Overview

Job Description: Butcher Power Products (BPP) designs and manufactures mission critical and industrial power solutions for essential infrastructure nationwide. Headquartered in Sacramento, CA, our teams collaborate closely across engineering, manufacturing, and operations to build reliable, high quality systems and take pride in delivering work that truly matters. Job Summary: Butcher Power Products is seeking a Cybersecurity & Network Administrator to strengthen and operate the security and network backbone of our business. This role owns the implementation of security policy across our Microsoft 365 and Azure / Entra ID environment, administers our Cisco network infrastructure, and serves as the company's go-to resource for cybersecurity awareness.This is a hands-on, highly visible position that blends deep technical work with people-facing responsibility. The right person is equally comfortable hardening Conditional Access policies, troubleshooting a VLAN on the production floor, and standing in front of a room teaching staff how to spot a phishing email. You will work closely with the IT team and partner with engineering, operations, and leadership to keep the organization secure and connected.Key Responsibilities: Microsoft Security & Identity:Design, implement, and maintain security policy across Microsoft 365, Azure, and Entra ID, aligned to least-privilege and Zero Trust principles.Build and manage Conditional Access policies, multi-factor authentication, and Entra ID Protection to control access and respond to identity risk.Govern privileged access through Privileged Identity Management (PIM), just-in-time elevation, role scoping, and review of administrative accounts.Manage endpoint security with Microsoft Defender and Intune - device compliance, configuration, and threat protection across endpoints.Implement data protection controls using Microsoft Purview / DLP, and monitor, triage, and respond to alerts surfaced in the Microsoft security stack.Administer Azure subscriptions, role-based access control (RBAC), and resource governance, applying security and compliance standards across the cloud Azure network and infrastructure security - virtual networks, network security groups, and a hub-and-spoke landing zone model - in partnership with the broader IT team.Use Microsoft Defender for Cloud to assess posture, surface vulnerabilities, and drive remediation of identified risks.Partner with eSentire, BPP's managed SOC-as-a-Service (SOC-aaS) provider, to support larger-scale threat detection and response, serving as the primary liaison between eSentire and BPP.Collaborate and communicate clearly and consistently across both teams - triaging and escalating alerts, providing environmental context, and ensuring eSentire's findings translate into timely, well-coordinated action within BPP.Document standards and report on security configuration, audit readiness, and remediation of identified gaps. Cisco Network Administration:Partner with BPP's managed network services provider (MSP), who supports day-to-day administration of the network, serving as the primary liaison between the MSP and BPP - the same partnership model used with eSentire on the security side.Collaborate and communicate clearly and consistently with the MSP - coordinating changes, escalations, and projects, and ensuring network work stays aligned with BPP's operational needs and security posture.Help administer and maintain Cisco routing and switching infrastructure alongside the MSP, including VLANs, trunking, inter-VLAN routing, and WAN links.Secure the network through segmentation, access control lists, and firewall policy, with a focus on protecting both office and manufacturing networks.Diagnose and resolve connectivity issues end-to-end, from the edge to the production floor, minimizing downtime in a manufacturing environment.Monitor network performance and capacity, manage wireless coverage, and plan for growth and resiliency.Keep network documentati