Operate and secure the Microsoft 365/Azure/Entra ID environment (Conditional Access, PIM, RBAC), manage endpoint security with Defender/Intune and Purview/DLP, administer Cisco routing/switching and VLANs, liaise with managed providers (eSentire and MSP), run security awareness/phishing programs, document standards, and troubleshoot network and security incidents across office and manufacturing environments.
Butcher Power Products (BPP) designs and manufactures mission‑critical and industrial power solutions for essential infrastructure nationwide. Headquartered in Sacramento, CA, our teams collaborate closely across engineering, manufacturing, and operations to build reliable, high‑quality systems and take pride in delivering work that truly matters.
Job Summary:
Butcher Power Products is seeking a Cybersecurity & Network Administrator to strengthen and operate the security and network backbone of our business. This role owns the implementation of security policy across our Microsoft 365 and Azure / Entra ID environment, administers our Cisco network infrastructure, and serves as the company’s go-to resource for cybersecurity awareness.
This is a hands-on, highly visible position that blends deep technical work with people-facing responsibility. The right person is equally comfortable hardening Conditional Access policies, troubleshooting a VLAN on the production floor, and standing in front of a room teaching staff how to spot a phishing email. You will work closely with the IT team and partner with engineering, operations, and leadership to keep the organization secure and connected.
Key Responsibilities:
Microsoft Security & Identity:
- Design, implement, and maintain security policy across Microsoft 365, Azure, and Entra ID, aligned to least-privilege and Zero Trust principles.
- Build and manage Conditional Access policies, multi-factor authentication, and Entra ID Protection to control access and respond to identity risk.
- Govern privileged access through Privileged Identity Management (PIM), just-in-time elevation, role scoping, and review of administrative accounts.
- Manage endpoint security with Microsoft Defender and Intune — device compliance, configuration, and threat protection across endpoints.
- Implement data protection controls using Microsoft Purview / DLP, and monitor, triage, and respond to alerts surfaced in the Microsoft security stack.
- Administer Azure subscriptions, role-based access control (RBAC), and resource governance, applying security and compliance standards across the cloud estate.
- Support Azure network and infrastructure security — virtual networks, network security groups, and a hub-and-spoke landing zone model — in partnership with the broader IT team.
- Use Microsoft Defender for Cloud to assess posture, surface vulnerabilities, and drive remediation of identified risks.
- Partner with eSentire, BPP’s managed SOC-as-a-Service (SOC-aaS) provider, to support larger-scale threat detection and response, serving as the primary liaison between eSentire and BPP.
- Collaborate and communicate clearly and consistently across both teams — triaging and escalating alerts, providing environmental context, and ensuring eSentire’s findings translate into timely, well-coordinated action within BPP.
- Document standards and report on security configuration, audit readiness, and remediation of identified gaps.
Cisco Network Administration:
- Partner with BPP’s managed network services provider (MSP), who supports day-to-day administration of the network, serving as the primary liaison between the MSP and BPP — the same partnership model used with eSentire on the security side.
- Collaborate and communicate clearly and consistently with the MSP — coordinating changes, escalations, and projects, and ensuring network work stays aligned with BPP’s operational needs and security posture.
- Help administer and maintain Cisco routing and switching infrastructure alongside the MSP, including VLANs, trunking, inter-VLAN routing, and WAN links.
- Secure the network through segmentation, access control lists, and firewall policy, with a focus on protecting both office and manufacturing networks.
- Diagnose and resolve connectivity issues end-to-end, from the edge to the production floor, minimizing downtime in a manufacturing environment.
- Monitor network performance and capacity, manage wireless coverage, and plan for growth and resiliency.
- Keep network documentation, diagrams, and change records current and accurate.
Security Awareness & Training:
- Develop and deliver company-wide cybersecurity training that is clear, engaging, and accessible to non-technical staff.
- Run phishing simulation campaigns, measure results, and coach employees on recognizing and reporting threats.
- Educate teams on the importance of privileged access controls, secure authentication, and good security hygiene across the organization.
- Be an approachable, trusted point of contact — someone people feel comfortable coming to with questions or concerns.
- Foster a culture of security awareness as a normal, everyday part of how the company operates.
Required Qualifications:
- CCNA certification.
- Demonstrated hands-on experience with Microsoft Azure — administering subscriptions, RBAC, resource governance, and Azure networking — along with Entra ID identity and access management.
- Hands-on experience administering Microsoft 365 and related security and identity tooling.
- Solid understanding of network fundamentals — routing, switching, VLANs, firewalls, and segmentation.
- Strong interpersonal and communication skills, with the ability to explain technical concepts to non-technical audiences and present confidently to groups.
- A personable, collaborative approach and a genuine willingness to help colleagues.
Preferred Qualifications:
- Microsoft security certifications such as SC-300 (Identity & Access Administrator) or AZ-500 (Azure Security Engineer).
- Additional security credentials such as CompTIA Security+ or CISSP.
- Experience with Microsoft Intune, Defender, and Purview / DLP.
- Experience designing or operating Azure landing zones (hub-and-spoke) and infrastructure-as-code or policy-based governance.
- Experience delivering or building security awareness and phishing programs.
- IT experience in a manufacturing or industrial environment.
Team & Working Style:
This is a front-facing role. You will work directly with staff across the business and act as a visible, approachable point of contact for security and IT. You will also be the key communication link between BPP and its managed partners — eSentire on the security side and BPP’s MSP on the network side — so strong collaboration, clear communication, and the ability to coordinate across organizations are central to success in this role.
Cybersecurity and network administration are the priority of this position. That said, as part of a smaller, more agile IT team, flexibility is essential. The right person is happy to jump in and help with other work items, projects, and support tickets as workload demands — comfortable moving between focused, specialized work and broader day-to-day IT support to keep the team moving.
The base pay range for this role is $80,000 – $120,000 per year.
Equal Opportunity Employer
Butcher Power Products is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.
If you require a reasonable accommodation during the application or interview process, please let us know.
Compensation ranges are provided in accordance with applicable state and local pay transparency laws.
Similar Jobs
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Design, build, and operate core backend infrastructure for distributed systems (KV stores, schema-less stores, event streaming, auth, config, rate limiting, feature flags). Improve observability, performance, scalability, and reliability; collaborate with ML, search, data, frontend, and product teams; deliver interdependent, deadline-sensitive projects.
Top Skills:
AWSAzureC++DockerElasticsearchGCPGoIstioJavaKafkaOpensearchPython
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Drive new business sales of ServiceNow SaaS licenses through account and territory planning, prospect research, and field sales. Build C-suite relationships, orchestrate account strategy with cross-functional teams, advise customers on IT roadmaps and AI integration, and identify specialists to close deals.
Top Skills:
AISaaSServicenow
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Design, build, and scale Moveworks AI cloud infrastructure and developer platform across regions and clouds. Lead DevOps projects, build CI/CD pipelines and IaC, manage Kubernetes/Istio, ensure security, resilience, observability, cost optimization, and collaborate with platform, ML, data, frontend, and security teams.
Top Skills:
AnsibleAWSAws KmsCi/CdCloudFormationDnsElastic Load BalancerHelmIamIstioJenkinsKubernetesSecurity GroupsTerraformVpcVpn
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
