Network Engineer @ MAS

Mastronardi Produce pioneered the commercial greenhouse industry in North America, and we're now the leading greenhouse vegetable company on the continent. Our award-winning, flavorful produce is packed under the SUNSET® brand and is available at leading grocery retailers across North America. Family owned for over 65 years, we pride ourselves on having the most flavorful products and the best people in the industry. We are constantly pushing boundaries to be a leader in fresh produce innovation. We seek individuals that demonstrate our PRIDE values (Passion, Respect, Innovation, Drive, Excellence) to help us fulfill our mission to inspire healthy living through WOW flavor experiences.

Our Corporate office in Livonia, Michigan is currently seeking a Network Engineer to join our Information Technology team. The Network Engineer designs, implements and supports Mastronardi Produce's network infrastructure to provide secure, reliable connectivity across offices, farms, greenhouses, distribution centres and cloud environments. The role operates LAN, WAN, wireless, firewall and SD-WAN technologies; monitors availability and performance; resolves complex incidents; and delivers network changes required by business and technology projects.

This is a hands-on infrastructure role that combines day-to-day operations, network security, project delivery and continuous improvement. The Network Engineer works with Infrastructure, Cyber Security, application teams, site operations, telecommunications carriers and technology vendors to keep services stable and ensure network designs remain supportable as the business changes.

Values

To perform the job successfully, the incumbent's behavior must be consistent with the PRIDE values expected of all Mastronardi Produce employees: be Passionate; have Respect; be Innovative; be Driven and strive for Excellence.

Primary Responsibilities

Network Operations and Reliability

• Design, deploy, configure and maintain LAN, WAN, wireless and SD-WAN infrastructure, including routers, switches, access points, firewalls, VPN connectivity and related network services.
• Monitor network availability, capacity and performance; investigate alerts and recurring issues; and complete root-cause analysis and corrective actions for significant incidents.
• Troubleshoot complex connectivity, routing, wireless, DNS, DHCP, latency and packet-loss issues across corporate, operational and cloud environments.
• Manage network device lifecycle activities, including standards, firmware, configuration backups, upgrades, replacements and decommissioning.
• Participate in the on-call rotation and provide off-hours support for critical network incidents and planned maintenance.

Network Security and Resilience

• Implement and maintain network security controls, including firewall policies, access-control lists, segmentation, VPNs, secure administrative access and logging.
• Partner with Cyber Security on vulnerability findings, threat-response activities, security assessments and remediation of network-related risks.
• Conduct periodic network assessments and validate that configurations align with approved standards and least-privilege principles.
• Maintain resilient connectivity through redundant designs, tested failover, carrier diversity and documented recovery procedures where required by business criticality.
• Support network access controls and segmentation for business systems, operational technology, guest access, vendors and other approved use cases.

Project Delivery and Architecture

• Gather technical and operational requirements and deliver network solutions for new sites, site expansions, technology rollouts, cloud connectivity and business-system projects.
• Prepare network designs, implementation plans, test plans, rollback procedures and post-change validation for production changes.
• Perform capacity planning and recommend upgrades based on utilization, business growth, resiliency requirements and technology lifecycle.
• Evaluate network hardware, software, carrier and managed-service options using technical fit, supportability, security and total operating impact.
• Coordinate third-party carriers, vendors and service providers, including incident escalation, implementation activities and service-performance review.

Monitoring, Automation and Documentation

• Administer network monitoring and management platforms and maintain actionable dashboards, alerts, device inventories and configuration records.
• Use packet capture, flow, logs and diagnostic tools to isolate faults and validate performance.
• Automate repeatable network tasks and compliance checks using tools such as Python, Ansible or platform APIs where practical.
• Maintain accurate network diagrams, IP address and circuit records, standards, operating procedures, inventories and support runbooks.
• Share technical knowledge and provide guidance to service desk, site support and junior infrastructure team members.

Education/Background Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience as a Network Engineer or similar role in a medium to large-scale enterprise environment.
• 2+ years of experience supporting enterprise network infrastructure in a multi-site business environment.
• Strong working knowledge of TCP/IP, subnetting, VLANs, routing, switching, DNS, DHCP, VPNs, wireless networking and common routing protocols.
• Hands-on experience administering enterprise routers, switches, wireless and firewall platforms; experience with Cisco, Meraki or Fortinet is directly relevant.
• Experience with SD-WAN, network segmentation, secure remote connectivity and network security controls.
• Proficiency with network troubleshooting and diagnostic tools such as packet capture, logs, flow data and Wireshark.
• Experience with network monitoring and management platforms such as PRTG, LogicMonitor, ManageEngine or comparable tools.
• Ability to create and maintain network diagrams, configuration standards, implementation plans, runbooks and support documentation.
• Strong problem-solving and communication skills, including working with site teams, cross-functional technology teams, carriers and vendors.
• Ability to participate in an on-call rotation and travel on a limited basis for projects or break/fix support.
• Diploma or degree in Computer Science, Information Technology, Networking or a related discipline, or equivalent practical experience.

Specific Knowledge, Skills and Abilities Preferred

• Cisco CCNA or CCNP, or current Fortinet certification.
• Experience with network automation using Python, Ansible, APIs or infrastructure-as-code practices.
• Knowledge of Azure or AWS cloud networking, including virtual networks, private connectivity, VPN and routing.
• Experience supporting farms, greenhouses, manufacturing plants, warehouses or distribution centres.
• Experience with network access control, micro-segmentation or operational-technology network segmentation.

Please note: Mastronardi Produce has accommodation processes and policies in place and provides accommodation for employees with disabilities. If you require a specific accommodation because of a disability or documented medical need, please contact the Human Resource office so that arrangements can be made for the appropriate accommodation to be put into place.