, network, cloud, and security telemetry with SIEM and security operations platforms. Strong automation and Infrastructure as Code skills using PowerShell, Python, Microsoft Graph API, REST APIs, Terraform, or similar technologies. Strong troubleshooting skills across authentication, federation, certificates, PKI, network security, cloud access, application integrations, and enterprise identity services. Knowledge of cybersecurity and compliance frameworks including SOC 2, ISO/IEC 27001, NIST CSF, NIST 800-63, CIS Controls, Zero Trust, and NERC CIP. Competencies: Mandarin fluency preferred but not required. Strong analytical, troubleshooting, and problem-solving skills. Ability to work independently and collaboratively in a fast-paced environment. Excellent communication, stakeholder management, and technical documentation skills. Strong organization, attention to detail, initiative, and ownership. Ability to balance security, reliability, usability, scalability, and business requirements. Proactive approach to automation, standardization, and continuous improvement. Travel 5%-20% Work Location and Status: Full time, Hybrid at any Sungrow USA office in Phoenix, Costa Mesa, or Houston No visa sponsorship Compensation: Compensation commensurate with experience Competitive salary and annual bonus eligibility Comprehensive benefits package including health, dental, vision, and retirement plans Strong personal and company growth opportunities Sungrow is an equal opportunity employer. Due to strong interest in this position, Sungrow will only reach out to those candidates who best meet the requirements. Thank you for your interest in Sungrow.

Job Description Job Description Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. TDI is seeking a Firewall Engineer to support the Compartmented Enterprise Services Office (CESO) Task Order for the GIG Service Management - Operations II (GSM-O II) contract. We are looking for a professional with hands-on engineering and testing experience in virtualized and cloud environments. A skilled engineer knowledgeable and experienced in developing and implementing Firewall/Networking Security Solutions. With the CESO program, the Defense Information System Agency (DISA) is looking to transform the existing Secure Web Services (SWS) environment, used to provide secure information sharing to the community, into a more mature service offering to meet the DoD and IC community. The goal will be to manage the commercial cloud migration and fully automate the continuous development & continuous integration environment, fourth estate consolidation, professionalize services - ITIL/DevSecOps based processes, improve the customer experience 1st call resolution, and achieve development of a service catalog for Defense Working Capital Fund (DWCF) Model. This position is onsite 5 days/week in Arlington, VA and requires an active TS/SCI clearance. RESPONSIBILITIES: Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers Provide Tier 3 support to members of the operations network administrations. Maintain all HW and SW components at vendor supported levels. Support mission-critical Continuity of Operations (COOP). Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements. Support the creation of network device performance and traffic utilization monthly reports. Develop and/or participate in After Action Reports (AARs) Provide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture. Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions. Evaluate current technologies and processes associated with DISA CESO to identify gaps. Provide requirements and strategies for future cybersecurity operations. Active participant in meetings with DISA CESO and mission partner working groups. Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations. QUALIFICATIONS: Bachelor's degree and 8+ years of directly relevant experience. Additionall experience may be considered in lieu of degree. 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles. Strong knowledge of Palo Alto concepts and best practices: Panorama Installation, HA Config, Template and Template Stacks Panorama Policy creation and push to group of Firewalls and Verify Push Palo Alto Route configuration, IPSec Site to Site VPN Config and Troubleshooting Palo Alto VM in AWS, IPS Configuration, Virtual Router / Systems and Firewall HA Experience working in a high op-temp, Top Secret environment. 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) PAY RANGE: The anticipated salary range for this position is $115,000 - $125,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range. TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States. "TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws." Powered by JazzHR K1XH2D1aKL

Job Description Job Description Tier 2 Technician (A.K.A. The Technical Heavy-Hitter We've Been Looking For) Job Summary At INC Systems, we're not your typical Managed Service Provider (MSP). We've been helping businesses and non-profits wrangle their technology since 2004, and along the way we figured out a secret: people matter more than servers. Technology is just the tool we use to make lives easier, and occasionally to justify buying really cool gadgets. We're on the hunt for a seasoned Tier 2 Technician. The kind of person who sees a flashing red light on a firewall and gets curious instead of concerned. You're the technical backbone of our service team: part engineer, part detective, part mentor, and part "wait, how did you fix that so fast?" You'll own the tough tickets, lift up our Tier 1 team, own projects from kickoff to handoff, and help push our tools, processes, and automations forward. If you get a small dopamine hit from a clean PowerShell script, have opinions about VLAN design, and think "Office 365 admin" is a fun Saturday, keep reading. A Day in the Life Your day starts with a 15-minute team huddle where we talk priorities, escalations, overnight alerts, and (inevitably) someone makes a joke that's way too early for HR to hear about. From there, you're off. The morning might kick off with a backup job that threw a tantrum overnight. You'll dig into logs, pull in the vendor if you have to, and make sure our client's data is safe before they've even had their second coffee. Then a Tier 1 tech pings you: a user's Conditional Access policy is blocking them from a legitimate app. You walk the tech through the fix, explain the "why" (not just the "what"), and everyone leaves 2% smarter. By mid-morning you're on-site at a client. Maybe standing up a new server, cutting them over to our VOIP platform, or scoping a firewall replacement. You take notes like a hawk, because future-you will thank present-you when the ticket comes back in six months. Lunch happens. Opinions are shared. Someone defends a questionable streaming show. The darts may or may not start flying. Afternoon shifts into project and improvement mode. Sales needs your input on a network refresh quote: how many hours, what gear, what