Systems and Security Engineer

LaundryLux; Inwood (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

LaundryLux is seeking a Systems and Security Engineer to maintain and secure its core IT infrastructure for North American operations. You’ll support network, wireless, firewall, endpoint protection, Microsoft 365, email security, servers, backups, and critical technology platforms.

Responsibilities include incident response, documentation, and coordinating with vendors for service levels. Strong communication and problem-solving are essential to protect company systems and data.

Qualifications

• Bachelor’s degree in information technology, computer science, cybersecurity or related field.
• 5+ years of experience in IT infrastructure, network or security operations.
• Certifications such as Network+, Security+, Microsoft, Sophos, Cisco, VMware or equivalent preferred.

Responsibilities

• Maintain and secure LaundryLux’s core IT infrastructure including LAN, WAN, wireless, firewall, VPN and internet circuits.
• Administer and support Microsoft 365 services, Entra ID, Intune, and related security configurations.
• Monitor security alerts across network, endpoint protection, and email security, and coordinate remediation with IT leadership.
• Document network diagrams, inventories, SOPs, change records, and recovery procedures.
• Coordinate vendor support, manage projects, and provide clear updates and evidence of completion.

Skills

LAN/WAN troubleshooting

Microsoft 365 administration

Endpoint security

Network monitoring

Documentation

Collaboration

Education

Bachelor’s degree in IT/CS or related

Tools

Dell PowerEdge servers

Dell switches

VMware

Backup solutions

Job description

Laundrylux is the North American supplier of Electrolux Professional & Wascomat equipment for Laundromats, Coin Laundries & On-Premises Laundries. From financing to repairs, Laundrylux provides a comprehensive set of services to help with all elements of commercial laundry.

Systems and Security Engineer

This role is responsible for maintaining, securing, documenting, and improving LaundryLux’s core IT infrastructure. The position supports network infrastructure, wireless connectivity, firewall administration, endpoint security, Microsoft 365 administration, email security, servers, backups, and business‑critical technology platforms. It serves as a primary technical escalation point for complex infrastructure and security issues, supports business operations through timely incident response, and works with IT leadership to implement technology improvements. The role is expected to take ownership of assigned systems and projects, maintain clear documentation, and coordinate with vendors where formal support or service‑level commitments are required.

Responsibilities

Network and Infrastructure Administration

• Maintain and support the company’s LAN, WAN, wireless, firewall, VPN, internet circuits, switches, network closets, and related infrastructure equipment.
• Monitor network availability, utilization, latency, throughput, and overall performance; identify and resolve infrastructure issues before they materially impact the business.
• Support wireless access points, warehouse Wi‑Fi, RF‑related troubleshooting, PoE switching, cabling, VLAN assignments, and wireless coverage improvements.
• Assist with the selection, installation, configuration, testing, and ongoing support of network hardware, infrastructure devices, and related systems.
• Maintain day‑to‑day server and infrastructure operations, including hardware checks, backup coordination, patching support, and vendor escalation where required.
• Support conferencing and AV‑related infrastructure, including Avocor displays, meeting room connectivity, Teams room readiness, and related network dependencies.

Security Administration and Monitoring

• Administer and support firewall, endpoint security, email security, web filtering, and related security tools used across the organization.
• Support Sophos firewall and endpoint security administration, including policy review, alert response, VPN support, firewall rule coordination, and redundancy planning.
• Support Barracuda email security policies to improve spam filtering, phishing protection, email delivery, quarantine handling, domain authentication, and safe sender/block list management.
• Monitor and investigate security alerts across network infrastructure, endpoint protection, Microsoft 365, and email security platforms.
• Assist with incident response by investigating suspicious activity, documenting findings, coordinating remediation, and escalating risks to IT leadership.
• Maintain confidentiality and protect company systems, data, and access credentials in accordance with IT and security standards.

Microsoft 365, Identity, and Endpoint Administration

• Administer Microsoft 365 services, including Exchange Online, Teams, SharePoint, OneDrive, licensing, distribution groups, shared mailboxes, and email‑related configurations.
• Administer Microsoft Entra ID identity platforms, including user lifecycle support, access management, MFA, authentication policies, conditional access support, and security controls.
• Support endpoint management and compliance through Microsoft Intune or other approved enterprise device management tools.
• Create, modify, and disable user accounts in approved systems, including Active Directory, Microsoft 365, Entra ID, and other assigned platforms.
• Assist with access reviews, security baseline enforcement, and documentation of privileged access or administrator permissions.

Documentation, Process, and Knowledge Management

• Create and maintain accurate network diagrams, infrastructure inventories, firewall documentation, switch port records, wireless AP maps, server records, vendor contacts, support contracts, and recovery procedures.
• Maintain logs for software and firmware updates, service contracts, support contracts, licenses, warranty details, system changes, and administrative procedures.
• Document repeatable troubleshooting procedures and support steps so that the IT department has clear visibility into how core systems are configured and supported.
• Keep documentation current when systems are changed, replaced, upgraded, or retired.
• Ensure documentation is stored in an approved central location and is accessible to authorized IT personnel.

