Cybersecurity & Network Administrator

Butcher Power Products (BPP) designs and manufactures mission‑critical and industrial power solutions for essential infrastructure nationwide. Headquartered in Sacramento, CA, our teams collaborate closely across engineering, manufacturing, and operations to build reliable, high‑quality systems and take pride in delivering work that truly matters. Job Summary: Butcher Power Products is seeking a Cybersecurity & Network Administrator to strengthen and operate the security and network backbone of our business. This role owns the implementation of security policy across our Microsoft 365 and Azure / Entra ID environment, administers our Cisco network infrastructure, and serves as the company’s go-to resource for cybersecurity awareness.This is a hands-on, highly visible position that blends deep technical work with people-facing responsibility. The right person is equally comfortable hardening Conditional Access policies, troubleshooting a VLAN on the production floor, and standing in front of a room teaching staff how to spot a phishing email. You will work closely with the IT team and partner with engineering, operations, and leadership to keep the organization secure and connected. Key Responsibilities: Microsoft Security & Identity: Design, implement, and maintain security policy across Microsoft 365, Azure, and Entra ID, aligned to least-privilege and Zero Trust principles. Build and manage Conditional Access policies, multi-factor authentication, and Entra ID Protection to control access and respond to identity risk. Govern privileged access through Privileged Identity Management (PIM), just-in-time elevation, role scoping, and review of administrative accounts. Manage endpoint security with Microsoft Defender and Intune — device compliance, configuration, and threat protection across endpoints. Implement data protection controls using Microsoft Purview / DLP, and monitor, triage, and respond to alerts surfaced in the Microsoft security stack. Administer Azure subscriptions, role-based access control (RBAC), and resource governance, applying security and compliance standards across the cloud estate. Support Azure network and infrastructure security — virtual networks, network security groups, and a hub-and-spoke landing zone model — in partnership with the broader IT team. Use Microsoft Defender for Cloud to assess posture, surface vulnerabilities, and drive remediation of identified risks. Partner with eSentire, BPP’s managed SOC-as-a-Service (SOC-aaS) provider, to support larger-scale threat detection and response, serving as the primary liaison between eSentire and BPP. Collaborate and communicate clearly and consistently across both teams — triaging and escalating alerts, providing environmental context, and ensuring eSentire’s findings translate into timely, well-coordinated action within BPP. Document standards and report on security configuration, audit readiness, and remediation of identified gaps. Cisco Network Administration: Partner with BPP’s managed network services provider (MSP), who supports day-to-day administration of the network, serving as the primary liaison between the MSP and BPP — the same partnership model used with eSentire on the security side. Collaborate and communicate clearly and consistently with the MSP — coordinating changes, escalations, and projects, and ensuring network work stays aligned with BPP’s operational needs and security posture. Help administer and maintain Cisco routing and switching infrastructure alongside the MSP, including VLANs, trunking, inter-VLAN routing, and WAN links. Secure the network through segmentation, access control lists, and firewall policy, with a focus on protecting both office and manufacturing networks. Diagnose and resolve connectivity issues end-to-end, from the edge to the production floor, minimizing downtime in a manufacturing environment. Monitor network performance and capacity, manage wireless coverage, and plan for growth and resiliency. Keep network documentation, diagrams, and change records current and accurate. Security Awareness & Training: Develop and deliver company-wide cybersecurity training that is clear, engaging, and accessible to non-technical staff. Run phishing simulation campaigns, measure results, and coach employees on recognizing and reporting threats. Educate teams on the importance of privileged access controls, secure authentication, and good security hygiene across the organization. Be an approachable, trusted point of contact — someone people feel comfortable coming to with questions or concerns. Foster a culture of security awareness as a normal, everyday part of how the company operates. Required Qualifications: CCNA certification. Demonstrated hands-on experience with Microsoft Azure — administering subscriptions, RBAC, resource governance, and Azure networking — along with Entra ID identity and access management. Hands-on experience administering Microsoft 365 and related security and identity tooling. Solid understanding of network fundamentals — routing, switching, VLANs, firewalls, and segmentation. Strong interpersonal and communication skills, with the ability to explain technical concepts to non-technical audiences and present confidently to groups. A personable, collaborative approach and a genuine willingness to help colleagues. Preferred Qualifications: Microsoft security certifications such as SC-300 (Identity & Access Administrator) or AZ-500 (Azure Security Engineer). Additional security credentials such as CompTIA Security or CISSP. Experience with Microsoft Intune, Defender, and Purview / DLP. Experience designing or operating Azure landing zones (hub-and-spoke) and infrastructure-as-code or policy-based governance. Experience delivering or building security awareness and phishing programs. IT experience in a manufacturing or industrial environment. Team & Working Style: This is a front-facing role. You will work directly with staff across the business and act as a visible, approachable point of contact for security and IT. You will also be the key communication link between BPP and its managed partners — eSentire on the security side and BPP’s MSP on the network side — so strong collaboration, clear communication, and the ability to coordinate across organizations are central to success in this role.Cybersecurity and network administration are the priority of this position. That said, as part of a smaller, more agile IT team, flexibility is essential. The right person is happy to jump in and help with other work items, projects, and support tickets as workload demands — comfortable moving between focused, specialized work and broader day-to-day IT support to keep the team moving. CompensationThe base pay range for this role is $80,000 – $120,000 per year. Equal Opportunity Employer Butcher Power Products is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic. If you require a reasonable accommodation during the application or interview process, please let us know. Compensation ranges are provided in accordance with applicable state and local pay transparency laws. PI579b46e80173-25448-40821052