Cybersecurity Engineer II
The Cybersecurity Engineer II independently owns, improves, and delivers security technologies across G&W Electric's global enterprise and manufacturing environments. The role develops technical designs and standards, leads complex changes and troubleshooting, and manages the operational lifecycle of assigned network, secure-access, identity, and privileged-access capabilities.
Working under the direction of the Cybersecurity Lead, the Cybersecurity Engineer II translates architecture, risk, and compliance requirements into scalable, supportable technical solutions. The position serves as an experienced individual contributor and subject matter expert.
As an Cybersecurity Engineer II you will:
• Own administration, lifecycle planning, and continuous improvement for assigned network-security, segmentation, virtual private network, and secure remote-access capabilities.
• Design and implement secure connectivity and access-policy solutions, including secure access service edge capabilities, aligned with approved architecture and business requirements.
• Lead implementation and improvement of privileged access management and identity security controls, including account tiering, least privilege, multifactor authentication, and credential governance.
• Develop detailed technical designs, configuration standards, implementation plans, test plans, and rollback procedures aligned with approved security architecture.
• Lead troubleshooting of complex network, remote-access, authentication, and security-platform issues across vendors, infrastructure teams, and global sites.
• Plan and execute platform deployments, upgrades, migrations, and high-impact configuration changes through established change-management processes.
• Assess technical control effectiveness, identify design or configuration gaps, recommend improvements, and coordinate remediation through completion.
• Maintain authoritative diagrams, standards, runbooks, configuration records, and engineering documentation for assigned platforms and integrations.
• Lead defined technical workstreams, manage dependencies, communicate risks, and provide implementation status to the Cybersecurity Lead.
• Share expertise, perform peer reviews, and provide technical escalation support to colleagues and infrastructure partners without assigning work or managing performance.
We are looking for someone who:
• Has 3+ years of professional experience in network engineering, systems administration, cybersecurity engineering, or a related technical discipline.
• Possesses a strong working knowledge of TCP/IP, VLANs, subnetting, routing, switching, DNS, virtual private networks, and network-security architecture.
• Has hands-on experience configuring and troubleshooting enterprise firewalls, secure remote-access solutions, or secure access service edge technologies.
• Has experience implementing identity, authentication, privileged-access, or directory-service security controls in enterprise environments.
• Has experience leading technical changes through design, testing, implementation, validation, documentation, and operational handoff.
• Possesses strong troubleshooting skills and the ability to isolate complex issues spanning networks, identity systems, endpoints, and third-party services.
• Possesses strong written and verbal communication skills, including the ability to present technical options, risks, and recommendations.
• Has the ability to independently own platforms or technical workstreams while collaborating effectively across a global organization.
Ideally you will also have:
• Advanced experience with enterprise firewall, network-security, segmentation, secure remote-access, or secure access service edge technologies.
• Experience with privileged access management, identity and access management, or directory-service technologies.
• Experience securing manufacturing, industrial, or operational technology environments using segmentation, controlled remote access, and Purdue Model concepts.
• Working knowledge of NIST CSF, NIST 800-171, CMMC, ISO 27001, IEC 62443, or related technical-control requirements.
• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent practical experience.
• Certification such as CCNA, Security+, ISC2 SSCP, a relevant network-security platform certification, or equivalent.
The Physical Demands / Working Conditions of the role are:
• General Office Environment, PC use, Light Lifting (occasional 25 lbs or less)
• Stooping
• Standing
Other:
Occasional after-hours work, change-window support, or travel may be required based on business and project needs.
What we offer you:
Typical pay is $85.963 – 111,783 annually.
Please note the pay information shown above is a general guideline. Pay is based upon candidate skills, experience, and qualifications.
