Infrastructure Cloud Engineer

Infrastructure Cloud Engineer

Reports To: CISO

Location: Monterrey or Queretaro, MX

Environment: Hybrid

Work Schedule:

Monday to Friday 8:00 AM to 5:00 PM CDT

Who We Are:

Redwood Logistics is one of the fastest growing and most innovative 4PL providers offering supply chain execution and next-generation supply chain technology solutions. For more than 20 years, Redwood Logistics has been helping move businesses forward by connecting our clients to winning strategies. As a next-generation leader in forth-party logistics (4PL), we live at the intersection of logistics and technology. We focus brilliant minds, technology services, and performance excellence to modernize supply chains.

From our diversity of services, data-driven network solutions, and strategically integrated model, we have positioned ourselves as the dominant player in the mid-market space operating across North America and Mexico. We are a privately held company, managing significant transportation spend – we are big, but flexible with an entrepreneurial spirit.

Our continued success is driven by our fearless and innovative people. Being part of the Redwood family means taking the road less traveled, building each other up to greatness, and always leaving room for fun!

Ready to grow with us? With $1.4B in Revenue, 34% YOY SaaS growth and 400% SaaS pipeline, now is the time to join Redwood!

Purpose of Your Work:

This is NOT a DevOps role. The ideal candidate is a hands on infrastructure engineer who operates and improves the reliability, security, performance, and cost effectiveness of Azure cloud services, hybrid identity, Windows Server, storage, monitoring, and network environments. Approximately 60% of the role supports Azure IaaS and PaaS services, including Azure Functions and Azure Container Apps; approximately 35% supports enterprise network operations; and approximately 5% supports AWS where needed. The role focuses on selecting, operating, and troubleshooting infrastructure services, rather than owning application code.

Although networking represents approximately one third of the role, it requires deep practical troubleshooting skill. This position is the escalation point for core network incidents and must be able to diagnose issues such as port flaps, Dynamic ARP Inspection failures, VLAN and trunk mismatches, routing and switching faults, firewall policy problems, wireless connectivity issues, and related physical layer faults. The engineer will also support installation, configuration, replacement, lifecycle management, and documentation of Cisco or Meraki switches, firewalls, wireless equipment, cabling, VLANs, and related infrastructure.

How You Make a Difference Everyday:

• Troubleshoot and resolve core network incidents across switching, routing, VLANs, trunking, wireless, firewalls, and hybrid connectivity
• Design, implement, and maintain secure and scalable cloud infrastructure in Microsoft Azure and AWS
• Configure and manage Microsoft Entra ID, Conditional Access policies, role-based access control (RBAC), and privileged identity management (PIM)
• Deploy and monitor Microsoft Sentinel for cloud-native SIEM capabilities and automated threat response
• Support the lifecycle management of Windows Server environments and hybrid networking components
• Lead identity governance initiatives, ensuring appropriate access provisioning and audit readiness
• Develop and maintain infrastructure-as-code (IaC) using tools like Terraform to ensure repeatability and compliance
• Integrate AI-powered security and monitoring tools to proactively detect threats and reduce incident response times
• Participate in threat modeling, security risk assessments, and internal/external compliance audits
• Drive adoption of automation frameworks to streamline patching, system provisioning, and configuration management
• Collaborate with cross-functional teams to support application deployments and business continuity initiatives
• Contribute to runbooks, documentation, and knowledge sharing sessions to enhance team capabilities
• Operate as a subject matter expert and act as the escalation point for issue resolution and customer escalations.
• Provide on call support and assistance for production business systems on a rotating basis for after-hour support

You’ve Got This?

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or ability required.

Related certifications will be helpful. The candidate must have 5+ years of experience supporting an enterprise in a team environment.

• 3+ years working with cloud-native networking is required, comfortable configuring Azure Virtual Networks, subnets, Network Security Groups, route tables, VNet peering, VPN Gateways, and Azure Firewall, as well as equivalent AWS constructs such as VPCs, Transit Gateways, and Security Groups
• 3+ years of hands-on experience administering Windows Server environments in a large enterprise, including patch management, Active Directory, and hybrid identity
• 1+ years of Cisco or Meraki experience is required. Palo Alto experience is a plus.
• Microsoft Azure certification (AZ-104 Azure Administrator or AZ-500 Security Engineer) is a plus
• Solid working experience with Microsoft Entra ID, including Conditional Access, RBAC, PIM, and hybrid identity integration with on-premises Active Directory
• Proficiency in PowerShell scripting for automation, configuration management, and cloud administration tasks; experience with Python or Bash a plus
• Hands-on experience designing, deploying, and securing infrastructure in both Microsoft Azure and AWS, including IAM, VNets/VPCs, storage, and compute services
• Strong working knowledge of Azure PaaS services including Azure App Service, Azure SQL, Azure Monitor, Azure Key Vault, and related platform components
• Working knowledge of infrastructure-as-code tooling such as Terraform; ability to read, write, and maintain IaC modules in a version-controlled environment
• Solid hands-on networking experience is required — including switching, routing, VLANs, firewall rules, and network segmentation; direct experience with Cisco and/or Meraki equipment strongly preferred, as this role includes on-site support and lifecycle management of physical network hardware
• Comfortable providing on-site support — this role requires physical presence in the Chicago office and occasionally at other locations to install, configure, troubleshoot, and replace network hardware
• Familiarity with zero trust networking principles, network segmentation, and security zoning in hybrid environments; experience with SIEM, endpoint protection, or cloud-native security tooling is a plus

What We Offer:

• Access to experts and resources for your Learning & Development journey
• Opportunity for internal mobility
• Employee referral bonus program
• Employee Resource Groups (ERGs)
• Annual fundraising and volunteer events to give back to communities
• Life Insurance policy for you starting 30 days after employment
• Personal Health Insurance coverage for you – Major Medical
• 30 days “Aguinaldo” Christmas bonus or prorated percentage your first year
• Vacation time starting at 12 days. Additional days will increase per Mexican Law
• Premium Vacation 50% vacation days (Prima vacacional)
• You will also receive benefits like Saving Plan (Fondo de Ahorro) and Grocery Card (Vales De Despensa) 6% or the Maximum amount by Mexican Law
• You will be provided a Cell Phone Allowance of $800 pesos per month minus applicable taxes

Redwood is an equal opportunity employer. Employment decisions at the Company are based on individual merit, qualifications, abilities, and the Company’s needs and resources. The Company does not discriminate in recruiting, hiring, compensation, promotions, discipline, termination or any other aspect of employment on the basis of an individual’s actual or perceived race, color, creed, religion, sex (including pregnancy, childbirth and related medical conditions), sexual orientation, gender identity, national origin, ancestry, citizenship status, age, disability, marital status, military service or status, genetic information, arrest and conviction record, credit history, or any other basis protected by applicable law.