WORK SHIFT:
First Shift (United States of America)JOB DESCRIPTION:
The System Engineer III will be responsible for providing extensive knowledge and working expertise in Active Directory, Group Policy, PowerShell scripting, Windows and Linux server administration, virtualization, and enterprise network infrastructure. This role is responsible for all security across all layers of the OSI/TCP/IP model, as well as deep experience with Microsoft 365, certificate services, and enterprise storage systems. This role is responsible for a high level of technical proficiency, strong documentation skills, and the ability to mentor junior IT staff. This role is required and must be adaptable, able to learn new technologies, and capable of supporting complex multi-domain environments.
ESSENTIAL JOB FUNCTIONS
• Design, implement, and maintain enterprise network and server infrastructure across multi-site, multi-domain environments.
• Administer and troubleshoot Active Directory, including forests, trusts, replication, DNS integration, and domain migrations.
• Develop, manage, and troubleshoot Group Policy Objects (GPOs) to enforce security and system configuration.
• Write and maintain PowerShell scripts for automation, reporting, and administrative tasks.
• Administer and support Windows Server (2012–2025) and Linux systems.
• Configure and manage Microsoft 365 services (Exchange Online, SharePoint, Teams, security, identity management).
• Design and manage Layer 2/Layer 3 network infrastructure, including VLANs, subnetting, routing, and switching.
• Configure and maintain Cisco and Ruckus switches, including creating and supporting Link Aggregation Groups (LAGs).
• Manage virtualization environments including VMware vSphere, Microsoft Hyper-V, and Proxmox.
• Administer enterprise storage systems (SAN/NAS), including Synology NAS.
• Create and manage digital certificates and maintain internal certificate authorities (CAs) for secure communications.
• Configure and support firewalls, VPNs, and SD-WAN solutions; FortiGate experience is a plus.
• Utilize network monitoring tools (e.g., SNMP, What’s Up Gold, PRTG) for proactive infrastructure monitoring and response.
• Implement and manage security at all layers of the OSI/TCP/IP model, including physical, network, transport, and application layers.
• Create and maintain comprehensive technical documentation, including standard operating procedures, manuals, and Visio diagrams.
• Train and mentor junior IT staff, promoting knowledge sharing and consistent operational practices.
• Participate in and lead infrastructure projects, including upgrades, migrations, and disaster recovery planning.
• Stay current with new technologies and industry best practices, demonstrating the ability to quickly learn and adopt new tools and platforms.
• Maintains reliable and consistent attendance, including being punctual, dependable, and flexible to potential schedule changes to meet the needs of the department and the organization.
• Executes each essential duty satisfactorily to perform job successfully.
• Follows all safety procedures required in work area, wears PPE as needed, attends all safety meetings, and reports safety issues regarding equipment or unsafe/hazardous conditions.
• Performs effectively as a team member, able to work well with others, open to receive and give feedback, and treats everyone with respect.
• Takes ownership of own work and behavior, accepts accountability for own actions, encourages solutions, and communicates status of work/projects.
• Follows all department quality standards/criteria. Raises concerns and issues to management.
• Understands department’s key performance indicators (KPIs) and contributes to achieve these goals both individually and as a team.
• Other duties as needed or required.
ADDITIONAL RESPONSIBILITIES
• Ability to be on call 24 hours a day, 7 days a week for global operations, by periodically providing off-hours, evening, and weekend support to accommodate maintenance windows and issue resolution
• May occasionally guide less experienced associates to help with technical projects
• Some travel may be required.
REQUIRED QUALIFICATIONS
The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
• Bachelor’s degree in Computer Science, Information Technology, or equivalent experience.
• 10+ years of senior hands-on experience in enterprise network and server engineering roles.
• Expert-level experience in Active Directory and Group Policy across multi-domain environments.
• Strong PowerShell scripting capabilities for automation and system management.
• Proficient in Windows Server (2012–2025) and Linux administration.
• Strong Microsoft 365 (M365) administration and troubleshooting experience.
• Strong knowledge of certificates and certificate authorities (PKI infrastructure).
• In-depth understanding of Layer 2/3 networking, including VLANs, routing, and switch configuration.
• Experience with Cisco and Ruckus switches, including LAG setup and maintenance.
• Experience managing VMware, Hyper-V, and Proxmox virtualization platforms.
• Proficiency with SAN/NAS solutions, including Synology NAS.
• Strong security knowledge, with the ability to implement protection at all layers of the OSI/TCP/IP model.
• Experience with network monitoring tools (SNMP, What’s Up Gold, PRTG).
• Excellent technical documentation skills and the ability to train and mentor others.
PREFERRED QUALIFICATIONS
• Experience in Global Network
• Knowledge of VOIP Telephony a plus
• Experience in leading or supervising a team a plus
PHYSICAL DEMANDS
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Sitting, walking, standing, bending at the neck, bending at the waist, squatting, climbing, kneeling, crawling, twisting at the neck and waist, repetitive use of hands, simple grasping, power grasping, fine manipulation, pushing and pulling, reaching above and below the shoulder, carrying/lifting up to 50 lbs.
Driving cars and other IT equipment
Working around equipment and machinery
Exposure to excessive noise
Exposure to dust, gas, fumes or chemicals
Working at heights
Use of special visual or auditory protective equipment
Walking on uneven ground
PPE Requirements
Safety glasses
Steel-toe slip-resistant shoes – When in production area
Hearing protection (e.g. ear plugs, ear muffs) – When in production area
Face covering (mask) in accordance with company policy.
Hardhat/bump camp
COMPENSATION RANGE:
$100,000 - $130,000
Salary may vary based on experience.
CAMBRO is proud to be an equal-opportunity workplace. All qualified applicants will receive consideration for employment without regard to and will not be discriminated against based upon race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic information, military or veteran status, or other characteristics protected by law.