Cyber Security Platform Engineer

As the Security Platform Engineer, you will engineer, operate, automate, and continuously improve the network security platforms that protect Georgia-Pacific's IT and OT environments, starting with the enterprise firewall platform across more than 150 locations. You will translate security standards into practical, well-governed policy and own the platform lifecycle, from request intake and change control through upgrades, monitoring, and support. This role will partner with Cyber Operations, Infrastructure & Site Reliability, Process Control, Koch shared services, and vendors to deliver secure connectivity and approved projects from design through go-live.

You will also apply automation and data to reduce manual effort, rule sprawl, and operational risk while sustaining the reliability our manufacturing operations depend on.

This role will be based in our Atlanta GP HQ or our Wichita Koch HQ with an expectation of three (3) days in the office per week.

The Cyber Security team within Georgia-Pacific is focused on managing risk across IT and OT environments by setting security standards and building the platforms, processes, and automation that put them into practice. Our goal is to provide valuable insights and dependable capabilities to business partners, enabling profitable, risk-based cyber security decisions. The team works collaboratively with Cyber Operations, Infrastructure & Site Reliability, Process Control and operations teams, Koch and shared-service partners, and third-party providers to protect critical systems, simplify how secure connectivity is requested and delivered, and drive sustainable operational outcomes.

• Engineer, operate, and continuously improve Georgia-Pacific's network security platforms, starting with next-generation firewalls protecting business, DMZ, and process control (OT) networks across more than 150 locations
• Own the platform lifecycle, including centralized policy management, disciplined change control tied to approved requests, health monitoring, and planned upgrade cycles that keep the fleet current, supported, and secure
• Design and drive adoption of global, standards-based security policies that translate security standards into practical rules, align stakeholders, and reduce rule sprawl
• Improve and automate the request intake and fulfillment experience, automating routine changes while providing an effective path for complex changes, incidents, and monitoring alerts
• Partner with Cyber Operations, Infrastructure & Site Reliability, Process Control, approvers, and vendors to define clear roles and responsibilities, communicate cross-site changes, and deliver approved projects through go-live and cutover
• Support adjacent security platforms such as OT network monitoring and privileged remote access, maintain supporting lab environments, and provide cyber review of vendor remote-access and OT connectivity requests

• Hands-on experience engineering, operating, or administering enterprise network security platforms such as next-generation firewalls
• Experience with networking fundamentals, including TCP/IP, routing, and network segmentation
• Experience working within change control and IT service management processes to deliver changes safely, predictably, and with clear documentation
• Experience using scripting or automation to reduce manual effort and improve consistency and quality
• Experience translating security standards and business needs into practical, maintainable policy
• Must have legal authorization to work permanently in the United States for any employer without requiring a visa transfer or visa sponsorship

• Experience with Fortinet platforms such as Forti Gate and Forti Manager, including fleet-wide policy management and firmware upgrades, or Fortinet NSE certification
• Experience with Palo Alto Networks firewalls or firewall policy management tools such as Fire Mon
• Experience in OT/ICS network security, including the Purdue model, ISA/IEC 62443, and OT monitoring platforms
• Experience automating network and security operations
• Experience with privileged remote access solutions such as Beyond Trust
• Relevant industry certifications such as CCNP Security or GICSP, or sustained professional development in network or IT/OT security

At Koch companies, we are entrepreneurs. This means we openly challenge the status quo, find new ways to create value and get rewarded for our individual contributions. Any compensation range…