Industrial Network Security Engineer - OT

Industrial Network Security Engineer - OT About the job Industrial Network Security Engineer - OT

Job Title:

Industrial Network Security Engineer

Contract through Dec 2025 with possible extension

Location:

Houston, TX

Travel Required:

No

The Global Infrastructure & Operation Department (GIO) was created to enable high speed execution of the Groups IT transformation projects and to run global services. GIO is part of the company IT legal entity. It delivers infrastructure services to our BIS (Business Information System) customers worldwide. The Americas Hub team within GIO is responsible for ensuring the delivery of all GIO services to its customers across all the Americas (through the 3 Clusters: North America and Latin America and other biz unit) and their respective Entities, encompassing more than 25,000 employees.

Within the GIO entity, Operational Technology in the Americas Hub enables efficient management and control of primary industrial sites by supporting reliable and continued data flow from / to the sites and securing remote access for the Operations Command Center (OCC) and hundreds of users to the sites. industrial remote access security, industrial onsite firewall, and industrial security monitoring. Within the Operational Technology Security, the mission of the Industrial Network Security Engineer is to maintain a high level of expertise and performance/availability on security solutions for OCC system management and industrial remote system management.

These solutions are primarily based upon Palo Alto firewalls, HP/Aruba switches, Beyond Trust/Bomgar PRA. The Industrial Network Security Engineer will act as Level 3 for supporting incident/problems processes. The geographical focus of this role is the Americas Hub however with the ability to foster collaboration with Global Operational Technology teams across the Companies Hubs in order to promote convergence and improvement of standards, processes and best practices.

This position will report to the Operational Technology Director in the Company.

• Innovation Management and Service strategy contribution
• Have the knowledge of the different technical components of the solutions (from hardware to software)
• Set-up & follow the action plan to close & anticipate vulnerabilities
• Understand and document the technical requirements for new services or service enhancements
• Advise on technology decisions & provide service implementation guidelines
• Review & provide input on proposals from an architectural perspective, including feasibility, technical viability
• Contribute to realize technical implementation relevant to support the strategy of OT and:
• Roadmap Solution design and implementation
• Assist in designing the overall solution
• Ensure that required capabilities for service development are supported
• Lead effort to implement the solution across the different projects
• Lead effort to test, debug, performance analyze and document components around the domain of expertise
• Write technical documentation and procedures
• Operations and delivery
• Administration/management and monitoring of the platforms, conducting daily technical administrative work to ensure the availability, stability and security of the platforms
• Support major Operational Technology projects
• Create procedures/scripts on system implementation and backups
• Monitoring logs and alerts of various sites, create automatic reports
• Specify/evaluate system/server requirements
• Adhere to Company ITIL change management process
• L3 Support and problem management
• L3 Troubleshoot, root cause analysis on the major incidents/problems
  
  Coordinate problem resolution between teams inside and outside of the OT team
• Produces and maintains operational procedures
• Contribute to the problem management and Continuous Improvement processes around the specific platforms. This does include strong contributions with knowledge management
• Overtime may be required to meet project deadlines or to work on Critical Incidents

• Bachelors degree in Computer Science or IT security or other relevant area (or equivalent experience)
• CISSP, GRID, GICSP, or similar certifications are a plus

• 5 to 9 years of experience with at least 3 with network security and 2 with Palo Alto firewalls is a "must have"
• Knowledge and know-how specific to the position
• Knowledge on architecture/design/implementation/support of Palo Alto firewalls, HP/Aruba switches, Solarwinds, Bomgar/SIRA, DNS, SMTP, Splunk, Active Directory
• Proven experience including hands-on capacity for troubleshoot and monitor with Palo Alto firewalls, HP/Aruba switches, Bomgar/SIRA, DNS, SMTP ("must have")
• Understanding of the generated logs and security architectures
• Good knowledge of standard protocols (SMTP, LDAP, Kerberos, SNMP ...)
• Good knowledge of Windows / Linux architectures
• Knowledge of AWS security and/or industrial IT security would be a plus
• Familiarity with fundamental networking/distributed computing environment concepts; ability to configure file…