Network Security Engineer

The Senior Network Security Engineer is a key member of our team responsible for planning, designing, optimizing, implementing, auditing, and troubleshooting the BW network from a security perspective to enhance protection and efficiency. This role involves planning and implementing security measures to safeguard the enterprise IT environment against cyber-attacks, hacking attempts, intrusions, infiltrations, exfiltrations, and natural disasters at the network level.

• Plan, identify, define, engineer, and monitor security arrangements for protecting the company's network and services.
• Identify and analyze gaps in the security of the BW on-premises and cloud network environments.
• Participate in implementation and integration projects, including product research, proof-of-concept evaluations, coordination with the infrastructure team during acquisition integrations and implementations, and secure configuration and installation of infrastructure devices.
• Help optimize threat detection systems and processes.
• Design secure remote access practices and implementation plans to secure BW's footprint in BW and customer facilities.
• Assist the Infrastructure team with designing and documenting additional network segmentation and implementing/enhancing BW's Information Technology/Operational Technology (IT/OT) segregation.
• Develop, optimize, document, and maintain security standards, processes, operating procedures, and policies.
• Participate in the lifecycle management and day-to-day operations of relevant security tools.
• Responsible for developing standard configurations to ensure the security of firewalls, VPNs, web protocols, and other networking equipment.
• Help investigate intrusion and hacking incidents, collect incident responses, and carry out forensic investigations.
• Use industry-standard analysis criteria to test the security level of the BW enterprise; test and check the BW enterprise for weaknesses in software and hardware by assisting with penetration tests, vulnerability assessments, and then managing all findings to resolution.
• Assist with the implementation of regulatory systems in accordance with IT security. Modify, where needed, the technical, legal, and regulatory aspects of the enterprise's security.
• Implementation, configuration, and maintenance of NAC configuration using Cisco ISE.
• Work as a champion for best cybersecurity practices within Barry-Wehmiller.

• Expert knowledge of Cisco, Palo Alto, and other vendor firewalls.
• Expert knowledge of Cisco ISE and its capabilities and configuration.
• Expert knowledge of routing and switching capabilities.
• Knowledge of configuration and management of Cisco Meraki.
• Understanding of SASE/SSE products and capabilities such as Netskope or Zscaler.
• Strong logical ability, natural curiosity, problem-solving ability, good oral and written communication skills, thorough, takes initiative, professional appearance/demeanor, dependable, flexible with schedule, loyal, organized, and courteous.
• Troubleshooting skills with networking and computer systems, can multitask, work in a fast-paced environment while providing excellent user experience.
• Ability to work independently with minimal guidance and to solve complex problems.
• A good understanding of OT environments and the challenges that these can present.
• API programming experience is highly desirable.

• Senior-level professional with in-depth knowledge of network security.
• Minimum 4-year degree in an IT field. Master's degree preferred. Equivalent work experience will be considered in lieu of a degree.
• Relevant certifications such as CCNP, CCIE, CISSP, or other comparable certifications are highly desirable.
• Minimum of five (5) years of experience serving in a network security engineer role and working with IP networks, firewalls, and the switch/route environment.
• Three (3) years experience in identifying threats and developing appropriate protection measures.