Operate and secure the Microsoft 365/Azure/Entra ID environment (Conditional Access, PIM, RBAC), manage endpoint security with Defender/Intune and Purview/DLP, administer Cisco routing/switching and VLANs, liaise with managed providers (eSentire and MSP), run security awareness/phishing programs, document standards, and troubleshoot network and security incidents across office and manufacturing environments.
Butcher Power Products (BPP) designs and manufactures mission‑critical and industrial power solutions for essential infrastructure nationwide. Headquartered in Sacramento, CA, our teams collaborate closely across engineering, manufacturing, and operations to build reliable, high‑quality systems and take pride in delivering work that truly matters.
Job Summary:
Butcher Power Products is seeking a Cybersecurity & Network Administrator to strengthen and operate the security and network backbone of our business. This role owns the implementation of security policy across our Microsoft 365 and Azure / Entra ID environment, administers our Cisco network infrastructure, and serves as the company’s go-to resource for cybersecurity awareness.
This is a hands-on, highly visible position that blends deep technical work with people-facing responsibility. The right person is equally comfortable hardening Conditional Access policies, troubleshooting a VLAN on the production floor, and standing in front of a room teaching staff how to spot a phishing email. You will work closely with the IT team and partner with engineering, operations, and leadership to keep the organization secure and connected.
Key Responsibilities:
Microsoft Security & Identity:
- Design, implement, and maintain security policy across Microsoft 365, Azure, and Entra ID, aligned to least-privilege and Zero Trust principles.
- Build and manage Conditional Access policies, multi-factor authentication, and Entra ID Protection to control access and respond to identity risk.
- Govern privileged access through Privileged Identity Management (PIM), just-in-time elevation, role scoping, and review of administrative accounts.
- Manage endpoint security with Microsoft Defender and Intune — device compliance, configuration, and threat protection across endpoints.
- Implement data protection controls using Microsoft Purview / DLP, and monitor, triage, and respond to alerts surfaced in the Microsoft security stack.
- Administer Azure subscriptions, role-based access control (RBAC), and resource governance, applying security and compliance standards across the cloud estate.
- Support Azure network and infrastructure security — virtual networks, network security groups, and a hub-and-spoke landing zone model — in partnership with the broader IT team.
- Use Microsoft Defender for Cloud to assess posture, surface vulnerabilities, and drive remediation of identified risks.
- Partner with eSentire, BPP’s managed SOC-as-a-Service (SOC-aaS) provider, to support larger-scale threat detection and response, serving as the primary liaison between eSentire and BPP.
- Collaborate and communicate clearly and consistently across both teams — triaging and escalating alerts, providing environmental context, and ensuring eSentire’s findings translate into timely, well-coordinated action within BPP.
- Document standards and report on security configuration, audit readiness, and remediation of identified gaps.
Cisco Network Administration:
- Partner with BPP’s managed network services provider (MSP), who supports day-to-day administration of the network, serving as the primary liaison between the MSP and BPP — the same partnership model used with eSentire on the security side.
- Collaborate and communicate clearly and consistently with the MSP — coordinating changes, escalations, and projects, and ensuring network work stays aligned with BPP’s operational needs and security posture.
- Help administer and maintain Cisco routing and switching infrastructure alongside the MSP, including VLANs, trunking, inter-VLAN routing, and WAN links.
- Secure the network through segmentation, access control lists, and firewall policy, with a focus on protecting both office and manufacturing networks.
- Diagnose and resolve connectivity issues end-to-end, from the edge to the production floor, minimizing downtime in a manufacturing environment.
- Monitor network performance and capacity, manage wireless coverage, and plan for growth and resiliency.
- Keep network documentation, diagrams, and change records current and accurate.
Security Awareness & Training:
- Develop and deliver company-wide cybersecurity training that is clear, engaging, and accessible to non-technical staff.
- Run phishing simulation campaigns, measure results, and coach employees on recognizing and reporting threats.
- Educate teams on the importance of privileged access controls, secure authentication, and good security hygiene across the organization.
- Be an approachable, trusted point of contact — someone people feel comfortable coming to with questions or concerns.
- Foster a culture of security awareness as a normal, everyday part of how the company operates.
Required Qualifications:
- CCNA certification.
- Demonstrated hands-on experience with Microsoft Azure — administering subscriptions, RBAC, resource governance, and Azure networking — along with Entra ID identity and access management.
- Hands-on experience administering Microsoft 365 and related security and identity tooling.
- Solid understanding of network fundamentals — routing, switching, VLANs, firewalls, and segmentation.
- Strong interpersonal and communication skills, with the ability to explain technical concepts to non-technical audiences and present confidently to groups.
- A personable, collaborative approach and a genuine willingness to help colleagues.
Preferred Qualifications:
- Microsoft security certifications such as SC-300 (Identity & Access Administrator) or AZ-500 (Azure Security Engineer).
- Additional security credentials such as CompTIA Security+ or CISSP.
- Experience with Microsoft Intune, Defender, and Purview / DLP.
- Experience designing or operating Azure landing zones (hub-and-spoke) and infrastructure-as-code or policy-based governance.
- Experience delivering or building security awareness and phishing programs.
- IT experience in a manufacturing or industrial environment.
Team & Working Style:
This is a front-facing role. You will work directly with staff across the business and act as a visible, approachable point of contact for security and IT. You will also be the key communication link between BPP and its managed partners — eSentire on the security side and BPP’s MSP on the network side — so strong collaboration, clear communication, and the ability to coordinate across organizations are central to success in this role.
Cybersecurity and network administration are the priority of this position. That said, as part of a smaller, more agile IT team, flexibility is essential. The right person is happy to jump in and help with other work items, projects, and support tickets as workload demands — comfortable moving between focused, specialized work and broader day-to-day IT support to keep the team moving.
The base pay range for this role is $80,000 – $120,000 per year.
Equal Opportunity Employer
Butcher Power Products is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.
If you require a reasonable accommodation during the application or interview process, please let us know.
Compensation ranges are provided in accordance with applicable state and local pay transparency laws.
Similar Jobs
Artificial Intelligence • Cloud • Security • Software • Cybersecurity
Lead and scale strategic ISV go-to-market partnerships globally by aligning with Product, developing and executing GTM plans, driving joint revenue opportunities, enabling field and partner sales, creating marketplace listings, and measuring partnership performance to optimize impact.
Top Skills:
AICloud MarketplacesCloud TechnologiesDatadogSecurity
.png)
Consumer Web • eCommerce • Machine Learning • Software • Sports • Analytics
Design, build, and operate scalable AWS-based backend services and APIs for the Collectors Vault. Own architecture and delivery, improve performance and reliability, mentor engineers, and leverage modern AI tools to accelerate development and engineering velocity.
Top Skills:
APIsAWSC#Claude Code CliCodexEvent-Driven ArchitecturesJavaServerless
Consumer Web • eCommerce • Machine Learning • Software • Sports • Analytics
Lead backend and full-stack work on the Payments team, building multi-gateway integrations (Stripe, PayPal), payment APIs, and customer payment UIs. Ensure secure, compliant (PCI-DSS) payment flows, reliability, observability, and scalability across AWS/Kubernetes microservices. Partner cross-functionally to design architecture, implement settlement/reconciliation, and maintain high availability.
Top Skills:
.NetAi-Assisted Development ToolsAWSC#DatadogDynamoDBKafkaKubernetesPaypalPci-DssPostgresReactStripeSvelteTypescript
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
