Network Security Engineer - Field & Cloud Infrastructure

Network Security Engineer- Field and Cloud Infrastructure

The Network Security Engineer- Field and Cloud Infrastructure will be responsible for understanding the company's existing field, network, and remote connectivity landscape, identifying potential security gaps, and helping design and implement practical solutions to improve the security, reliability, and maintainability of deployed systems.

This role requires a practical, operations-focused approach to network security. Most deployments are remote sites where uptime is critical, and ease of use is a top priority. The candidate must be able to identify security gaps while also understanding that improvements must be practical, deployable, supportable, and minimally disruptive to site operations.

Responsibilities include but are not limited to the following:

• Work closely with existing network, support, and engineering teams to evaluate current configurations, document risks, recommend improvements, and support implementation of security controls across field-hosted, cloud-connected, and enterprise network environments.
• Define realistic mitigation paths that balance security, usability, field deployment simplicity, customer needs, and maximum system availability.
• Develop containment strategies & recovery plans to minimize operational disruptions.
• Shadow field and support personnel on occasional field visits to understand the procedural, environmental, and operational constraints.
• Design secure industrial network architectures following Purdue Model principles.
• Participate and Support OT cybersecurity incident response and forensic investigations.
• Troubleshoot and resolve real-world issues using tools such as Python, PowerShell, Bash, Ansible, Terraform, or similar technologies.
• Identify risks and translate findings into actionable remediation plans
• Support risk assessments aligned with international (IEC 62443, ISO 27001, NIST CSF 2.0), regional (NOG-104, CIS), and internal standards.
• Identify creative methods to support customer requirements like data sovereignty while maintaining remote patching of international systems.
• Configure deployment and support technologies (Fortinet, Starlink, BeyondTrust) to maintain global standardization.
• Leverage centralized tools (NinjaOne, Zabbix, SentinelOne) and collaborate with Systems Engineers to quantify risks and track adoption of improvements.
• Contribute to cybersecurity documentation, SOPs, and standards
• Support workflow and ticketing integration using tools such as Jira
• Act as a bridge between cybersecurity and operational execution, translating security requirements into practical, scalable solutions

Required Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, network engineering, engineering, or a related technical field; equivalent experience may be considered.
• 5-10 years in cybersecurity, systems engineering, network engineering, or related roles
• Strong understanding of networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, NAT, VLANs, firewalls, VPNs, and remote access technologies.
• Experience deploying and maintaining vulnerability management, security monitoring, SIEM, centralized logging, configuration compliance, and alerting solutions within IT/OT environments to enhance security visibility, operational resilience, and risk reduction.
• Experience with local and remote support of industrial OT networks, firewall policy management, segmentation, secure remote access, and troubleshooting.
• Ability to evaluate technical environments, identify security gaps, and recommend practical remediation steps.
• Experience with cybersecurity risk assessments for industrial systems.
• Experience supporting products deployed in customer OT environments.
• Experience writing scripts or automation using tools such as Python, PowerShell, Bash, Ansible, Terraform, or similar technologies.
• Ability to communicate technical risks and recommendations clearly to both technical and non-technical stakeholders.
• Strong documentation skills, including network diagrams, configuration standards, implementation procedures, and technical notes.
• Ability to collaborate effectively with network, field support, cybersecurity, infrastructure, cloud, and application teams.
• Experience with standards or frameworks such as NIST CSF 2.0, CIS Controls, ISO 27001, IEC 62443, or other cybersecurity best practices.

Preferred Qualifications

• Experience supporting remote field networks, industrial environments, customer-connected systems, or distributed infrastructure.
• Experience supporting offshore, drilling, marine, energy, or critical infrastructure environments.
• Experience with cloud networking and security concepts in platforms such as Azure, AWS, or Google Cloud.
• Familiarity with zero trust concepts, identity-based access, certificate-based authentication, privileged access management, and least-privilege design.
• Relevant certifications such as CCNA, CCNP, Security+, CySA+, CISSP, GICSP, PCNSA, Fortinet NSE, or equivalent.
• Experience working with