Kent Moore Cabinets is a 700-person manufacturing company with 11 locations across 9 Texas cities — our headquarters, two manufacturing plants, and eight sales offices. We're looking for a Network & Cybersecurity Administrator to own the infrastructure that keeps our people and plants connected — switches, firewalls, WAN links, wireless, VPN, and the cybersecurity controls that protect all of it.
This role carries dual ownership. On the network side, you're responsible for availability, performance, segmentation, and documentation across our entire physical and logical network footprint. On the cybersecurity side, you own the operational execution of our cybersecurity posture — endpoint protection, identity security, access reviews, vulnerability management, and incident response. You'll work closely with the IT Director and System Administrator to keep cybersecurity embedded in everything we do, not bolted on after the fact.
KMC runs a hybrid identity environment (Active Directory + Entra ID) with modern endpoint protection, MFA, and VoIP platforms across all 11 locations, including 100+ networked devices on our plant floors. We're in the middle of a real network refresh — new switching, firewalls, and wireless are already on the roadmap — so you'll be modernizing from day one, not just maintaining what's already there.
This isn't a support-desk role, and it isn't a pure monitoring seat — you own network platform strategy and cybersecurity operations for the company.
Network Infrastructure (Primary Responsibility)
-
Own switching, routing, firewall, and wireless infrastructure across all 11 KMC locations
-
Own WAN/ISP connectivity — performance, redundancy, and ISP escalation
-
Own VLAN design, IP address management, and network segmentation documentation
-
Own VPN infrastructure — remote access, site-to-site tunnels, and routing
-
Own network monitoring and alerting; proactive identification of degradation before it becomes an outage
-
Own phone system network layer (QoS, VLANs, call-quality troubleshooting) for 3CX VoIP
-
Own plant-floor network connectivity — scanner/wireless reliability directly impacts manufacturing operations
-
Direct and coordinate vendor and installer work for physical network infrastructure
-
Automate network configuration backup, monitoring, and repeatable network tasks
Cybersecurity Operations (Co-Primary Responsibility)
-
Own firewall rule management, network segmentation policy, and perimeter cybersecurity execution
-
Own endpoint protection administration — policy, health, and response
-
Own MFA administration — enrollment health, policy, and access control enforcement
-
Own vulnerability management operations — scan cadence, prioritization, and remediation coordination
-
Coordinate annual third-party penetration testing engagements and own remediation of all identified findings
-
Lead cybersecurity incident response for network-related events; coordinate cross-domain response with SysAdmin and IT Director
-
Own quarterly access reviews in coordination with the System Administrator and IT Director
-
Maintain cybersecurity documentation — policies, runbooks, incident reports, and audit evidence
-
Support compliance requirements and cybersecurity questionnaires (cyber insurance, vendor reviews)
-
Drive cybersecurity awareness by surfacing meaningful risk to the IT Director and contributing to staff training
Identity, Access & Email Security (Shared with System Administrator)
-
Administer Duo MFA policies and support Entra ID Conditional Access configuration
-
Coordinate with the System Administrator on email security administration (Barracuda) — policy, quarantine management, and incident triage
-
Support VPN access control and identity-based network segmentation
-
Coordinate with the System Administrator on AD/Entra identity lifecycle where network or cybersecurity controls are involved
-
Participate in access reviews and escalate anomalies
Cross-Domain Collaboration
-
Coordinate with the System Administrator on server/storage network dependencies and infrastructure security
-
Coordinate with the IT Director on cybersecurity risk posture, exception approvals, and cybersecurity roadmap
-
Support Support team with recurring network-related user issues and escalation triage
Required Experience
-
ESSENTIAL 5+ years hands-on network administration in a multi-site environment
-
ESSENTIAL Firewall administration — rule management, NAT, segmentation, and VPN (Fortinet, Palo Alto, Cisco, or equivalent)
-
ESSENTIAL Switching and routing — VLANs, STP, inter-VLAN routing, QoS
-
ESSENTIAL Wireless infrastructure administration across multiple sites
-
ESSENTIAL Cybersecurity operations experience — endpoint protection or vulnerability management in a production environment
-
ESSENTIAL Network monitoring and alerting platform experience
Strong Preferences
-
Experience in a manufacturing or industrial environment with plant-floor network requirements
-
Experience with hybrid identity environments (Active Directory + Entra ID / Azure AD)
-
Endpoint detection and response (EDR) administration — SentinelOne, CrowdStrike, or equivalent
-
Experience with the Ubiquiti UniFi networking ecosystem — switches, access points, gateways/UDM, and controller management
-
MFA platform administration — Duo, Okta, or equivalent
-
Cybersecurity incident response experience — triage, containment, documentation, and root-cause
-
VoIP network administration (QoS, VLAN, call-quality troubleshooting)
-
Scripting for network automation (Python, Ansible, or equivalent)
-
Cloud network fundamentals — Azure or AWS networking in a hybrid environment
-
Vulnerability scanning and remediation coordination (Nessus, Qualys, or equivalent)
Certifications (Nice to Have)
-
CCNA or CCNP (Cisco Certified Network Associate / Professional)
-
CompTIA Security+ or CompTIA Network+
-
Fortinet NSE (or equivalent vendor firewall certification)
-
Microsoft SC-900 / SC-200 (Security fundamentals or operations)
What matters most: You think about the network as a cybersecurity boundary, not just a connectivity layer. You document obsessively and automate ruthlessly. You can explain a segmentation decision to a non-technical stakeholder and a firewall rule to a developer. You treat "cybersecurity" and "operations" as the same job — not two separate queues.
