Job description

Company Overview Unified Door & Hardware Group (UDHG) is a premier provider of commercial door, frame, and architectural hardware solutions serving customers across North America. UDHG supports a wide range of construction and architectural projects, delivering specialized expertise, professional installation, and reliable service to commercial, institutional, and multi-family markets. As part of Foundation Building Materials (FBM), a leading construction materials distribution company, UDHG operates within a broader organization that combines scale, specialty expertise, and a customer-first mindset. Together, FBM and UDHG’s 8,000+ team members are committed to operational excellence, innovation, and employee development. As the organization continues to grow and evolve, we are investing in strong, forward-thinking talent to support our long-term success. Position Overview The Systems Engineer is responsible for the analysis, design, security, and long-term operation of the systems that support UDHG’s corporate and manufacturing locations. The position works with business users, IT, cybersecurity, and plant personnel to understand system requirements and develop technical solutions that meet those needs. This position serves as the technical owner for assigned infrastructure platforms. The Systems Engineer evaluates technical options, develops system specifications, establishes standards, and makes recommendations concerning architecture, security, capacity, availability, and disaster recovery. The primary focus of the position is infrastructure engineering and systems analysis. Routine help desk tickets, basic end-user support, printer maintenance, and equipment installation are handled by Level 1 and Level 2 support resources. The Systems Engineer becomes involved when an issue requires advanced analysis, a system change, or a permanent technical solution. Key Responsibilities Systems Analysis and Design • Meet with business, IT, cybersecurity, and personnel to understand operational needs and translate them into system requirements. • Analyze existing systems and identify changes needed to improve security, availability, capacity, performance, or supportability. • Design and document infrastructure solutions involving servers, virtualization, storage, cloud services, identity, networking, backups, and disaster recovery. • Develop system specifications, architecture diagrams, configuration standards, testing plans, implementation plans, and rollback procedures. • Evaluate technical alternatives and recommend solutions based on business need, security risk, cost, system compatibility, and long-term support requirements. • Test and modify infrastructure systems before changes are placed into production. • Determine the technical approach for assigned infrastructure projects within established IT and security policies. Infrastructure Engineering • Design, configure, and maintain Windows Server environments and related infrastructure services. • Serve as the technical owner for Active Directory, Group Policy, DNS, DHCP, file services, and other assigned Windows services. • Design and maintain VMware ESXi and Proxmox virtualization environments, including virtual machines, clusters, storage, replication, and capacity planning. • Plan and lead server, operating-system, virtualization, storage, and infrastructure upgrades. • Review system performance, capacity, backup results, security events, and availability trends to identify risks before they interrupt operations. • Develop and maintain technical standards for server configuration, virtualization, patching, backups, access, monitoring, and recovery. • Design and test backup, restoration, disaster-recovery, and business-continuity procedures. • Lead the technical work associated with infrastructure migrations, system replacements, new-location deployments, and company integrations. Microsoft Cloud and Identity • Design and maintain Microsoft 365, Microsoft Azure, Microsoft Entra ID, and hybrid identity services. • Establish standards for user access, authentication, role-based permissions, multifactor authentication, and conditional access. • Review access and identity configurations for security, consistency, and business need. • Design and maintain endpoint-management solutions using Microsoft Intune, Configuration Manager/SCCM, or similar platforms. • Develop automation using PowerShell or other appropriate tools to reduce manual administration and improve consistency. • Evaluate changes to Microsoft cloud services and determine their effect on UDHG systems and users. Network and Security Engineering • Analyze network requirements involving TCP/IP, DNS, DHCP, VLANs, routing, switching, Wi-Fi, VPNs, firewalls, and remote access. • Design or recommend changes to corporate LAN, WAN, wireless, and remote-access environments. • Establish technical requirements for network segmentation, access controls, monitoring, and secure remote connectivity. • Review network performance and security data to identify capacity concerns, recurring problems, and potential risks. • Work with cybersecurity personnel to evaluate vulnerabilities, determine remediation methods, and plan infrastructure security improvements. • Perform root-cause analysis following significant or recurring infrastructure incidents and develop permanent corrective actions. IT and OT Infrastructure • Serve as the infrastructure engineering resource for systems that connect corporate IT services with manufacturing OT environments. • Work with the OT Systems Engineer to define ownership, access, security, connectivity, backup, and recovery requirements for shared systems. • Design infrastructure supporting OT-related servers, virtual machines, storage, identity services, backups, and network connectivity. • Develop and maintain secure separation between corporate IT and plant-floor OT networks. • Review proposed infrastructure changes for their effect on production systems and manufacturing operations. • Coordinate joint IT and OT incident response when an event affects shared infrastructure. • Ensure changes to production-controlled systems are reviewed and approved by the appropriate OT owner before implementation. Projects and Technical Decisions • Lead infrastructure projects from requirements gathering through design, testing, implementation, and post-implementation review. • Develop project scope, technical requirements, resource needs, risks, and implementation schedules. • Evaluate infrastructure products, service providers, and vendor proposals. • Provide technical recommendations for system purchases, renewals, replacements, and service agreements. • Make or recommend decisions that affect infrastructure security, availability, capacity, cost, and business continuity. • Coordinate technical work performed by vendors and confirm that completed work meets UDHG standards. • Maintain current documentation for assigned