Network Engineer, Bethlehem, PA / IT Infrastructure

Location: Bethlehem, PA
Working hours: Full-time
Work model: On-site
Contract type / duration: Permanent

Are you passionate about designing, securing, and optimizing enterprise infrastructure in both on-premises and cloud environments? Do you want to play a key role in supporting business-critical systems while helping shape the future of IT operations at STG? Then you might be the person we are looking for.

As our new Network Engineer, you will be part of the IT organization and play an important role in ensuring the availability, security, performance, and scalability of enterprise infrastructure across North America and beyond. You will work closely with internal technology teams, business stakeholders, and external partners to support networking, server infrastructure, cloud services, cybersecurity initiatives, and enterprise applications. This is a great opportunity to contribute to a global organization while working with modern infrastructure technologies and security-first architectures.

What your day will look like

In this role, you will typically focus on:

Infrastructure Administration & Operations

Administer and support Windows Server and Linux operating systems.
Manage Active Directory, Microsoft Entra ID (Azure Active Directory), Group Policy, DNS, DHCP, and certificate services.
Maintain enterprise server infrastructure, storage platforms, and core business systems.
Monitor system performance, availability, capacity utilization, and overall health.
Manage virtual machines, clusters, high-availability environments, and disaster recovery solutions.
Support enterprise applications and middleware platforms to ensure business continuity.

Cloud & Security Management

Manage and optimize cloud infrastructure within Microsoft Azure.
Support cloud security initiatives, identity management, and resource optimization.
Implement security best practices, vulnerability remediation programs, and patch management processes.
Support endpoint protection, privileged access management, and identity security controls.
Participate in security audits, compliance activities, risk assessments, and cybersecurity improvement initiatives.
Ensure infrastructure and operations align with corporate security standards and policies.

Network Engineering & Connectivity

Deploy, maintain, and optimize enterprise network environments, including LAN, WAN, SD-WAN, wireless, and cloud connectivity solutions.
Support and administer enterprise networking technologies from platforms such as Fortinet, Cisco, Palo Alto, Juniper, or equivalent solutions.
Administer Zscaler technologies, including ZIA, ZPA, and ZDX, to support zero-trust and cloud-first networking strategies.
Troubleshoot complex networking and connectivity issues across multi-site environments.
Support network performance monitoring, optimization, and capacity planning initiatives.

Continuous Improvement & Innovation

Perform capacity planning, performance tuning, and proactive optimization of infrastructure environments.
Evaluate emerging technologies and provide recommendations aligned with business strategy and operational requirements.
Develop and maintain technical documentation, infrastructure diagrams, standards, and operational runbooks.
Collaborate with cross-functional teams to drive infrastructure modernization and operational excellence.

What you'll bring

Required Qualifications

5+ years of experience supporting Windows Server environments.
Hands-on experience with enterprise networking technologies such as Fortinet, Cisco, Palo Alto, Juniper, or comparable solutions.
Hands-on experience with VMware vSphere and virtualization technologies.
Strong troubleshooting and problem-solving skills within complex, multi-vendor environments.
Experience supporting enterprise infrastructure, networking, and cloud-based technologies.
Excellent verbal and written communication skills, with the ability to translate technical concepts for both technical and non-technical audiences.
Ability to travel domestically and internationally as business needs require.

Preferred Qualifications

Experience administering Microsoft Azure cloud environments.
Experience supporting Active Directory, Microsoft Entra ID, Group Policy, DNS, DHCP, and certificate services.
Experience working with Zscaler technologies (ZIA, ZPA, and ZDX).
Knowledge of cybersecurity frameworks, vulnerability remediation, and security best practices.
Experience supporting high-availability, disaster recovery, and business continuity environments.
Relevant technical certifications in Microsoft, Azure, VMware, networking, cybersecurity, or cloud technologies.

Working at STG & What to expect

At Scandinavian Tobacco Group (STG), we are so much more than what meets the eye. We combine the strength of global brands with the entrepreneurial mindset that allows people to make a real impact. Here you'll have the opportunity to grow your career, collaborate across borders, and help shape what's next. At STG you'll find more than a role, you'll find opportunities to grow, collaborate across borders, and make a meaningful impact.

Incentives and Benefits: The salary package may include short-term and/or long-term incentives as well as other employee benefits based on position level, location, functional area, and relevant market benchmarks.

Annual Base Salary: $110,000-$115,000/yr

What's in an Offer

As a colleague at Scandinavian Tobacco Group, you will receive a comprehensive compensation package and generous benefits package including:

Comprehensive Health Care, Vision & Dental Plan
Flexible Spending Account
Disability Plans
Basic & Supplemental Life Insurance
Additional Supplemental Benefits
Paid Vacation, Paid Time Off (PTO) days, and Holidays
401(k) Retirement Savings Plan including a generous Company match

Ready to be part of something bigger?

Apply now and discover much more.

Our recruitment process

Before starting our hiring process, your application will be reviewed by a member of our Talent Acquisition team. We assess each application against the key competencies and requirements for the role. If your experience and skills are a good match, you'll be invited to continue through our hiring process, which may include a recruiter screen, interviews with the hiring team, assessments or work samples if relevant, and a final interview with leadership or key stakeholders.

Scandinavian Tobacco Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Our company uses E-Verify to confirm the employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.e-verify.gov.

Please be informed that this Direct Search is conducted exclusively by Scandinavian Tobacco Group. We do not accept applications from agencies, and we will not provide compensation for unsolicited CVs.