Director of IT Operations Lead the technology behind FCH’s growth—and stay hands-on building reliable systems across a growing, multi-site business. About Flow Control Holdings Flow Control Holdings (FCH) provides sanitary flow components and engineered products for data center cooling, food, beverage and pharmaceutical applications. Our operating divisions serve customers around the world. Our vision is Bringing Flow to Life, with service and simplicity at the center of how we work. Learn more at www.fchinc.com. The Opportunity Lead the day-to-day operation and improvement of FCH’s core technology platforms across offices, plants, warehouses and acquired businesses. Personally design, configure and troubleshoot infrastructure while leading the IT Service and Support team, setting standards, managing vendors and budget, and owning IT general controls (ITGCs) that support accurate financial reporting under SOX. The Cybersecurity Technical Lead owns security policy, threat monitoring, incident investigations, vulnerability management and awareness training. You’ll implement and operate the controls and configurations they define for these platforms. What You’ll Do - Cisco Meraki: Design, deploy and support MX security appliances, SD-WAN, MS switching, MR wireless and MT sensors. Manage site-to-site VPNs, internet failover, bandwidth, firmware, hardware lifecycle, licensing and consistent templates for new and acquired sites. Apply Cybersecurity standards for firewall rules and segmentation, including separation of plant OT, guest and corporate networks.
- Microsoft Azure: Administer subscriptions, landing zone, management groups, networks, VMs, storage, backup, Site Recovery, monitoring, cost management, resource groups, policies, role-based access, tags, locks, network security groups, VPN gateways, Key Vault and App Service. Partner with the Cybersecurity Technical Lead, who owns Azure security, to implement configurations and remediate findings.
- Maintain Azure availability, performance and cost: configure Azure Monitor, Log Analytics and alerts; patch, right-size and optimize workloads; manage reservations and savings plans; retire unused resources; and manage VPN or ExpressRoute connectivity to FCH sites.
- Automate provisioning and configuration using PowerShell and infrastructure-as-code such as Bicep or Terraform. Plan and deliver on-premises-to-Azure migrations, including testing, cutover and rollback.
- Microsoft Entra ID and hybrid Active Directory: Maintain Entra Connect or Cloud Sync, password hash synchronization, hybrid device join, domain controllers, Group Policy, DNS and DHCP. Lead directory cleanup and consolidation after acquisitions.
- Manage identity lifecycle, application registrations, single sign-on and SaaS provisioning. Configure Conditional Access, MFA, passwordless authentication and Privileged Identity Management under Cybersecurity policies; manage privileged accounts.
- Proofpoint: Administer the email gateway, including routing, mail flow, policies, quarantine, user support and message tracing. Maintain SPF, DKIM and DMARC records; support Cybersecurity-requested configuration changes and tracing.
- Cloudflare: Manage DNS, registrar settings and DNSSEC; operate CDN services for public websites and applications; and run Zero Trust access and Tunnels integrated with Entra ID for secure access to internal applications.
- Serve as the senior escalation point for complex issues and outages. Lead incident, problem and change management, including after-action reviews; maintain monitoring, alerting and on-call coverage for critical services.
- Own backup, disaster recovery and business continuity for identity, network and cloud services, and test recovery at least annually.
- Maintain platform standards, build procedures, runbooks, SOPs, network diagrams, Azure architecture, identity flows, DNS records and admin account inventories. Keep documentation current under retention and audit requirements.
- Enforce change control through the Change Advisory Board and apply Cybersecurity-defined configuration baselines across platforms.
SOX Controls and Audit Readiness - Design and operate ITGCs for platforms supporting financially significant systems, including Active Directory, Entra ID and Azure-hosted applications in Drata.
- Run access controls, including timely provisioning and deprovisioning, quarterly access reviews and privileged-access approvals.
- Run change controls with documented, approved and tested changes and separation of duties between developers and deployers.
- Run operations controls, including backup and restore verification, scheduled-job monitoring and incident tracking.
- Serve as control owner for internal and external audits. Provide evidence on schedule, remediate deficiencies within agreed timelines and prevent repeat findings.
- Review SOC 1 and SOC 2 reports from key providers such as Microsoft, Cloudflare and Proofpoint, and confirm FCH’s complementary user controls are in place.
- Update control documentation and risk assessments when systems, processes or acquisitions change. Provide leadership timely operational facts for incident escalation and disclosure assessments.
