Aviagen
Infrastructure And Cloud Engineer
Aviagen stands at the forefront of poultry genetics, pioneering research, and innovation on a global scale. Our broiler breeder brands are among the most recognized and respected in the industry, and each has a proven record of success in addition to a large and loyal global customer base. We seek a qualified Infrastructure and Cloud Engineer to design, secure, and manage a global hybrid environment that supports Aviagen's worldwide operations. This position is on-site at our corporate office in Huntsville, Alabama, and serves as a key engineering role supporting global infrastructure and end users. Responsibilities: Architect and administer branch networks, VLANs, Auto VPN, SD WAN, traffic shaping, and site reliability via the Meraki Dashboard. Manage firewall policy, NAT, remote access (AnyConnect), IPsec and SSL VPN, and high availability pairs using Cisco ASA; harden perimeter and inter-site connectivity. Build and maintain security policies, SD WAN, IPsec tunnels, SSL VPN, high availability clusters, and segmentation for branch and datacenter networks using Fortinet FortiGate and FortiManager. Oversee Layer 3 routing (OSPF and BGP basics), DHCP and DNS integration, NAC, RADIUS, and TACACS, where applicable, and network observability using SNMP, syslog, and NetFlow. Engineer Azure virtual networks, VPN and ExpressRoute, Virtual WAN, NSGs, Azure Firewall, Private Endpoints, and hybrid name resolution. Deploy and maintain Windows Failover Clusters, Cluster Shared Volumes, Live Migration, and Hyper-V Replica; perform capacity planning, performance tuning, and lifecycle management. Administer Windows Server, Active Directory, Group Policy, DNS, DHCP, and certificate services; automate at scale with PowerShell. Support and secure Exchange Online, Microsoft 365 workloads, and cloud environments for reliable end-user access. Implement and test backup, replication, and disaster recovery solutions (for example, Rubrik and Azure Site Recovery); document runbooks, define RPO and RTO, and lead regular disaster recovery exercises. Apply patching, endpoint protection, access controls, and logging; participate in audits and reporting alongside the Security team. Use monitoring and alerting, and performance analysis tools to ensure uptime and capacity; drive root cause analysis and preventive improvements. Maintain thorough documentation and change records; provide Tier 2 and 3 escalation, and occasional after-hours or on-call support during maintenance windows. Qualifications: 5+ years supporting enterprise infrastructure across hybrid or on-premises environments. Strong hands-on experience with Meraki, Cisco ASA, and Fortinet FortiGate (policy design, VPN, high availability, segmentation, and troubleshooting). Proficiency with Windows Server, Active Directory, Group Policy, and PowerShell automation. Expertise with Hyper V (clusters, performance, lifecycle) and familiarity with Azure IaaS. Administration of Microsoft 365 and Exchange Online, and working knowledge of Citrix. Experience implementing backup, replication, and disaster recovery solutions with documented runbooks and tested failover. Solid grasp of networking fundamentals (TCP IP, VLANs, routing, DNS, DHCP, VPNs, firewalls) and troubleshooting methodology. Clear communication, strong documentation habits, and a customer-focused mindset. Azure networking (Virtual WAN, ExpressRoute, Azure Firewall, NSG) and identity (Entra ID or Azure AD), plus Intune or Endpoint Manager preferred. Infrastructure as Code and automation (Terraform or Ansible), along with CI CD for infrastructure, are preferred. Linux exposure (basic administration, scripting, patching) preferred. Experience with FortiManager, Cisco ISE or NAC, PKI, and SIEM (such as Sentinel or Splunk) preferred. Relevant certifications such as Meraki CMNA or ECMS, Fortinet NSE 4+, Cisco or CCNA level, or Microsoft Azure Administrator preferred. Travel up to approximately 15% domestic with occasional international travel (around 5%), depending on project and site needs. Work Authorization: Applicant must be a U.S. citizen or currently authorized to work in the U.S. at the time of hire and must maintain authorization to work in the U.S. throughout their employment with our company. EEOC Statement: We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Aviagen