Real dual ownership.
You're not a junior firewall admin waiting for tickets. You own network infrastructure and cybersecurity operations for a 700-person manufacturer. Both domains. Real stakes.
Manufacturing context that matters.
Plant-floor connectivity directly impacts production. When a wireless scanner drops or a VLAN is misconfigured, real manufacturing stops. Your work has immediate, visible business impact.
Cybersecurity that's built in, not bolted on.
KMC's leadership is committed to AI-centric operations and modern cybersecurity posture. You'll have the IT Director's support to do cybersecurity properly — not fight for budget or justify the basics.
Growing and modernizing.
We're actively improving our infrastructure. You'll help define how network segmentation, identity-based access, and cybersecurity monitoring evolve — not just maintain what exists.
Competitive compensation.
We pay for expertise and experience. This role reflects senior-level responsibility across two critical domains.
Salary: $75,000–$100,000 annually, based on experience and qualifications
Benefits include: Health, dental, vision insurance; 401(k) with company match; paid time off; professional development budget (up to $2,500+/year for training, certifications, conferences); on-call support compensation
Tell us about:
-
A complex network problem you owned end-to-end — the diagnosis, the fix, and what you learned
-
Your experience with cybersecurity operations — what tools you've used, what incidents you've responded to
-
Why you want to work at a manufacturing company rather than a tech company or MSSP
-
What "good" looks like to you in a hybrid network/cybersecurity role
We're reviewing applications on a rolling basis. Strong candidates will hear from us within 2 weeks.
Please upload your resume and a brief cover letter at our Paycom Careers website with the subject line "Network & Cybersecurity Administrator Application"
Kent Moore Cabinets is an Equal Opportunity Employer. We actively encourage applications from all qualified candidates regardless of race, color, religion, sex, national origin, age, disability, or any other legally protected status.
Physical Requirements
I. Physical Demand Level: Light
Sitting
Walking
Standing
Neck Bending
Waist Bending
Squatting
Climbing
Kneeling
Up To Frequently
Up To Frequently
Occasionally
Rarely
Rarely
Rarely
Rarely
Rarely
Crawling
Neck Twisting
Waist Twisting
Simple Grasping
Power Grasping
Fine Manipulation
Reaching Above
Reaching at or Below Shoulder
Rarely
Frequently
Frequently
Frequently
Occasionally
Occasionally
Occasionally
Occasionally
II. Exertion Requirements: Light
Activity
Load/Weight/Force
Duration
Pushing
10 – 20 lbs. of force to initiate and/or maintain
Frequently
Pushing
25 – 50 lbs. of force to initiate and/or maintain
Occasionally
Pushing
50 – 100 lbs. of force to initiate and/or maintain
Rarely
Pulling
10 – 20 lbs. of force to initiate and/or maintain
Frequently
Pulling
25 – 50 lbs. of force to initiate and/or maintain
Occasionally
Pulling
50 – 100 lbs. of force to initiate and/or maintain
Rarely
Lifting
10 – 20 lbs.
Frequently
Lifting
25 – 50 lbs.
Occasionally
Lifting
50 – 100 lbs.
Rarely
Carrying
10 – 20 lbs.
Frequently
Carrying
25 – 50 lbs.
Occasionally
Carrying
50 – 100 lbs.
Rarely
III. Sensory Requirements: Light
Hearing
Corrected to detect a minimum amplitude of 65 dB(A) for normal speaking voice at a distance of three feet.
Vision
Corrected to 20/40
Talk
Talking with a normal voice approximates to sound pressure level 65 dB(A)
Required Experience
-
ESSENTIAL 5+ years hands-on network administration in a multi-site environment
-
ESSENTIAL Firewall administration — rule management, NAT, segmentation, and VPN (Fortinet, Palo Alto, Cisco, or equivalent)
-
ESSENTIAL Switching and routing — VLANs, STP, inter-VLAN routing, QoS
-
ESSENTIAL Wireless infrastructure administration across multiple sites
-
ESSENTIAL Cybersecurity operations experience — endpoint protection or vulnerability management in a production environment
-
ESSENTIAL Network monitoring and alerting platform experience
Strong Preferences
-
Experience in a manufacturing or industrial environment with plant-floor network requirements
-
Experience with hybrid identity environments (Active Directory + Entra ID / Azure AD)
-
Endpoint detection and response (EDR) administration — SentinelOne, CrowdStrike, or equivalent
-
Experience with the Ubiquiti UniFi networking ecosystem — switches, access points, gateways/UDM, and controller management
-
MFA platform administration — Duo, Okta, or equivalent
-
Cybersecurity incident response experience — triage, containment, documentation, and root-cause
-
VoIP network administration (QoS, VLAN, call-quality troubleshooting)
-
Scripting for network automation (Python, Ansible, or equivalent)
-
Cloud network fundamentals — Azure or AWS networking in a hybrid environment
-
Vulnerability scanning and remediation coordination (Nessus, Qualys, or equivalent)
Certifications (Nice to Have)
-
CCNA or CCNP (Cisco Certified Network Associate / Professional)
-
CompTIA Security+ or CompTIA Network+
-
Fortinet NSE (or equivalent vendor firewall certification)
-
Microsoft SC-900 / SC-200 (Security fundamentals or operations)
