Title: Network and Systems Engineer Reports To: Chief Technology Officer Supervisory Responsibilities: N/A Location: St. Helena, CA – 5 days per week on-site Exempt (X) Non-Exempt ( ) Domain HWH, a family winegrowing endeavor built to last for generations, is part of Pacific Union Co. The Domain has evolved through the decades and comprises three Napa Valley properties that form its pillars: Harlan Estate, founded in 1984; BOND, founded in 1996; and Promontory, founded in 2008. The Mascot - a wine made from the younger vines of the three estates - was established in 2012. Each of these undertakings is dedicated to the understanding of our land, and to faithfully translating the respective characters of the individual properties into their wines. Join a small, highly technical team supporting a world-renowned winery, helping modernize IT from on-premises systems to a cloud-first, zero-trust model. The role combines infrastructure support with hands-on helpdesk and end-user support. Ensuring that employees are supported for their technical needs, while also delivering on core infrastructure responsibilities. The role is entrusted with
- Networking: Manage LAN/WAN/Wi-Fi, firewalls, VPN and help implement a zero-trust model. Help migrate from Cisco, Ruckus and SonicWall to a standardized UniFi platform. Handle hands-on tasks like cable patching, labeling, cameras, and access point and switch replacements.
- Systems and identity: Administer Dell servers, Docker, Hyper-V, Windows Servers/AD, and help in the retirement of on-premises AD in favor of Entra ID, SharePoint and OneDrive. Serve as Microsoft 365 tenant admin (Intune, Conditional Access, MFA, Exchange, Teams) and govern app registrations and admin roles.
- Security: Harden configurations and manage patching and firmware. Respond to SentinelOne and Blumira alerts, from first response through incident response.
- SaaS and backup: Manage SaaS platforms (Freshservice, Level.io), including SSO, SCIM, and licensing. Run Veeam backups and DRaaS with scheduled restore testing.
- Helpdesk and end-user support: Work the Freshservice queue, triaging and closing tickets within agreed response times and documenting fixes. Set up, image and enroll Windows devices in Intune, and support Windows, macOS, Linux, Microsoft 365 apps, mobile devices, and peripherals. Handle onboarding and offboarding (accounts, licenses, mailboxes, MFA, equipment) and routine Entra ID tasks like password resets and group changes. Support AV for meetings and events, and maintain printers, scanners, desk phones and conference room equipment.
- Operations: Maintain network diagrams, runbooks, and hardware and software inventory with asset tags. Write knowledge base articles and how-to guides, work with vendors and ISPs.
Best aligned with candidates who possess
- 6+ years in IT, including 3+ owning infrastructure
- Deep Microsoft 365, Windows Server, Hyper V, and AD experience; strong Windows 10/11 troubleshooting; Linux and Docker
- Enterprise networking: routing, VLANs, OSPF, BPDU Guard, firewall rules, VPN, Wi-Fi
- EDR/SIEM and incident response; backup and DR design and testing
- Scripting in PowerShell, Python, Bash, or comparable scripting language; SSO and SCIM setup
- Track record of delivering infrastructure projects end to end
- Valid driver’s license, travel between sites, and ability to lift 50 lbs and work in server rooms, offices and outdoor areas
Preferred qualifications
- Experience with Unifi network design and migration from Cisco, Ruckus, or SonicWall
- Familiarity with security frameworks (NIST CSF, CIS Controls)
- Bilingual (English/Spanish) and able to provide support to diverse teams, desired but not required
Culture Fit
- Clear, patient communication with non-technical users and organized ticket and documentation habits
- Positive attitude with a passion for IT and continuous learning
- Natural problem-solving skills focused on finding quality resolutions
- Must be a team player, willing to support the team where needed
- Takes on any task, from network and systems configuration changes to swapping out printer toner
Physical requirements
- Able to lift up to 50 lbs.
- Sit for extended periods.
- Able to walk up and downstairs frequently.
- Able to bend, kneel, push, and pull.
How we support you
- Health benefits for you and your family, including medical/dental/vision additional health benefits include life, long term disability, FSA or HSA and 401(k)
- Vacation and sick time along with 11 paid holidays and annually designated employee appreciation days
- A diverse team of coworkers that care about each other in a fun, exciting work environment
Pay Transparency Disclosure: The pay scale for this position is $100,000-$120,000 annually. These figures represent what we reasonably expect to pay for this position, but the actual compensation offered will depend upon numerous job-related factors, including but not limited to candidate qualifications, skills, experience, education, location, and alignment with market data. The Company reserves the right to modify the range in the future. Domain HWH is proud to be an Equal Opportunity Employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Employment with Domain HWH is at-will, meaning either the employee or employer may terminate the relationship at any time with or without cause and with or without notice, except as provided by law. If you require an accommodation to apply for or interview for a position, please contact our Human Resources Department at 707.286.1900 human.resources@pacificunionco.com