Sr. Network Engineer -Information Technology - Shift 1

• THE ROLE:

• This position will report to the: Supervisor-Network Engineer
• Travel requirements: 10%
• FLSA Status: Exempt
• Shift: 1st
• Employment Category: Full-Time Regular
• Pay Range: $100,000-$125,000

STRONG HISTORY. EXCITING FUTURE

Bolthouse Fresh Foods is a leader in carrot production, serving as a grower, packer, processor, and shipper. Headquartered in Bakersfield, California, we are a proud employer to 1,600 dedicated individuals. Since 1915, we have been committed to growing and producing high-quality carrots, and today, we are one of North America’s largest growers and distributors of fresh carrots for cooking and snacking. Additionally, we supply premium natural ingredients for the food and beverage industry. With over a century of excellence, Bolthouse Fresh™ products are available at major retailers across North America.

Bolthouse Fresh Foods has approximately 1,600 employees.

WHAT YOU’LL BE RESPONSIBLE FOR IN THIS ROLE

The Senior Network Engineer is responsible for the design, implementation, security, and operational support of enterprise and industrial IT/OT network infrastructure across multiple locations. This position serves as a senior technical resource for network architecture, cybersecurity, cloud connectivity, operational technology environments, and critical infrastructure modernization while helping ensure the availability, reliability, and security of business-critical systems.

Business Value and Strategic Alignment

• Strengthens internal ownership of critical network infrastructure, firewall platforms, cloud connectivity, and IT/OT segmentation initiatives.
• Supports strategic infrastructure initiatives requiring senior-level engineering, including network modernization, secure segmentation, WAN and cloud connectivity, and operational resiliency.
• Reduces operational risk by improving escalation coverage, continuity of technical knowledge, and response capability for critical incidents.
• Provides technical leadership that may reduce dependency on external consulting or managed service resources for routine engineering, design, troubleshooting, and implementation activities.

Network Architecture and Engineering

· Design, implement, and maintain scalable and secure enterprise network architectures across corporate, plant, and remote-site environments.

· Lead routing, switching, VLAN, VRF, DMZ, and zone-based segmentation design efforts.

· Develop and maintain logical and physical network diagrams, IP addressing standards, configuration standards, and architecture documentation.

· Architect resilient network solutions using redundant firewalls, high-availability switching, port-channeling, MLAG, and resilient WAN designs where appropriate.

Network Security and Firewall Engineering

· Design, implement, and maintain firewall policies using least-privilege and Zero Trust principles.

· Administer Fortinet firewall platforms, IPsec VPN, SSL VPN, and secure remote-access technologies.

· Support segmentation, access-control, threat-reduction, and network security initiatives across enterprise and OT environments.

· Participate in security reviews, audit support, incident response, and remediation planning as needed.

WAN, Cloud, and Connectivity

· Design and support WAN connectivity, internet circuits, hybrid WAN, site-to-site VPN, and inter-site routing across multiple locations.

· Support Microsoft Azure and hybrid cloud networking, including secure on-premises to cloud connectivity.

· Troubleshoot complex ISP, routing, VPN, latency, packet loss, and connectivity issues.

· Monitor network health, develop capacity plans, and recommend improvements to support performance and uptime objectives.

Operational Technology and Manufacturing Network Support

· Support industrial network environments including PLCs, HMIs, plant-floor applications, production networks, and utility systems.

· Design and maintain secure IT/OT segmentation models aligned with operational reliability and cybersecurity objectives.

· Coordinate with plant operations, engineering, vendors, and maintenance teams to minimize downtime during network changes.

· Support secure connectivity for manufacturing systems while maintaining business continuity and production availability.

Wireless, Physical Security, and Infrastructure Systems

· Design, support, and continuously improve enterprise wireless networking, coverage, capacity, and performance.

· Support network connectivity for camera systems, NVRs, access control, and other physical security infrastructure.

· Ensure proper segmentation, bandwidth planning, and network resiliency for critical security systems.

Operations, Troubleshooting, and Leadership

· Serve as a senior escalation point for complex network, firewall, routing, switching, wireless, VPN, and connectivity issues.

· Lead root cause analysis, outage response, post-incident review, and corrective action planning.

· Support change management, maintenance windows, implementation planning, rollback planning, and post-change validation.

· Provide technical guidance, mentorship, and knowledge transfer to network engineers, support teams, vendors, and cross-functional stakeholders.

· Act as a subject matter expert for network technologies and participate in architecture planning, vendor evaluations, and roadmap development.

Work Environment and Availability

· Supports office, data center, manufacturing, plant-floor, and remote-site environments as required.