stands at the forefront of poultry genetics, pioneering research, and innovation on a global scale. Our broiler breeder brands are among the most recognized and respected in the industry, and each has a proven record of success in addition to a large and loyal global customer base. We seek a qualified Infrastructure and Cloud Engineer to design, secure, and manage a global hybrid environment that supports Aviagen's worldwide operations. This position is on-site at our corporate office in Huntsville, Alabama, and serves as a key engineering role supporting global infrastructure and end users. Responsibilities: Architect and administer branch networks, VLANs, Auto VPN, SD WAN, traffic shaping, and site reliability via the Meraki Dashboard. Manage firewall policy, NAT, remote access (AnyConnect), IPsec and SSL VPN, and high availability pairs using Cisco ASA; harden perimeter and inter-site connectivity. Build and maintain security policies, SD WAN, IPsec tunnels, SSL VPN, high availability clusters, and segmentation for branch and datacenter networks using Fortinet FortiGate and FortiManager. Oversee Layer 3 routing (OSPF and BGP basics), DHCP and DNS integration, NAC, RADIUS, and TACACS, where applicable, and network observability using SNMP, syslog, and NetFlow. Engineer Azure virtual networks, VPN and ExpressRoute, Virtual WAN, NSGs, Azure Firewall, Private Endpoints, and hybrid name resolution. Deploy and maintain Windows Failover Clusters, Cluster Shared Volumes, Live Migration, and Hyper-V Replica; perform capacity planning, performance tuning, and lifecycle management. Administer Windows Server, Active Directory, Group Policy, DNS, DHCP, and certificate services; automate at scale with PowerShell. Support and secure Exchange Online, Microsoft 365 workloads, and cloud environments for reliable end-user access. Implement and test backup, replication, and disaster recovery solutions (for example, Rubrik and Azure Site Recovery); document runbooks, define RPO and RTO, and lead regular disaster recovery exercises. Apply patching, endpoint protection, access controls, and logging; participate in audits and reporting alongside the Security team. Use monitoring and alerting, and performance analysis tools to ensure uptime and capacity; drive root cause analysis and preventive improvements. Maintain thorough documentation and change records; provide Tier 2 and 3 escalation, and occasional after-hours or on-call support during maintenance windows. Qualifications: 5+ years supporting enterprise infrastructure across hybrid or on-premises environments. Strong hands-on experience with Meraki, Cisco ASA, and Fortinet FortiGate (policy design, VPN, high availability, segmentation, and troubleshooting). Proficiency with Windows Server, Active Directory, Group Policy, and PowerShell automation. Expertise with Hyper V (clusters, performance, lifecycle) and familiarity with Azure IaaS. Administration of Microsoft 365 and Exchange Online, and working knowledge of Citrix. Experience implementing backup, replication, and disaster recovery solutions with documented runbooks and tested failover. Solid grasp of networking fundamentals (TCP IP, VLANs, routing, DNS, DHCP, VPNs, firewalls) and troubleshooting methodology. Clear communication, strong documentation habits, and a customer-focused mindset. Azure networking (Virtual WAN, ExpressRoute, Azure Firewall, NSG) and identity (Entra ID or Azure AD), plus Intune or Endpoint Manager preferred. Infrastructure as Code and automation (Terraform or Ansible), along with CI CD for infrastructure, are preferred. Linux exposure (basic administration, scripting, patching) preferred. Experience with FortiManager, Cisco ISE or NAC, PKI, and SIEM (such as Sentinel or Splunk) preferred. Relevant certifications such as Meraki CMNA or ECMS, Fortinet NSE 4+, Cisco or CCNA level, or Microsoft Azure Administrator preferred. Travel up to approximately 15% domestic with occasional international travel (around 5%), depending on project and site needs. Work Authorization: Applicant must be a U.S. citizen or currently authorized to work in the U.S. at the time of hire and must maintain authorization to work in the U.S. throughout their employment with our company. EEOC Statement: We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.