The Network Security Engineer will play a vital role in ensuring the security and efficiency of Oceaneering International's global network infrastructure. This position demands a hands-on approach, bridging traditional networking practices with modern security solutions. The ideal candidate will have a strong background in network engineering, with a focus on security, and will be responsible for designing, implementing, and maintaining secure network environments.
- Design and configure Palo Alto Next-Generation Firewalls (NGFW) and Panorama for centralized security management.
- Implement and monitor Zscaler Internet Access (ZIA) and Private Access (ZPA) to secure user traffic and enhance network security.
- Configure and implement security policies, including App-ID and User-ID, to ensure network integrity.
- Manage complex enterprise networks, including BGP routing and Cisco routers/switches, for optimal performance.
- Administer Cisco Identity Services Engine (ISE) for network access control and identity management.
- Lead incident response, performing deep analysis and implementing containment strategies for network security incidents.
- Automate routine firewall changes and security checks using scripting languages to improve efficiency.
- Create and maintain comprehensive documentation, ensuring compliance and knowledge sharing within the team.
- Stay updated with the latest security trends and best practices, contributing to a proactive security culture.
Required
- Proven track record in managing critical network operations in a 24/7 high-availability environment.
- Strong knowledge of incident response and policy management in a security operations context.
- 3+ years of experience in BGP, Cisco Routing/Switching, and WAN technologies is essential.
- 3+ years of experience and understanding of Palo Alto Firewalls and their features, including Panorama.
- 3+ years managing large scale firewall environments and deployments.
- U.S Citizen or Lawful Permanent Resident
- Excellent leadership and communication skills, with the ability to work collaboratively and independently.
- A proactive and analytical mindset, committed to continuous learning and staying updated with security advancements.
Preferred
- Experience with Azure/AWS networking security, including NSGs and Virtual WAN, is preferred.
- Proficiency in automation tools like Ansible, Python, or Terraform is highly desirable.
- Certifications such as PCNSE, CCNP Security, or CCIE are advantageous.
- Experience with Zscaler solutions and their integration into a SASE framework.
Working Conditions
This position is considered office work and is characterized as follows.
- Almost exclusively indoors during the day and occasionally at night.
- Occasional exposure to airborne dust in the workplace.
- Work surface is stable and flat.
Physical Activity / Requirements
- The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
- Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- This position is considered light work.
We offer a comprehensive and competitive benefits package. Employee benefits vary by role, however, may include Health and Wellness, Mental Health, Retirement Savings, Life and Disability, Paid Maternity and Parental Leave, Paid Time Off, Tuition Reimbursement, and an Employee Assistance Program.