Project, Vendor, and SLA Coordination

• Work with IT leadership on infrastructure upgrades, security improvements, system replacements, conferencing improvements, firewall redundancy, wireless deployments, and other assigned initiatives.
• Serve as the technical owner or primary technical contributor for assigned infrastructure and security projects.
• Evaluate what can be supported internally versus what requires vendor support, formal escalation, or defined service‑level agreement coverage.
• Coordinate vendors working onsite or remotely by providing the information required to troubleshoot, install, configure, or support company systems.
• Provide clear project updates, risks, blockers, timelines, and recommendations to IT leadership.
• Test completed work and provide evidence of completion before closing project tasks or vendor support items.

End‑User and Escalation Support

• Provide timely escalation support for complex network, infrastructure, security, Microsoft 365, hardware, and business systems issues.
• Respond to support needs through the approved ticketing process and provide clear updates to users and IT leadership.
• Diagnose and resolve technical problems, prevent unnecessary escalation, and track resolutions for future reference.
• Provide first‑line support when needed, but primarily operate as an escalation and infrastructure owner for business‑critical issues.
• Train, instruct, and support users or IT team members when new systems, procedures, or technology changes are introduced.
• Complete multiple project and support responsibilities simultaneously, prioritizing based on urgency, business impact, and leadership direction.

Required Skills and Abilities

• Strong LAN, WAN, wireless, firewall, switching, routing, VLAN, VPN, and network troubleshooting knowledge.
• Experience supporting Microsoft 365, Exchange Online, Teams, SharePoint, OneDrive, Entra ID, MFA, and identity‑related administration.
• Experience with endpoint protection, email security, phishing protection, spam filtering, security alert review, and remediation coordination.
• Ability to document technical systems clearly, including diagrams, inventories, SOPs, support procedures, and change records.
• Strong problem‑solving skills with the ability to analyze technical issues, business impact, and appropriate escalation paths.
• Ability to manage multiple priorities and support both project work and time‑sensitive support issues.
• Excellent customer service, communication, and follow‑through skills.
• Ability to collaborate with business users, executives, vendors, and internal IT team members.
• Sound judgment when handling confidential information, administrative access, and security‑sensitive issues.

Preferred Technical Experience

• Microsoft Active Directory, Microsoft 365, Microsoft Entra ID, Exchange Online, Teams, SharePoint, OneDrive, and Intune.
• Sophos firewall, Sophos endpoint protection, VPN, firewall high availability, and security policy administration.
• Barracuda email security or similar email filtering and phishing protection platform.
• Dell PowerEdge servers, Dell switches, VLANs, VMware hosts, virtual servers, backups, UPS units, and network monitoring tools.
• Wireless access point administration, PoE switching, warehouse wireless troubleshooting, and cabling coordination.
• Mitel/ShoreTel or other VoIP systems; conference room display, audio, and collaboration technology support.
• Epicor or other ERP user administration experience is helpful but not required.

Education and Experience

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent work experience may be considered.
• 5 + years of experience in IT infrastructure, Network Administration, Systems Administration, or Security operations.
• At least three years of hands‑on experience with LAN/WAN technologies, firewalls, switching, wireless, network operating systems, topologies, and protocols.
• Demonstrated experience supporting Microsoft 365, identity platforms, endpoint security, and infrastructure documentation.
• Relevant certifications such as Network+, Security+, Microsoft, Sophos, Cisco, VMware, or equivalent credentials are preferred.

Supervisory Responsibility

• None. This role may coordinate vendors, contractors, or internal technical resources during assigned projects but does not have direct supervisory responsibility unless otherwise assigned by IT leadership.

Benefits

• Health benefits package including medical, dental & vision plans
• Life Insurance
• 401(k) with company matching
• Paid Time Off
• Paid Holidays
• Profit Sharing
• Employee Referral Program
• Mentorship Program
• Company Sponsored Training
• Tuition Reimbursement

Equal Opportunity & E‑Verify

We are an equal‑opportunity employer and we are committed to providing reasonable accommodations to individuals with disabilities in all aspects of the employment process. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. Our company participates in E‑Verify.

LaundryLux is the North American supplier of Electrolux & Wascomat commercial laundry equipment for self‑service Laundromats and On‑Premises Laundries such as hotels, hospitals, nursing homes, salons, firehouses, vets, and more.

“We have dedicated employees who have worked for us for years and years and are still committed to providing the best possible products and services. It’s because we all believe in what we do and in the products we sell.” – Neal Milch, Chairman

Let our family’s history shape your future success. What began with an accident at sea and one man’s dream for the future, has transformed into a business reality. LaundryLux wishes to share that success with families and businesses, helping investors and business owners maximize their returns on their laundry system investments.

People, Share Responsibility, Integrity, Excellence, Customer Focused, Meaningfulness and Fun.