System Administrator / Network Engineer

Position Overview

We are seeking a skilled System Administrator / Network Engineer to support, modernize, and secure our multi-site IT infrastructure. This role is hands-on, operational, and project-focused—spanning Microsoft 365, Azure, network engineering, firewall/wireless modernization, endpoint management, and cross‑team collaboration.

You will play a key role in our transition from Fortinet/FortiGate firewalls**, switches**** and APs to an Ubiquiti UniFi-based infrastructure**, while also supporting ongoing Azure, Microsoft 365, SD‑WAN, and site‑to‑site modernization efforts.

Who are we? Building Controls & Solutions (BCS) is a leading provider of energy management, building controls, automation, and gas detection solutions for the commercial HVAC community, including distribution of products, in-market value added services, and a “smart” path towards using IoT and the Cloud for building automation. Serving mechanical, electrical and controls contractors working in the Commercial building markets, as well as end users (property management companies, school districts, hospitals, etc.) and integrators, the company offers a wide array of HVAC controls, gas detection systems, flow measurement, security and access control, lighting control, wireless, analytics and IoT technologies. As a distributor and service provider, BCS brings global product brands and inventory together with local in-market technical resources. “Our value starts with high quality products and is truly enhanced by solutions that bring customized value-added services to our commercial building customers every day,” says CEO, Eric Chernik.

www.buildingcontrolsandsolutions.com

Key Responsibilities

1. Systems Administration (Microsoft 365, Entra ID & Azure)

• Manage Microsoft 365/Entra ID identity lifecycle, licensing, MFA, Conditional Access, and security baselines.
• Support Azure network integrations including firewalls, VNET gateways, routing, and hybrid connectivity.
• Manage Windows endpoints and servers; automate administrative tasks with PowerShell.
• Maintain compliance and security posture across enterprise endpoints.
• Administrate endpoint monitoring, patching, and deployment using NinjaOne.

2. Network Engineering (Fortinet → Ubiquiti UniFi Migration)

• Support current Fortinet/FortiGate infrastructure during transition, including firewall policies, NAT, VPN/IPsec tunnels, VLANs, and multi‑site routing.
• Participate in the organization-wide migration from Fortinet/FortiGate to Ubiquiti UniFi by:
  • Designing UniFi gateway, switching, and wireless architectures.
  • Standing up and managing UniFi Network Controllers / UniFi OS.
  • Migrating sites from Fortinet to UniFi with minimal downtime.
  • Converting firewall policies, SSIDs, VLANs, and routing configurations.
  • Documenting UniFi baselines, standards, and deployment procedures.
• Maintain stable and secure multi-site connectivity, including SD‑WAN, VPN, and cloud‑connected services.

3. Security & Compliance

• Maintain identity, endpoint, network, and cloud security baselines.
• Review and update firewall rules, segmentation, and zero-trust-aligned controls.
• Respond to incidents across endpoints, identity, network, and cloud.
• Ensure consistent patching, alerting, and configuration hardening.

4. Operations & Support

• Act as Tier‑3 escalation for complex tickets involving networking, cloud, identity, and endpoint issues.
• Produce runbooks, SOPs, and configuration documentation.
• Collaborate with MSPs, vendors, and cross‑functional internal teams.
• Contribute to change management through planning, testing, and approvals.

5. Project Leadership & Continuous Improvement

• Lead or support projects such as:
  • Site network cutovers and SD‑WAN transitions.
  • Azure connectivity improvements.
  • Endpoint fleet modernization.
  • Wireless redesigns.
  • Firewall and network segmentation transformations.
• Evaluate and implement emerging technologies to strengthen performance, security, and operational efficiency.

Required Qualifications

• 5+ years combined experience in system administration and network engineering.
• Strong hands-on knowledge of Microsoft 365/Entra ID, Windows Server, and Azure fundamentals.
• Experience administering firewalls (Fortinet preferred) and strong familiarity with network concepts: TCP/IP, routing, switching, VLANs, DHCP, DNS, and VPN.
• Experience with multi-site architecture and site-to-site connectivity.
• Experience with Ubiquiti UniFi (gateways, switches, APs) or strong willingness to ramp up quickly.
• Experience with RMM/endpoint tools (NinjaOne strongly preferred).
• PowerShell or similar automation/scripting proficiency.
• Strong troubleshooting skills across identity, OS, network, and cloud layers.

Preferred Qualifications

• Experience executing network infrastructure migrations (firewalls, wireless, switching).
• Experience with SD‑WAN technologies.
• Experience with Azure ExpressRoute, VNET gateways, or BGP‑based connectivity.
• Certifications such as:
  • Fortinet NSE 4–7 (or equivalent network certs)
  • Ubiquiti UEWA/UXG/UNS
  • Microsoft AZ‑104, SC‑300, or related
  • CCNA/CCNP

Success Metrics (First 6–12 Months)

• Successful site‑by‑site migration from Fortinet to UniFi with minimal downtime.
• Improved endpoint compliance and security posture via NinjaOne.
• Reduction in network outages and firewall/wireless incidents.
• Documented UniFi deployment standards and cutover runbooks.
• Strengthened Azure and M365 identity/security alignment.

Work Environment & Conditions

• Standard business hours with occasional after-hours maintenance or on-call support.
• Some travel required for site deployments (approx. 10–20%).

Physical Requirements

• Prolonged periods sitting/standing at a desk and working on a computer.
• Activity or condition may occasionally include walking, bending reaching, standing, and stooping.
• May require occasional lifting/lowering, pushing carrying or pulling up to 50lbs.

Additional Information:

• Mid-to-Heavy travel may be required.
• Performs other duties as assigned.
• A post-job offer background check will be performed. 

This job description is not designed to cover or contain a comprehensive list of activities, duties, or responsibilities required by the employee.

To learn more about Building Controls Solution visit our website at

Building Control & Solutions: https://www.building-controls.com/

Building Control & Solutions: https://www.linkedin.com/company/buildingcontrolsandsolutions/posts/?feedView=all

FSLA Status: Salaried Exempt / FT

Salary Range:       

Location: Dallas, TX   

Direct Report: Russ Giggey  

Interested Candidates should apply on-line.