Network Security Engineer

The Senior Network Security Engineer is responsible for the planning, design, optimization, implementation, audit, and troubleshooting of the BW network from a security perspective to improve the protection and the efficiency of the organization. It is the responsibility of this role to plan and implement security measures to protect the enterprise IT environment from cyber-attacks, hacking attacks, intrusion, infiltration, exfiltration and natural disasters at the network level. This individual will help make our company s IT environment more secure by protecting system boundaries, keeping computer systems and network devices hardened against attacks, and securing company and personal data.

Principal Duties and Responsibilities (Essential Functions):

• Plan, identify, define, engineer, and monitor the security arrangements for the protection of the company s network and services.
• Identifies and analyzes gaps in the security of the BW on-premises and cloud network environments.
• Participate in implementation and integration projects such as conducting product research, overseeing proof of concept evaluations, coordinating with the infrastructure team during acquisition integrations and implementations, and overseeing the secure configuration and installation of infrastructure devices.
• Help optimize threat detection systems and processes.
• Design secure remote access practices and implementation plans to secure BW s footprint in BW and customer facilities.
• Assist the Infrastructure team with designing and documenting additional network segmentation and implementing/enhancing BW s Information Technology / Operational Technology (IT/OT) segregation.
• Develop, optimize, document, and maintain security standards, processes, operating procedures, and policies.
• Participate in the lifecycle management and day-to-day operations of relevant security tools .
• Responsible for developing standard configurations to ensure the security of firewalls, VPNs, web protocols and other networking equipment.
• Help investigate intrusion and hacking incidents, collect incident responses, and carry out forensic investigations.
• Use industry-standard analysis criteria to test the security level of the BW enterprise; test and check the BW enterprise for weaknesses in software and hardware by assisting with penetration tests, vulnerability assessments and then managing all findings to resolution.
• Assist with the implementation of regulatory systems in accordance with IT security. Modify, where needed, the technical, legal, and regulatory aspects of the enterprise s security.
• Implementation, configuration and maintenance of NAC configuration using Cisco ISE.
• Work as a champion for best cyber security practices within Barry-Wehmiller.

Job Specifications:

• Expert knowledge of Cisco, Palo Alto and other vendor firewalls
• Expert knowledge of Cisco ISE and its capabilities and configuration.
• Expert knowledge of routing and switching capabilities.
• Knowledge of configuration and management of Cisco Meraki.
• Understanding of SASE/SSE products and capabilities such as Netskope or Zscaler.
• Strong logical ability, natural curiosity, problem solving ability, good oral and written communication skills, thorough, takes initiative, professional appearance/demeanor, dependable, flexible with schedule, loyal, organized, and courteous.
• Troubleshooting skills with networking and computer systems, can multitask, work in a fast-paced environment while providing excellent user experience.
• Ability to work independently with minimal guidance and to solve complex problems.
• A good understanding of OT environments and the challenges that these can present.
• API programming experience is highly desirable.

Required Education and Experience:

• Senior level professional with in-depth knowledge of network security.
• Minimum 4-year degree in an IT field. Master s degree preferred. Equivalent work experience will be considered in lieu of a degree.
• Relevant certifications such as CCNP, CCIE, CISSP, or other comparable certifications are highly desirable.
• Minimum of five (5) years of experience serving in a network security engineer role and working with IP networks, firewalls, and the switch / route environment
• Three (3) years experience in identifying threats and developing appropriate protection measures.