IT Director

EOE Statement We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.

Description

Flow Control Holdings (FCH) provides sanitary flow components and engineered products for data center cooling, food, beverage and pharmaceutical applications.

Our operating divisions serve customers around the world. Our vision is Bringing Flow to Life™, with service and simplicity at the center of how we work.

Learn more at

Lead the day-to-day operation and improvement of FCH’s core technology platforms across offices, plants, warehouses and acquired businesses.

Personally design, configure and troubleshoot infrastructure while leading the IT Service and Support team, setting standards, managing vendors and budget, and owning IT general controls (ITGCs) that support accurate financial reporting under SOX.

The Cybersecurity Technical Lead owns security policy, threat monitoring, incident investigations, vulnerability management and awareness training. You’ll implement and operate the controls and configurations they define for these platforms.

• Cisco Meraki: Design, deploy and support MX security appliances, SD-WAN, MS switching, MR wireless and MT sensors. Manage site-to-site VPNs, internet failover, bandwidth, firmware, hardware lifecycle, licensing and consistent templates for new and acquired sites. Apply Cybersecurity standards for firewall rules and segmentation, including separation of plant OT, guest and corporate networks.
• Microsoft Azure: Administer subscriptions, landing zone, management groups, networks, VMs, storage, backup, Site Recovery, monitoring, cost management, resource groups, policies, role‑based access, tags, locks, network security groups, VPN gateways, Key Vault and App Service. Partner with the Cybersecurity Technical Lead, who owns Azure security, to implement configurations and remediate findings.
• Maintain Azure availability, performance and cost: configure Azure Monitor, Log Analytics and alerts; patch, right‑size and optimize workloads; manage reservations and savings plans; retire unused resources; and manage VPN or Express Route connectivity to FCH sites.
• Automate provisioning and configuration using Power Shell and infrastructure‑as‑code such as Bicep or Terraform. Plan and deliver on‑premises‑to‑Azure migrations, including testing, cutover and rollback.
• Microsoft Entra  hybrid Active Directory: Maintain Entra Connect or Cloud Sync, password hash synchronization, hybrid device join, domain controllers, Group Policy, DNS and DHCP. Lead directory cleanup and consolidation after acquisitions.
• Manage identity lifecycle, application registrations, single sign‑on and SaaS provisioning. Configure Conditional Access, MFA, passwordless authentication and Privileged Identity Management under Cybersecurity policies; manage privileged accounts.
• Proofpoint: Administer the email gateway, including routing, mail flow, policies, quarantine, user support and message tracing. Maintain SPF, DKIM and DMARC records; support Cybersecurity‑requested configuration changes and tracing.
• Cloudflare: Manage DNS, registrar settings and DNSSEC; operate CDN services for public websites and applications; and run Zero Trust access and Tunnels integrated with Entra  secure access to internal applications.
• Serve as the senior escalation point for complex issues and outages. Lead incident, problem and change…