systems, technical decisions, configurations, dependencies, and recovery procedures. Advanced Technical Support • Serve as the escalation point for infrastructure incidents requiring advanced systems analysis or changes to the underlying environment. • Determine whether recurring incidents require a configuration change, architecture change, automation, replacement, or additional controls. • Provide technical direction to Level 1 and Level 2 support personnel. • Create procedures and troubleshooting documentation that allow routine issues to be resolved without engineering involvement. • Participate in an on-call escalation rotation for significant infrastructure or business-continuity incidents. Additional Responsibilities • Maintain knowledge of changes affecting assigned infrastructure platforms. • Follow company requirements related to cybersecurity, change control, documentation, purchasing, and system access. • Perform other related duties consistent with the position’s primary systems-engineering responsibilities. Required Qualifications • Bachelor’s degree in information technology, computer science, information systems, or a related field, or equivalent professional experience. • Seven to ten years of progressive experience in systems administration, infrastructure engineering, or enterprise technology. • Experience analyzing business or technical requirements and translating them into system specifications and infrastructure designs. • Advanced knowledge of Windows Server, Windows 10/11, Active Directory, Group Policy, DNS, DHCP, file services, and related technologies. • Strong experience with VMware ESXi, Proxmox, or comparable enterprise virtualization platforms. • Experience designing and supporting Microsoft 365, Microsoft Azure, Microsoft Entra ID, and hybrid identity environments. • Experience with Microsoft Intune, Configuration Manager/SCCM, or another enterprise endpoint-management platform. • Strong knowledge of TCP/IP, routing, switching, VLANs, Wi-Fi, VPNs, firewalls, and network segmentation. • Experience with enterprise backup, recovery, replication, monitoring, patch management, and endpoint-security systems. • Experience planning and leading infrastructure upgrades, migrations, integrations, or system replacements. • Proficiency with PowerShell scripting and systems-administration automation. • Ability to evaluate technical options, identify risks, and explain recommendations to both technical and nontechnical audiences. • Ability to manage infrastructure incidents where decisions may affect production, security, or business continuity. Preferred Qualifications • Systems-engineering experience in a manufacturing, distribution, or industrial environment. • Experience working with IT and OT systems in the same operating environment. • Knowledge of industrial network segmentation, production availability, manufacturing cybersecurity, and secure remote access. • Familiarity with MES, ERP, SCADA, HMIs, industrial computers, barcode systems, and other plant technology. • Experience designing highly available infrastructure and disaster-recovery solutions. • Experience supporting storage systems, clustering, replication, and multi-site environments. • VMware, Microsoft Azure, Microsoft 365, CompTIA Network+, CompTIA Security+, or comparable certifications. Work Environment • This is an on-site or primarily on-site position supporting corporate and manufacturing operations. • Work may occasionally be performed in production areas where plant safety requirements apply. • Occasional after-hours, weekend, maintenance-window, or emergency support is required. • The position participates in an on-call escalation rotation. • Limited travel to other company locations may be required. • The employee may occasionally need to move or connect technology equipment during infrastructure projects. Equipment installation and repair are not primary responsibilities of the position. Success Measures • Infrastructure designs meet documented business, security, and technical requirements. • Systems remain available, secure, supportable, and adequately sized for business needs. • Infrastructure changes are properly tested, documented, approved, and completed with limited disruption. • Recurring incidents are reduced through root-cause analysis and permanent corrective action. • Backup and recovery procedures are documented, tested, and capable of meeting business recovery requirements. • IT and OT systems maintain appropriate separation, access controls, and ownership. • Infrastructure projects are completed within the approved scope, schedule, and budget. • Technical documentation and support procedures are accurate and current. • Level 1 and Level 2 support teams can resolve routine issues without unnecessary engineering escalation. Reports To Director Enterprise Cloud Technology & Security Compensation The listed pay range reflects the expected base rate for this position; actual compensation may vary based on factors such as experience, qualifications, and cost of living in the assigned market. This is a full-time position with competitive pay and benefits. • Base: $128,000 - $150,000 per year • Bonus: 10% Target Bonus • Total Compensation (Base + Bonus): The successful candidate could reasonably expect a Total Compensation Package in the range of $134,000 - $173,000 Benefits At UDHG, we’re committed to supporting our employees both personally and professionally. We offer a comprehensive and competitive benefits package designed to help you thrive inside and outside of work. Our excellent package includes: • Medical • Dental • Vision • HSA/ FSA plans • Voluntary Life and Accidental Death & Dismemberment (AD&D) Insurance • Critical illness, Hospital Indemnity, Accident Coverage • Legal Insurance Plan • Paid Time Off & Paid Holidays • Generous 401(k) plan with company match Equal Opportunity Employer Unified Door and Hardware Group is an Equal Opportunity Employer and is committed to providing equal employment opportunities to all individuals. We value diversity and inclusion and are dedicated to creating a workplace where all employees feel respected and empowered. All employment decisions are made without regard to race, color, religion, sex, pregnancy (including childbirth, breastfeeding, or related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability status, genetic information, veteran status, or any other characteristic protected by federal, state, or local law. In accordance with the Americans with Disabilities Act (ADA) and applicable state and local laws, we provide reasonable accommodations to qualified individuals with disabilities to help them perform the essential functions of their job. If you need assistance or an accommodation during the application process or while employed, please contact Human Resources at Talent@myfbm.com . Posting Period This job will be posted for at least 5 days, starting on the initial post date reflected above.