This position is eligible for participation in our Quarterly Incentive Pay Program
G&W Electric offers a comprehensive benefits package that includes:
• Medical, Dental and Vision Insurance
• Short and Long-Term Disability
• Life Insurance
• Health club membership program and reimbursement
• Employee Assistance Program
• Tuition Reimbursement
• 401 (k)
• Annual Profit Sharing
• Vacation
• Air-conditioned/heated state-of-the-art manufacturing facility
About G&W Electric
Innovating since 1905, G&W Electric has grown into a global leader in engineered electrical power grid solutions. Working with us means joining a worldwide team of passionate manufacturing professionals striving to continually improve the technologies the world depends on to deliver safe, reliable electricity. Our culture is focused on employee success, so we foster an entrepreneurial environment that encourages everyone to thrive.
Learn more about our company by watching this video: youtube.com
G&W Electric enjoys a long reputation for product quality, innovation and world-class customer service to the power industry. We have established this reputation by believing that our greatest asset is our employees. We owe our success to the initiative and talents of highly skilled individuals within our team-based organization. Our goal is to set the standard for customer satisfaction by ensuring a superior level of service, performance and innovation. As a global organization and industry leader, we are committed to cultivating an engaging work environment that embraces our core values and develops our talent. Our continuous focus on growth and innovation means that you become part of a company that provides challenging opportunities, rewards excellence and combines your individual expertise to achieve a higher level of shared success. As part of our organization, you also help power the world!
G&W Electric is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. G&W Electric participates in the E-Verify process for all new hires.
*G&W Electric participates in the E-Verify process for all new hires.
VEVRAA Federal Contractor
Requirements
Must-haves
Cybersecurity Engineer II
Own administration, lifecycle planning, and continuous improvement for assigned network-security, segmentation, virtual private network, and secure remote-access capabilities.
Design and implement secure connectivity and access-policy solutions, including secure access service edge capabilities, aligned with approved architecture and business requirements.
Lead implementation and improvement of privileged access management and identity security controls, including account tiering, least privilege, multifactor authentication, and credential governance.
Develop detailed technical designs, configuration standards, implementation plans, test plans, and rollback procedures aligned with approved security architecture.
Lead troubleshooting of complex network, remote-access, authentication, and security-platform issues across vendors, infrastructure teams, and global sites.
Plan and execute platform deployments, upgrades, migrations, and high-impact configuration changes through established change-management processes.
Assess technical control effectiveness, identify design or configuration gaps, recommend improvements, and coordinate remediation through completion.
Maintain authoritative diagrams, standards, runbooks, configuration records, and engineering documentation for assigned platforms and integrations.
Lead defined technical workstreams, manage dependencies, communicate risks, and provide implementation status to the Cybersecurity Lead.
Share expertise, perform peer reviews, and provide technical escalation support to colleagues and infrastructure partners without assigning work or managing performance.
Has 3+ years of professional experience in network engineering, systems administration, cybersecurity engineering, or a related technical discipline.
Possesses a strong working knowledge of TCP/IP, VLANs, subnetting, routing, switching, DNS, virtual private networks, and network-security architecture.
Has hands-on experience configuring and troubleshooting enterprise firewalls, secure remote-access solutions, or secure access service edge technologies.
Has experience implementing identity, authentication, privileged-access, or directory-service security controls in enterprise environments.
Has experience leading technical changes through design, testing, implementation, validation, documentation, and operational handoff.
Possesses strong troubleshooting skills and the ability to isolate complex issues spanning networks, identity systems, endpoints, and third-party services.
Possesses strong written and verbal communication skills, including the ability to present technical options, risks, and recommendations.
Has the ability to independently own platforms or technical workstreams while collaborating effectively across a global organization.
Advanced experience with enterprise firewall, network-security, segmentation, secure remote-access, or secure access service edge technologies.
Experience with privileged access management, identity and access management, or directory-service technologies.
Experience securing manufacturing, industrial, or operational technology environments using segmentation, controlled remote access, and Purdue Model concepts.
Working knowledge of NIST CSF, NIST 800-171, CMMC, ISO 27001, IEC 62443, or related technical-control requirements.
Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent practical experience.
Nice-to-haves
None flagged.
Application prep
Use the role’s language and application details while tailoring your materials.