Infrastructure Network & Security Engineer

Kretek International is America’s #1 importer, marketer and distributor of specialty tobacco products, including high-end cigars, tobacco and alternative products, with such well-known brands as Djarum, Cuban Rounds and High Tea Herbal Wraps. Founded 38+ years ago, Kretek continues to grow and consistently seeks talented employees who can help the company do that. For more information, please visit:

We are seeking an experienced Infrastructure Network & Security Engineer to design, implement, and secure our customers' enterprise network infrastructures. This mid-level hybrid engineering position requires 5-7 years of hands‑on experience spanning network architecture, implementation, and security operations. The ideal candidate will be a proactive problem‑solver who can balance network infrastructure engineering with security monitoring and threat response, working both independently and collaboratively to deliver robust, scalable, and secure network solutions.

• Design and architect enterprise LAN/WAN network solutions that meet business and security requirements
• Lead network infrastructure projects including upgrades, migrations, and new deployments
• Configure and deploy Cisco routing/switching platforms, firewalls (Sonic Wall, Cisco, Fortinet), and enterprise wireless solutions
• Monitor and respond to security alerts from Intune, Microsoft Defender, and other security platforms
• Utilize Auvik for network monitoring, mapping, performance analysis, and configuration management
• Implement and manage network security controls including firewalls, VPNs, IDS/IPS, and network access control (NAC)
• Troubleshoot complex network and security issues and perform root cause analysis
• Create and maintain network documentation including topology diagrams, security policies, and implementation plans
• Implement routing protocols (OSPF, BGP), network segmentation, VLANs, and ACLs
• Configure endpoint security policies through Intune and integrate with conditional access
• Mentor junior team members and collaborate with cross‑functional IT teams

• 5-7 years of progressive experience in network engineering and infrastructure design
• Bachelor's degree in IT, Computer Science, or related field preferred

• Expert knowledge of Cisco platforms (Nexus, Catalyst, ISR/ASR routers)
• Proficiency with Sonic Wall, Cisco Firewalls, or Fortinet
• Strong understanding of routing protocols (OSPF, BGP), TCP/IP, VLANs, ACLs
• Experience with enterprise wireless (Cisco, Aruba, or Ruckus)
• VPN technologies and network access control (NAC) experience
• Experience with Auvik or similar network monitoring platforms

• Experience with Microsoft Intune and Defender for Endpoint
• Security alert monitoring and incident response
• Knowledge of security frameworks (NIST, CIS Controls, Zero Trust)
• Familiarity with IDS/IPS, SIEM, and vulnerability scanners
• Understanding of conditional access and identity‑based security

• Excellent troubleshooting and problem‑solving abilities
• Strong communication skills for technical and non‑technical audiences
• Project management experience with infrastructure initiatives
• Ability to manage multiple priorities in a fast‑paced environment

• CCIE or expert-level networking certifications
• Experience with Cisco ISE deployment
• Network automation tools (Ansible, Python, Terraform)
• Cloud networking experience (AWS, Azure, GCP)

• Ability to stand and walk.
• Ability to reach above, at, or below waist height
• Ability to kneel, bend, stoop, turn and twist
• Ability to lift 25lb regularly and occasionally up to 50 lbs.

• The incumbent must be able to perform this job safely without endangering the health or safety of self or others.

• The position currently has no people supervisory responsibility

Please note that this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change or be added at any time per business needs.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, or protected veteran status and will not be discriminated against on the basis of disability.