Sr. Network Engineer -Information Technology - Shift 1

New Carrot Farms Llc; Bakersfield (CA); On-site; USD 100,000 - 125,000; Full time

Job summary

Bolthouse Fresh Foods in Bakersfield, CA is seeking a Sr. Network Engineer to design, implement, secure, and operate enterprise IT/OT networks across multiple sites.

You will lead architecture, cybersecurity, cloud connectivity, and modernization efforts to ensure the availability and performance of critical systems. The role requires senior engineering judgment, hands-on troubleshooting, and mentorship of junior staff.

Qualifications

• Advanced knowledge of enterprise networking concepts (TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, STP, QoS).
• Strong experience with Cisco, Palo Alto, Fortinet, Aruba, Meraki or similar networking tech.
• Thorough understanding of network security principles and best practices.
• Experience with SD-WAN, wireless network architecture, and cloud networking technologies.
• Strong troubleshooting and analytical skills.
• Ability to manage multiple projects and priorities in a fast-paced environment.
• Excellent verbal and written communication skills.
• Strong project management and organizational abilities.

Responsibilities

• Design, implement, and maintain scalable and secure enterprise network architectures across corporate, plant, and remote sites.
• Lead routing, switching, VLAN, VRF, DMZ, and zone-based segmentation design efforts.
• Develop and maintain network diagrams, IP addressing standards, and architecture documentation.
• Architect resilient network solutions with redundant firewalls and high-availability designs.

Skills

TCP/IP

DNS

DHCP

BGP

OSPF

VLANs

STP

QoS

Routing protocols

Cloud networking

Troubleshooting

Project management

Communication

Tools

Cisco

Palo Alto

Fortinet

Aruba

Meraki

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Sr. Network Engineer -Information Technology - Shift 1

Full-Time Regular Professional Bakersfield, CA, US

5 days ago Requisition ID: 2162

Salary Range: $100,000.00 To $125,000.00 Annually

THE ROLE:

• This position will report to the: Supervisor-Network Engineer
• FLSA Status: Exempt
• Shift: 1st
• Employment Category: Full-Time Regular
• Pay Range: $100,000-$125,000

STRONG HISTORY. EXCITING FUTURE

Bolthouse Fresh Foods is a leader in carrot production, serving as a grower, packer, processor, and shipper. Headquartered in Bakersfield, California, we are a proud employer to 1,600 dedicated individuals. Since 1915, we have been committed to growing and producing high-quality carrots, and today, we are one of North America’s largest growers and distributors of fresh carrots for cooking and snacking. Additionally, we supply premium natural ingredients for the food and beverage industry. With over a century of excellence, Bolthouse Fresh™ products are available at major retailers across North America.

Bolthouse Fresh Foods has approximately 1,600 employees.

WHAT YOU’LL BE RESPONSIBLE FOR IN THIS ROLE

The Senior Network Engineer is responsible for the design, implementation, security, and operational support of enterprise and industrial IT/OT network infrastructure across multiple locations. This position serves as a senior technical resource for network architecture, cybersecurity, cloud connectivity, operational technology environments, and critical infrastructure modernization while helping ensure the availability, reliability, and security of business-critical systems.

Business Value and Strategic Alignment

• Strengthens internal ownership of critical network infrastructure, firewall platforms, cloud connectivity, and IT/OT segmentation initiatives.
• Supports strategic infrastructure initiatives requiring senior-level engineering, including network modernization, secure segmentation, WAN and cloud connectivity, and operational resiliency.
• Reduces operational risk by improving escalation coverage, continuity of technical knowledge, and response capability for critical incidents.
• Provides technical leadership that may reduce dependency on external consulting or managed service resources for routine engineering, design, troubleshooting, and implementation activities.

Network Architecture and Engineering

• Design, implement, and maintain scalable and secure enterprise network architectures across corporate, plant, and remote-site environments.
• Lead routing, switching, VLAN, VRF, DMZ, and zone-based segmentation design efforts.
• Develop and maintain logical and physical network diagrams, IP addressing standards, configuration standards, and architecture documentation.
• Architect resilient network solutions using redundant firewalls, high-availability switching, port-channeling, MLAG, and resilient WAN designs where appropriate.

Network Security and Firewall Engineering

• Design, implement, and maintain firewall policies using least-privilege and Zero Trust principles.
• Administer Fortinet firewall platforms, IPsec VPN, SSL VPN, and secure remote-access technologies.
• Support segmentation, access-control, threat-reduction, and network security initiatives across enterprise and OT environments.
• Participate in security reviews, audit support, incident response, and remediation planning as needed.

WAN, Cloud, and Connectivity

• Design and support WAN connectivity, internet circuits, hybrid WAN, site-to-site VPN, and inter-site routing across multiple locations.
• Support Microsoft Azure and hybrid cloud networking, including secure on-premises to cloud connectivity.
• Troubleshoot complex ISP, routing, VPN, latency, packet loss, and connectivity issues.
• Monitor network health, develop capacity plans, and recommend improvements to support performance and uptime objectives.

Operational Technology and Manufacturing Network Support

• Support industrial network environments including PLCs, HMIs, plant-floor applications, production networks, and utility systems.
• Design and maintain secure IT/OT segmentation models aligned with operational reliability and cybersecurity objectives.
• Coordinate with plant operations, engineering, vendors, and maintenance teams to minimize downtime during network changes.
• Support secure connectivity for manufacturing systems while maintaining business continuity and production availability.

Wireless, Physical Security, and Infrastructure Systems

• Design, support, and continuously improve enterprise wireless networking, coverage, capacity, and performance.
• Support network connectivity for camera systems, NVRs, access control, and other physical security infrastructure.
• Ensure proper segmentation, bandwidth planning, and network resiliency for critical security systems.

Operations, Troubleshooting, and Leadership

• Serve as a senior escalation point for complex network, firewall, routing, switching, wireless, VPN, and connectivity issues.
• Lead root cause analysis, outage response, post-incident review, and corrective action planning.
• Support change management, maintenance windows, implementation planning, rollback planning, and post-change validation.
• Provide technical guidance, mentorship, and knowledge transfer to network engineers, support teams, vendors, and cross-functional stakeholders.
• Act as a subject matter expert for network technologies and participate in architecture planning, vendor evaluations, and roadmap development.

Work Environment and Availability

• Supports office, data center, manufacturing, plant-floor, and remote-site environments as required.
• May participate in scheduled maintenance windows, after-hours changes, escalation support, and incident response activities.
• May require occasional travel to company locations, remote sites, or vendor facilities based on business needs.

Success Measures

• Reliable and secure operation of enterprise, cloud, WAN, wireless, firewall, and IT/OT network environments.
• Timely delivery of approved network initiatives with clear documentation, validation, and change-control discipline.
• Reduced operational risk through improved escalation coverage, knowledge transfer, standardization, and proactive remediation.
• Performs other duties as assigned.

WHAT WE’RE LOOKING FOR

Required Skills and Abilities:

• Advanced knowledge of enterprise networking concepts, including TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, STP, QoS, and routing protocols.
• Strong experience with Cisco, Palo Alto, Fortinet, Aruba, Meraki, or similar networking technologies.
• Thorough understanding of network security principles and best practices.
• Experience with SD-WAN, wireless network architecture, and cloud networking technologies.
• Strong troubleshooting and analytical skills.
• Ability to manage multiple projects and priorities in a fast-paced environment.
• Excellent verbal and written communication skills.
• Strong project management and organizational