Job Summary:

Owns Infrastructure & OT Connectivity across four US and Mexico sites: networks, hosted private cloud, Microsoft Azure, on-premises infrastructure, plant-floor connectivity, end-user devices, and the Tier 1–3 service desk. The first priority is bringing support and infrastructure management in-house from the external MSP before the contract ends October 27, 2027. Leads the site IT engineers and on-site support partner, and partners with Business Systems and Cybersecurity to support ERP, MES, and analytics projects.

Key Responsibilities:

MSP Transition & Service Desk

· MSP In-sourcing: Move the help desk to the internal ITSM platform by Feb 2027, replace MSP tools with Intune, RMM, and DRaaS by Jun 2027, and complete MSP offboarding by Oct 27, 2027.

· Service Desk & Site Coverage: Run Tier 1–3 support at all sites; publish weekly SLA, MTTA, and MTTR metrics.

· Onboarding & Offboarding: Deliver devices and accounts before start dates; remove access on the day of separation.

Network, Cloud & Core Infrastructure

· Network: Manage multi-site LAN, WAN, SD-WAN, and Wi-Fi (Cisco Meraki) and carrier performance.

· Cloud & Servers: Manage the hosted private cloud (Expedient), hypervisors, and local servers; operate and expand Azure workloads, including governance, hybrid connectivity, monitoring, and cost management.

· Microsoft & Identity: Administer Microsoft 365, Defender, Purview, Active Directory, Entra ID, DNS, DHCP, and group policy; implement MFA, conditional access, and PAM.

· Backup, DR & Patching: Operate backup and DRaaS with quarterly restore and annual failover tests; patch systems per the vulnerability-management policy.

· Security Alignment: Meet all security and compliance standards set by Cybersecurity.

Plant-Floor OT Connectivity

· Shop-Floor Support: Provide resilient connectivity and industrial hardware (scanners, printers, scales, industrial PCs)



to production, test, and warehouse areas.

· OT Segmentation & Projects: Operate OT network segmentation (Purdue model) and support ERP, WMS, MES, and machine-monitoring projects.

Endpoints, Assets & Lifecycle

· Endpoints: Manage Intune and Autopilot provisioning and compliance; execute the PC refresh plan (5-year cadence, 7-year maximum).

· Assets: Maintain asset inventory, warranties, and certified secure disposal.

Team & Vendor Leadership

· Team: Lead and coach site IT engineers; manage on-call rotation and cross-training for backup coverage.

· Vendors & Budget: Hold vendors to SLAs; forecast and manage CapEx/OpEx within approved budgets.

· Documentation: Maintain network diagrams, runbooks, and configuration records.

Scope & Decision Authority

· People: 3 IT Engineers (Reynosa, MX; Virginia Beach, VA; Cumberland City, TN) plus the on-site support partner.

· Decision Rights: Infrastructure design within approved standards, support priorities, engineer assignments, and emergency changes per CAB.

· Escalation: Major incidents, budget variances, and MSP-transition risks to the Director.

Skills and Qualifications:

Experience

· 7+ years in IT infrastructure, including 3+ years supervising technical teams.

· Multi-site manufacturing experience required; US–Mexico (maquiladora) and MSP transition experience preferred.

Technical Competencies

· Cisco Meraki and SD-WAN; VMware/Hyper-V; Microsoft Azure.

· Microsoft 365, Entra ID, Active Directory, Defender, Purview,



Intune, Autopilot, and PowerShell.

· ITSM platforms, backup/DRaaS, plant hardware, and OT segmentation.

Leadership & Core Competencies

· Bilingual: Professional English and Spanish (required).

· Leadership: Calm under outages, firm with vendors, and effective leading remote cross-border teams.

Education and Certifications:

Education

· Bachelor’s in Computer Engineering, IT, Computer Science, or equivalent experience.

Certifications & Training

· Required: ITIL 4 Foundation (within 6 months), Cisco Meraki CMSS (within 9 months), Microsoft AZ-104 (within 12 months).

· Preferred: Cisco CCNA at hire.

· Preferred: Microsoft MD-102; company-funded only if approved in the annual development plan.

Working Conditions:

· Location: Reynosa, Tamaulipas plant; hybrid per company policy.

· Travel: 15%–25% to US sites; valid passport required.

Environment: Plant floor with PPE; lifting up to 23 kg (50 lb); on-call for critical incidents

Job Type: Full-time

Application Question(s):

- Are you able to travel to visit and provide support to our US facilities?
- How many years of project management experience do you have on infrastructure projects?
- Have you administered Microsoft 365, Entra ID and Intune in a production environment?
- Have you supported IT for a manufacturing plant, including production-line systems?
- Can you work 100% on-site at our Reynosa, Tamaulipas plant, including an on-call rotation?
- How many years have you supervised technical support staff as direct reports?
- Have you administered Cisco Meraki (MX/MS/MR) or a similar enterprise network across multiple sites?

Experience:

- IT Infrastructure : 7 years (Required)

Language:

- English and Spanish fluently (Required)

Willingness to travel:

- 25% (Required)

Work Location: In person

📌 IT Manager - Infrastructure (México)
🏢 Kauffman Engineering
📍 México