About Schweid & Sons

Schweid & Sons is a family-owned and operated premium ground beef company with a proud heritage spanning four generations. We supply top-quality beef to Retail, Foodservice, and National Account customers across the U.S. and are committed to quality, customer service, and innovation in protein manufacturing.

Role Overview

We are looking for a builder, not just a fixer. The IT Systems Engineer (Cloud, Security, Automation & Network Operations) will own the modernization of our infrastructure, moving us from manual support processes to a "Modern Management" architecture. You will be responsible for the architecture, security, and administration of our Microsoft cloud stack (Azure, Entra ID, Intune, M365), core infrastructure, network systems, and operations technology (OT). Your goal is to engineer out the need for repetitive support tickets through automation and robust policy design while ensuring network reliability and operational continuity.

Key Responsibilities

1. Cloud Infrastructure & Identity (Azure/M365)

Serve as the Subject Matter Expert (SME) for Microsoft Entra ID (formerly Azure AD), managing conditional access, app registrations, and lifecycle management.
Manage Azure resources, including VM maintenance, virtual networking, storage accounts, Azure Monitor, and cost optimization.
Execute the upgrade and maintenance roadmap for SQL Server environments, including Azure SQL databases.
Architect and maintain M365 services including Exchange Online, SharePoint, Teams, and OneDrive for Business.
Optimize M365 licensing, service health monitoring, and tenant-wide configuration management.
Implement Azure governance policies, resource tagging strategies, and subscription management best practices.

2. Endpoint Engineering (Intune/Autopilot)

Design and maintain Microsoft Intune for all endpoints (Windows/Mac/Mobile).
Implement Windows Autopilot to achieve zero-touch provisioning for new hires.
Create remediation scripts to automatically fix common endpoint issues before they become tickets.

3. Network Infrastructure & Operations Technology

Design, implement, and maintain enterprise network infrastructure including switches, routers, firewalls, and wireless access points.
Manage VPN configurations, VLAN segmentation, Azure Virtual Network (VNet) peering, and hybrid connectivity solutions (ExpressRoute, Site-to-Site VPN).
Monitor network performance and troubleshoot connectivity issues across on-premises and cloud environments.
Oversee Operations Technology (OT) systems, including building management systems, access control, and industrial network components.
Ensure proper network segmentation between IT and OT environments for security and operational integrity.

4. Security & Compliance

Hardening of the M365 environment using Defender for Endpoint, Defender for Identity, and Microsoft Defender for Cloud.
Manage vulnerability assessments and patch management strategies across IT, OT, and cloud systems.
Lead Disaster Recovery (DR) planning, documentation, and annual testing, including Azure Site Recovery implementation.
Implement and maintain network security controls including firewalls, Azure Firewall, Network Security Groups (NSGs), IDS/IPS, and network access control (NAC).
Manage M365 compliance features including Data Loss Prevention (DLP), retention policies, and eDiscovery.

5. Automation & Escalation

Utilize PowerShell and Azure CLI to automate repetitive administrative tasks (user onboarding, reporting, bulk changes, network configuration, Azure resource deployment).
Act as the final point of escalation (L3) for complex technical issues that L1/L2 cannot resolve.
Mentor junior staff on modern IT practices, cloud architecture, and network operations.
Develop and maintain Infrastructure as Code (IaC) using Azure Resource Manager (ARM) templates or Terraform.

Qualifications

Experience: 3-5+ years in Systems Engineering or Administration with demonstrated cloud, network, and operations technology experience.
Core Tech Stack: Deep expertise in the Microsoft ecosystem: Intune, Autopilot, Entra ID, Azure, M365 (Exchange Online, SharePoint, Teams), and Office 365 admin center.
Azure Expertise: Hands-on experience with Azure IaaS/PaaS services, Azure Active Directory (Entra ID), Azure networking, and hybrid cloud architectures.
Network Technologies: Strong hands-on experience with enterprise networking: Cisco/HP/Aruba switches and routers, Palo Alto/Fortinet firewalls, wireless infrastructure, and SD-WAN solutions.
Operations Technology: Familiarity with OT/IoT systems, building automation, and industrial network protocols (Modbus, BACnet, etc.).
Scripting: Intermediate to Advanced proficiency in PowerShell is required; experience with Azure CLI and automation frameworks is preferred.
Networking: Solid understanding of DNS, DHCP, VPN, firewall configurations, routing protocols (BGP, OSPF), Azure networking (VNets, NSGs, ExpressRoute), and network monitoring tools.
Soft Skills: Ability to explain complex technical risks to non-technical stakeholders.
Certifications (Preferred): Microsoft Certified: Azure Administrator Associate, Azure Solutions Architect Expert, M365 Certified: Enterprise Administrator Expert, or equivalent networking certifications (CCNA, CCNP).

Success Metrics (First 90 Days)

Full deployment of Intune Autopilot for new laptop provisioning.
Successful audit and security hardening of the existing Entra ID and M365 environment.
Complete Azure infrastructure review, cost optimization recommendations, and governance policy implementation.
Complete network infrastructure audit and documentation of all network devices, topologies, OT systems, and Azure networking architecture.
Documentation of all core infrastructure, cloud services, and network workflows.

What We Offer

The expected compensation for this role is $85,000 - $120,000 per year, depending on experience and qualifications. Final compensation will be discussed during the interview process.
Time Off: PTO, Safe & Sick Time, and Paid Holidays.
Health Benefits: Medical, vision, dental, HRA and voluntary disability benefits.
Financial Benefits: 401(k) + employer match and life insurance.
Location: This is an on-site role located in East Rutherford, NJ (hybrid).
Environment: Our facility is refrigerated. In this role you will be exposed to < 40 degrees for multiple hours of the day.

Our Culture

At Schweid & Sons, our culture is built on our core values: Trust, Respect, Innovation, Passion, and Pride. We believe in creating an environment where people can collaborate, contribute ideas, and grow their careers while delivering the very best burger experience to our customers. Joining our team means becoming part of a company that values its people as much as its product.

Equal Opportunity & Accommodations

At Schweid & Sons we believe that to build the best team, we must hire using an objective lens. We are committed to fair hiring practices where we hire people for their potential and advocate for diversity, equity, and inclusion. As such, we do not discriminate or make decisions based on your race, color, religion, gender identity or expression, sexual orientation, national origin, age, military service eligibility, veteran status, marital status, disability, or any other protected class. If you need a reasonable accommodation, please let your recruiter know how we can make your interview process work best for you.

Disclaimer

The above statements are intended to describe the general nature and level of work being performed by the Team member(s) assigned to this position. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required of individuals in this position. Position Expectations may be subject to change as the needs of the organization changes.