Redwood Logistics is one of the fastest growing and most innovative 4PL providers offering supply chain execution and next-generation supply chain technology solutions. For more than 20 years, Redwood Logistics has been helping move businesses forward by connecting our clients to winning strategies. As a next-generation leader in forth-party logistics (4PL), we live at the intersection of logistics and technology.

We focus brilliant minds, technology services, and performance excellence to modernize supply chains. From our diversity of services, data-driven network solutions, and strategically integrated model, we have positioned ourselves as the dominant player in the mid-market space operating across North America and Mexico. We are a privately held company, managing significant transportation spend - we are big, but adaptable with an entrepreneurial spirit.

Purpose of Your Work: This is NOT a DevOps role. The ideal candidate is a hands on infrastructure engineer who operates and improves the reliability, security, performance, and cost effectiveness of Azure cloud services, hybrid identity, Windows Server, storage, monitoring, and network environments. Approximately 60% of the role supports Azure IaaS and PaaS services, including Azure Functions and Azure Container Apps; approximately 35% supports enterprise network operations; and approximately 5% supports AWS where needed.

Although networking represents approximately one third of the role, it requires deep practical troubleshooting skill. This position is the escalation point for core network incidents and must be able to diagnose issues such as port flaps, Dynamic ARP Inspection failures, VLAN and trunk mismatches, routing and switching faults, firewall policy problems, wireless connectivity issues, and related physical layer faults. The engineer will also support installation, configuration, replacement, lifecycle management, and documentation of Cisco or Meraki switches, firewalls, wireless equipment, cabling, VLANs, and related infrastructure.

How You Make a Difference Everyday:

- Troubleshoot and resolve core network incidents across switching, routing, VLANs, trunking, wireless, firewalls, and hybrid connectivity - Design, implement, and maintain secure and scalable cloud infrastructure in Microsoft Azure and AWS - Configure and manage Microsoft Entra ID,



Conditional Access policies, role-based access control (RBAC), and privileged identity management (PIM) - Deploy and monitor Microsoft Sentinel for cloud-native SIEM capabilities and automated threat response - Support the lifecycle management of Windows Server environments and hybrid networking components - Lead identity governance initiatives, ensuring appropriate access provisioning and audit readiness - Develop and maintain infrastructure-as-code (IaC) using tools like Terraform to ensure repeatability and compliance - Integrate AI-powered security and monitoring tools to proactively detect threats and reduce incident response times - Participate in threat modeling, security risk assessments, and internal/external compliance audits - Drive adoption of automation frameworks to streamline patching, system provisioning, and configuration management - Collaborate with cross-functional teams to support application deployments and business continuity initiatives - Contribute to runbooks, documentation, and knowledge sharing sessions to enhance team capabilities - Operate as a subject matter expert and act as the escalation point for issue resolution and customer escalations.
- 3+ years working with cloud-native networking is required, comfortable configuring Azure Virtual Networks, subnets, Network Security Groups, route tables, VNet peering, VPN Gateways, and Azure Firewall, as well as equivalent AWS constructs such as VPCs, Transit Gateways, and Security Groups - 3+ years of hands-on experience administering Windows Server environments in a large enterprise, including patch management, Active Directory, and hybrid identity - 1+ years of Cisco or Meraki experience is required.

Microsoft

Azure certification (AZ-104 Azure Administrator or AZ-500 Security Engineer) is a plus - Solid working experience with Microsoft Entra ID, including Conditional Access, RBAC, PIM,



and hybrid identity integration with on-premises Active Directory - Proficiency in PowerShell scripting for automation, configuration management, and cloud administration tasks;

experience with Python or Bash a plus - Hands-on experience designing, deploying, and securing infrastructure in both Microsoft Azure and AWS, including IAM, VNets/VPCs, storage, and compute services - Strong working knowledge of Azure PaaS services including Azure App Service, Azure SQL, Azure Monitor, Azure Key Vault, and related platform components - Working knowledge of infrastructure-as-code tooling such as Terraform; ability to read, write, and maintain IaC modules in a version-controlled environment - Solid hands-on networking experience is required - including switching, routing, VLANs, firewall rules, and network segmentation; direct experience with Cisco and/or Meraki equipment strongly preferred, as this role includes on-site support and lifecycle management of physical network hardware - Comfortable providing on-site support - this role requires physical presence in the Chicago office and occasionally at other locations to install, configure, troubleshoot, and replace network hardware - Familiarity with zero trust networking principles, network segmentation, and security zoning in hybrid environments;

experience with SIEM, endpoint protection, or cloud-native security tooling is a plus What We Offer:

- Access to experts and resources for your Learning & Development journey - Opportunity for internal mobility - Employee referral bonus program - Employee Resource Groups (ERGs) - Annual fundraising and volunteer events to give back to communities - Life Insurance policy for you starting 30 days after employment - Personal Health Insurance coverage for you – Major Medical - 30 days "Aguinaldo" Christmas bonus or prorated percentage your first year - Vacation time starting at 12 days. Additional days will increase per Mexican Law - You will also receive benefits like Saving Plan (Fondo de Ahorro) and Grocery Card (Vales De Despensa) 6% or the Maximum amount by Mexican Law - You'll be provided a Cell Phone Allowance of $800 pesos per month minus applicable taxes Redwood is an equal opportunity employer. Employment decisions at the Company are based on individual merit, qualifications, abilities, and the Company's needs and resources.

📌 Cloud Infrastructure Engineer [Remote (Santiago de Querétaro)
🏢 Redwood Logistics
📍 Santiago de Querétaro