Requirements

Must-haves

Company Overview
Position Overview
Systems Analysis and Design
Meet with business, IT, cybersecurity, and personnel to understand operational needs and translate them into system requirements.
Analyze existing systems and identify changes needed to improve security, availability, capacity, performance, or supportability.
Design and document infrastructure solutions involving servers, virtualization, storage, cloud services, identity, networking, backups, and disaster recovery.
Develop system specifications, architecture diagrams, configuration standards, testing plans, implementation plans, and rollback procedures.
Evaluate technical alternatives and recommend solutions based on business need, security risk, cost, system compatibility, and long-term support requirements.
Test and modify infrastructure systems before changes are placed into production.
Determine the technical approach for assigned infrastructure projects within established IT and security policies.
Infrastructure Engineering
Design, configure, and maintain Windows Server environments and related infrastructure services.
Serve as the technical owner for Active Directory, Group Policy, DNS, DHCP, file services, and other assigned Windows services.
Design and maintain VMware ESXi and Proxmox virtualization environments, including virtual machines, clusters, storage, replication, and capacity planning.
Plan and lead server, operating-system, virtualization, storage, and infrastructure upgrades.
Review system performance, capacity, backup results, security events, and availability trends to identify risks before they interrupt operations.
Develop and maintain technical standards for server configuration, virtualization, patching, backups, access, monitoring, and recovery.
Design and test backup, restoration, disaster-recovery, and business-continuity procedures.
Lead the technical work associated with infrastructure migrations, system replacements, new-location deployments, and company integrations.
Microsoft Cloud and Identity
Design and maintain Microsoft 365, Microsoft Azure, Microsoft Entra ID, and hybrid identity services.
Establish standards for user access, authentication, role-based permissions, multifactor authentication, and conditional access.
Review access and identity configurations for security, consistency, and business need.
Design and maintain endpoint-management solutions using Microsoft Intune, Configuration Manager/SCCM, or similar platforms.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azure

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off