Sr Network Engineer​/Architect, Global Network & Security - Alpharetta, GA, Boston, MA or Bill

Your Role at Cabot

Cabot Corporation seeks a Sr Network Engineer / Architect to join the Digital Security team at one of our locations:
Alpharetta, GA;
Boston, MA; or Billerica, MA.

The role ensures the enterprise network operates as a security‑aligned control plane, enabling Zero Trust, segmentation, and modern access models across IT and OT environments.

Key attributes of the position:

• Full ownership of the global enterprise network platform: architecture, engineering, implementation, security and operation.
• Dual mandate: (1) own the network platform as a core capability; (2) align architecture and operations to enterprise security principles.
• Hybrid work arrangement: remote Monday/Friday, in‑office Tuesday‑Thursday.
• Domestic and international travel up to 15%.
• Off‑hours availability for critical incidents.

• Own the global enterprise network platform (LAN, WAN, wireless, remote access, voice, and perimeter services).
• Ensure architecture and operations align to enterprise security principles and risk tolerance.
• Establish and enforce global network standards, design patterns, and implementation models.
• Ensure the network functions as a security‑aligned control plane, not merely a connectivity service.
• Maintain consistency, repeatability and enforce ability of all designs and implementations across regions and environments.

• Lead and execute global network engineering and modernization initiatives (firewalls, switching, routing, wireless, voice and collaboration platforms).
• Design, configure, and implement solutions aligned to defined architecture, standards and security principles.
• Plan and execute site deployments, migration activities, cutover events and post‑deployment stabilization (hyper‑care).
• Develop and maintain design documentation, runbooks, operational procedures and as‑built configurations.
• Coordinate with regional IT teams, managed service providers and vendors for consistent global implementations.
• Act as the escalation point for network and security issues on managed service providers, providing technical direction and driving resolution.

• Own the global network platform model (architecture, standards, implementation and operation).
• Define and maintain the target‐state network architecture and modernization roadmap (SD‑WAN, SASE, cloud networking).
• Lead network technology selection, lifecycle management and rationalization.
• Ensure alignment of engineering and operations to enterprise security strategy (Zero Trust, segmentation, access control).
• Define and enforce network segmentation and secure access patterns across IT and OT environments.
• Provide hands‑on engineering leadership for complex design, implementation and problem resolution.
• Govern MSP‑delivered network services, ensuring compliance with standards, SLAs and architectural intent.
• Define operational expectations, validation requirements and acceptance criteria for network changes and deployments.
• Support logging, telemetry, detection and response requirements across the network.
• Facilitate secure integration between enterprise IT and manufacturing/OT environments.
• Translate technical risk into clear, actionable insights for leadership.
• Authority to demand redesign or remediation where necessary.

• 10+ years in enterprise networking (engineering and architecture).
• University degree or equivalent experience in related technologies.
• Experience owning or operating a global network platform.
• Strong knowledge of routing, switching, WAN architectures and network security controls.
• Experience with Zero Trust concepts, segmentation strategies and secure access models.
• Hands‑on experience within an MSP or hybrid delivery model.
• Excellent English skills, both verbal and written.

• Network architecture within global industrial or manufacturing environments.
• SASE/SSE platforms (Zscaler, Netskope, Prisma, etc.).
• Cloud networking (Azure, AWS).
• Operational technology (OT) and industrial network segmentation.

• Industry certifications: CCNP, CCDA/CCDP, Fortinet NSE 4 or higher, CWNA.
• Familiarity with…