gotchas? A client is rolling out new software and wants to know if their infrastructure can handle it (spoiler: probably, with a nudge). And if there's a repetitive task draining hours out of the team's week, you're the type to ask, "why aren't we automating this?" and then actually do it. By end-of-day, you've closed tough tickets, made the Tier 1 team better, moved a project forward, and maybe shaved 20 minutes off a process that'll compound into weeks of reclaimed time. Victory dance optional. Encouraged. What You'll Be Doing (AKA Your Superpowers) Technical Heavy Lifting: Where the Tickets Get Real Own escalated tickets from Tier 1: the gnarly ones, the weird ones, the "this has never happened before" ones. Troubleshoot network issues end-to-end: DNS, DHCP, NAT, firewall rules, VLANs, routing, VPN tunnels, and the occasional haunted switch. Administer, troubleshoot, and optimize Microsoft 365 tenants (Entra ID, Exchange Online, Teams, SharePoint, Intune, Conditional Access, the whole family). Support Windows Server environments (AD, Group Policy, DNS, DHCP, file services, RDS) and keep virtualization hosts happy. Own backup and disaster recovery, because the job isn't done until you've verified the restore actually works. Stand up, migrate, and maintain firewalls, switches, wireless, and VPN infrastructure across our client base. Roll out new clients and projects (onboarding, migrations, VOIP cutovers, hardware refreshes) with the kind of planning that makes the cutover day boring (in the best way). Making the Team Better: Because No One Levels Up Alone Coach and mentor the Tier 1 team. Walk them through the fix and the reasoning, so next time they've got it. Be the technical partner to our sales team: scope projects, estimate time and equipment, and flag the gotchas before they become change orders. Contribute to documentation like your future self is going to read it (because they will, at 11pm, on a Tuesday). Spot broken processes and fix them. Spot tedious processes and automate them. Spot tribal knowledge and write it down. Client-Facing Work: Yes, You'll Talk to Humans Work directly with clients to untangle issues, recommend solutions, and translate "IT" into English. Advise clients on hardware, software, and network changes when they're rolling out something new. Be the calm in the storm when things go sideways, because someone has to be, and you're really good at it. You Have (The Non-Negotiables) A genuine drive to deliver great customer service and help people. This is the whole job, honestly. Strong verbal and written communication, with the patience of a saint when things get chaotic. The ability to explain complicated tech to your grandmother and have her actually get it. Sharp problem-solving chops and a brain that likes logic puzzles. 5+ years working in IT (or a degree in a computer field plus serious hands-on time). 4+ years hands-on with VLANs, routing, firewall support, and VPN connectivity. 4+ years supporting server hardware (CPU/RAID/storage) and Windows Server environments. 4+ years of data backup and recovery work, plus corporate antivirus/EDR support. Strong working knowledge of network domains, Active Directory, and security tooling. Solid wireless technology chops (design, deployment, troubleshooting). Deep comfort with Microsoft 365 administration. Entra ID, Exchange Online, Teams, SharePoint, and Intune should all feel like home. Real troubleshooting skills around DNS, DHCP, NAT, and firewall rules (not just reading about them on Reddit). Strongly Preferred (A.K.A. You'll Fit Right In) PowerShell scripting and a general love for automating the boring stuff. If you've ever written a script just to avoid doing something twice, we're your people. Experience building automations that connect systems together (Power Automate, Graph API, webhooks, or similar). A habit of asking "why are we doing this manually?" and then doing something about it. Would Also Be Great If You Have Experience with ConnectWise Manage (our PSA). Bonus points if you've lived in it daily. Experience with NinjaOne RMM (or comparable RMM platforms like Datto, N-able, Kaseya). A+, Network+, Security+, and any Microsoft certifications (MS-900, AZ-104, MS-102, etc.). The ability to type 50+ wpm without staring at your keyboard. A passion for learning: new tools, new platforms, new anything. A love for technology, Star Wars, science, and gadgets. (Strong opinions welcome. Defending them at lunch is encouraged.) What You Get Starting salary depends on experience, certifications, and overall technical ability. $50k to $70k per year Quarterly and Annual Bonuses based on performance An opportunity to learn and expand your knowledge with the best team around We Have (Because We Actually Care) Paid vacation, PTO, and holiday pay. Unused vacation can be rolled over or sold back to the company. Great health insurance with a portion paid by INC, plus options for supplemental insurance and other payroll deduction plans. Matching retirement contributions. We match 4% of what you invest. Annual profit sharing. When the company wins, you win. This isn't a "maybe someday" perk, it's a real chunk of change that shows up every year based on how we do as a team. Quarterly and Annual bonuses that let you earn above your target pay. Family First Approach. Your family is the priority. When they need you, work waits. Casual, fun work atmosphere: ping pong table, dart board, comfortable break room, and a standing recommendation to keep a Nerf gun handy (you'll know why eventually). Snacks, food, ice cream, and plenty of coffee/tea options. The fridge gets restocked monthly. Where You Go From Here The Tier 2 Technician role is the second level of technical ability at INC Systems, and it's a real one. You're the support our Tier 1 team leans on and the person clients trust with the hard stuff. You'll know our processes, procedures, and tools inside and out. From here, there are a few paths. You might lean deeper into the technical track and grow into a Senior Engineer role, owning the hardest tickets, leading R&D on new technology, and shaping what we deploy next. Or you might lean toward account management, working closely with clients to make sure they're getting everything they should out of their technology. Every level has more responsibility, more perks, and a clear path for growth. We'd rather help you level up than lose you. Company Description In business since 2004, INC Systems is a technology services and consulting company that has been involved in vast number of diverse projects. Until 2013, there were two divisions of the company with one focused on I.T. services and the other on low-voltage wiring, audio video projects and home automation. A tremendous amount of knowledge was gained during our first decade, not only on the technical work but in managing client expectations and delivering value. Today we only work with businesses and non-profits that view I.T. as critical to their success. . click apply for full job details