· May participate in scheduled maintenance windows, after-hours changes, escalation support, and incident response activities.

· May require occasional travel to company locations, remote sites, or vendor facilities based on business needs.

Success Measures

· Reliable and secure operation of enterprise, cloud, WAN, wireless, firewall, and IT/OT network environments.

· Timely delivery of approved network initiatives with clear documentation, validation, and change-control discipline.

· Reduced operational risk through improved escalation coverage, knowledge transfer, standardization, and proactive remediation.

· Performs other duties as assigned.

WHAT WE’RE LOOKING FOR

Required Skills and Abilities:

• Advanced knowledge of enterprise networking concepts, including TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, STP, QoS, and routing protocols.
• Strong experience with Cisco, Palo Alto, Fortinet, Aruba, Meraki, or similar networking technologies.
• Thorough understanding of network security principles and best practices.
• Experience with SD-WAN, wireless network architecture, and cloud networking technologies.
• Strong troubleshooting and analytical skills.
• Ability to manage multiple projects and priorities in a fast-paced environment.
• Excellent verbal and written communication skills.
• Strong project management and organizational abilities.
• Ability to mentor and develop technical team members.
• Ability to communicate technical concepts to non-technical stakeholders.
• Strong attention to detail and commitment to operational excellence

Minimum Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field; equivalent work experience may be considered.
• Minimum of 7 years of progressive experience in network engineering, infrastructure management, or related IT roles.
• Experience supporting enterprise-level network environments across multiple locations.
• Experience configuring and managing routers, switches, firewalls, and wireless infrastructure.
• Candidates must have a verifiable history of safe vehicle operation and meet company standards for driving eligibility. This includes maintaining a clean driving record, which will be verified through a background check.

Preferred Qualifications:

• Experience supporting manufacturing, distribution, operational technology, or industrial network environments.
• Experience with firewall governance, segmentation strategy, network separation, merger/divestiture support, or major infrastructure migration initiatives.
• Experience with camera systems, access control systems, NVRs, and physical security network infrastructure.
• Experience developing technical standards, SOPs, runbooks, change-control documentation, and architecture diagrams.
• Experience coordinating vendors, MSPs, consultants, plant operations teams, and cross-functional business stakeholders.
• Palo Alto, Fortinet, Aruba, Meraki, AWS, or Azure networking certifications.
• Project Management experience.

PHYSICAL DEMANDS:

• Work is performed primarily in a standard office environment with frequent interruptions.
• Ability and mobility to work in an office setting; to stand or sit for prolonged periods of time; to occasionally stoop, bend, climb, kneel, crouch, reach, and twist.
• Lift, carry, push, and/or pull light to moderate amounts of weight up to 50 lbs.
• Operate office equipment requires repetitive hand movement and fine coordination including use of a computer keyboard.
• Ability to stand for long periods of time in an upright position walking on both even and uneven surfaces
• Ability to ascend and descend ladders, scaffolding, using 3-point contact on a regular basis
• Ability to stoop, crouch, and kneel on a regular basis

HOURS & WORKDAYS:

1st Shift – 8:00am – 5:00pm, Monday through Friday; Flexibility is required to work before or after scheduled hours, as well as evenings, weekends, holidays, and occasional travel, based on business and operational needs

WHAT WE OFFER

Our rich benefits packages are designed to support the health and well-being of both our eligible co-workers and their families.

• Medical
• Dental
• Vision
• Group Life and AD&D
• Voluntary Life and AD&D
• Group Short-Term Disability
• Group Long-Term Disability
• Flexible Spending Accounts
• Employee Assistance Program
• 401k
• Paid Time Off

EQUAL EMPLOYMENT OPPORTUNITY

"Bolthouse Fresh Foods is committed to creating a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, genetic information, or any other characteristic protected by law. We are dedicated to fostering a workplace where everyone feels valued, respected and empowered to achieve their full potential."

REASONABLE ACCOMMODATIONS:

Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions. If you are interested in applying for employment with Bolthouse Fresh Foods and need special assistance to apply for a posted position, or if you believe you do not meet any of the required qualifications of a posted position due to a protected disability and would like to explore the possibility of accommodation, please contact our Talent Acquisition team at: TalentAcquisition@BolthouseFresh.com for additional support or guidance.

RECRUITMENT AGENCIES:

Bolthouse Fresh Foods does not accept unsolicited agency resumes. Bolthouse Fresh Foods is not responsible for any fees related to unsolicited resumes.

Shift 1 : 8:00am – 5:00pm, Monday through Friday; Flexibility is required to work before or after scheduled hours, as well as evenings, weekends, holidays, and occasional travel, based on business and operational needs.