Leadership and Business Operations - Lead, coach and develop the IT Service and Support team; cross-train employees to reduce single points of failure.
- Manage Cisco, Microsoft, Proofpoint and Cloudflare relationships, resellers and managed service providers.
- Own the operations budget, licensing true-ups, renewals and spend tracking.
- Lead technology onboarding for acquired businesses, bringing their networks, identity and email onto FCH standards.
- Report platform health, risk and KPIs to the VP of IT.
What You’ll Bring Required Qualifications - Bachelor’s degree in Information Technology, Computer Science or a related field, or equivalent experience.
- At least 10 years of IT infrastructure experience, including 3–5 or more years leading operations or engineering teams.
- Production-level, hands-on experience with:
- Cisco Meraki MX, MS and MR, including SD-WAN and multi-site deployments
- Microsoft Azure infrastructure, networking and cost management
- Microsoft Entra ID, including Conditional Access, PIM and application SSO
- Hybrid Active Directory with Entra Connect synchronization
- Proofpoint or a comparable enterprise email gateway
- Cloudflare DNS, CDN and Zero Trust access
- PowerShell scripting and automation, plus infrastructure-as-code such as Bicep or Terraform.
- Experience writing SOPs, managing change control and owning SOX ITGCs at a public company, including direct work with internal and external auditors.
- Experience managing vendors, contracts and an operations budget.
Preferred Qualifications - Multi-site manufacturing or industrial experience, including IT/OT network segmentation.
- Experience integrating acquired companies’ networks, domains and email tenants.
- Familiarity with Microsoft Intune and Microsoft 365 administration.
- Drata experience, including connecting Azure, Entra ID and other systems; monitoring automated control tests; remediating failed controls; and providing audit evidence.
- Relevant certifications are welcome:
- Cisco Meraki Solutions Specialist (ECMS) or CCNP Enterprise
- Microsoft Azure Administrator (AZ-104) or Azure Solutions Architect (AZ-305)
- Microsoft Identity and Access Administrator (SC-300)
- Proofpoint Certified Administrator
- Cloudflare Zero Trust certification
- ITIL 4 Foundation
What Success Looks Like First 12 Months - Within 90 days, review the configuration and documentation for all six platforms and deliver a prioritized remediation plan.
- Publish platform runbooks and SOPs, and bring all changes under formal change control.
- Complete the annual SOX testing cycle with no significant deficiencies or material weaknesses in IT operations controls.
- Standardize Meraki site templates and onboard pending acquired sites.
- Review Entra Connect and Active Directory health, removing stale accounts, objects and legacy configuration.
- Complete and document a disaster recovery test for identity, network and Azure workloads.
Ongoing Measures - SOX control effectiveness, including audit deficiencies and repeat findings; audit evidence delivered on schedule.
- Leaver access removed within policy timelines and quarterly access reviews completed on time.
- Site and WAN uptime; Entra Connect sync success and authentication availability.
- Azure workload uptime and spending against budget; email availability and delivery issues resolved within SLA.
- Changes completed without incident and with complete approvals; escalated incidents resolved within SLA.
- Runbooks and diagrams reviewed within the last 12 months.
- KPI targets will be set with the VP of IT.
Work Environment and FCH Values The role primarily involves extended periods sitting and working at a computer. It may require occasional lifting up to 25 pounds and travel by car or air. Essential functions may also include standing, walking, reaching, bending and carrying materials. Regular, consistent attendance is required. Salary Range: $150,000- $170,000, plus annual bonus Reasonable accommodations are available under the Americans with Disabilities Act and other applicable law for qualified individuals to perform the role’s essential functions. FCH values Integrity, Trust, Creativity and Courage, Teamwork, and Excellence. We communicate clearly and respectfully, listen to employee concerns and ideas, protect confidential information, and participate in company activities as appropriate. Physical and Attendance Requirements
This role primarily involves prolonged periods of sitting and working at a computer. The position may require occasional lifting of materials up to 25 pounds and travel by car or air. Regular and consistent attendance is required.
Accommodations
Essential functions may include sitting, standing, walking, reaching, bending, carrying materials, and traveling to company locations. If you need a reasonable accommodation to perform the essential job functions under the Americans with Disabilities Act or other applicable law, you may request an accommodation below.
Accommodations requested:
|