Network Security Engineer

About Us:

Barry-Wehmiller is a diversified global supplier of engineering consulting and manufacturing technology for the packaging, corrugating, sheeting and paper-converting industries. By blending people-centric leadership with disciplined operational strategies and purpose-driven growth, Barry-Wehmiller has become a $3 billion organization with nearly 12,000 team members united by a common belief: to use the power of business to build a better world.

The Network Security Engineer is responsible for assisting with the planning, design, optimization, implementation, audit, and troubleshooting the Barry-Wehmiller (BW) network from a security perspective to improve the protection and the efficiency of the organization. It is the responsibility of the NST to help plan and implement security measures to protect the system from cyber-attacks, hacking attacks, intrusion, infiltration, exfiltration and natural disasters at the network level. This individual will help make our company s information technology (IT) environment more secure by protecting system boundaries, keeping computer systems and network devices hardened against attacks, and securing company and personal data.

Principal Duties and Responsibilities (Essential Functions):

• Assist in planning, identifying, defining, engineering, and monitoring the security arrangements for the protection of the company s network and services.
• Design secure remote access practices and implementation plans as well as make recommendations to secure BW s footprint in BW and customer facilities; assist in designing and optimizing security in BW s Industrial Internet of Things (IIoT) initiatives
• Participate in projects to address gaps in BW s on-premises and cloud network environments.
• Assist in developing, documenting, and maintaining standard security policy settings for firewalls and other network security devices and appliances.
• Oversee daily operations of BW s network security systems
• Assist the Infrastructure team with designing and documenting additional network segmentation and enhancing BW s Information Technology / Operational Technology segregation.
• Manage daily operations of intrusion detection systems as well as ensure the security of firewalls, VPNs, web protocols and other networking equipment.
• Help investigate intrusion and hacking incidents, collect incident responses, and carry out forensic investigations as directed.
• Use industry-standard analysis criteria to test the security level of the BW enterprise; test and check the BW enterprise for weaknesses in software and hardware by assisting with penetration tests, vulnerability assessments and then managing all findings to resolution.
• Assist with the implementation of regulatory systems in accordance with IT security.
• Help optimize malware and other threat detection systems and processes.
• Collaborate with the Infrastructure team regarding improving design and security capabilities, and determining network security standards and policies.
• Participate in implementation and integration projects such as conducting product research, overseeing proof of concept evaluations, coordinating with the Infrastructure team during acquisition integrations and implementations and overseeing the configuration and installation of security infrastructure devices.
• Configure and maintain systems that log and monitor security threats and alerts.

Job Specifications:

• Knowledge of Cisco and Palo Alto firewalls and other next-generation firewall technologies.
• Knowledge of Cisco ISE and its capabilities.
• Knowledge of Cisco Meraki.
• Knowledge of routing and switching capabilities.
• Strong logical ability, natural curiosity, problem solving ability, good oral and written communication skills, thorough, takes initiative, professional appearance/demeanor, dependable, flexible with schedule, loyal, organized, and courteous.
• Troubleshooting skills with networking and computer systems, can multitask, work in a fast- paced environment while providing excellent user experience.
• Ability to work independently with general supervision; applies practical knowledge to problems.
• API programming experience strongly desired.

Required Education and Experience:

• Intermediate level professional with working knowledge and experience in network security.
• Minimum 2-year degree in an Information Technology field. Bachelor s degree preferred. Equivalent work experience may be considered in lieu of a degree.
• Four (4) to five (5) years of hands-on experience working with IP networks, firewalls switch | route environment
• Two (2) years identifying threats and developing appropriate protection measures.