Job Title: Industrial Network Security Engineer
Contract through Dec 2025 with possible extension
Location: Houston, TX
Travel Required: No
Job Summary:
The Global Infrastructure & Operation Department (GIO) was created to enable high speed execution of the Groups IT transformation projects and to run global services.
GIO is part of the company IT legal entity. It delivers infrastructure services to our BIS (Business
Information System) customers world wide.
The Americas Hub team within GIO is responsible for ensuring the delivery of all GIO services to its customers across all the Americas (through the 3 Clusters : North America and Latin America and other biz unit) and their respective Entities, encompassing more than 25,000 employees.
Within the GIO entity, Operational Technology in the Americas Hub enables efficient management and
control of primary industrial sites by supporting reliable and continued data flow from / to the sites
and securing remote access for the Operations Command Center (OCC) and hundreds of users to the sites.
Services include OCC support, OCC system management, industrial remote system management,
industrial remote access security, industrial onsite firewall, and industrial security monitoring.
Within the Operational Technology Security, the mission of the Industrial Network Security Engineer is to maintain a high level of expertise and performance/availability on security solutions for OCC system management and industrial remote system management. These solutions are primarily based upon Palo Alto firewalls, HP/Aruba switches, BeyondTrust/Bomgar PRA.
The Industrial Network Security Engineer will act as Level 3 for supporting incident/problems processes.
The geographical focus of this role is the Americas Hub however with the ability to foster collaboration with Global Operational Technology teams across the Companies Hubs in order to promote convergence and improvement of standards, processes and best practices.
This position will report to the Operational Technology Director in the Company.
Responsibilities
• Innovation Management and Service strategy contribution
• Have the knowledge of the different technical components of the solutions (from hardware to
• software)
• Set-up & follow the action plan to close & anticipate vulnerabilities
• Understand and document the technical requirements for new services or service enhancements
• Advise on technology decisions & provide service implementation guidelines
• Review & provide input on proposals from an architectural perspective, including feasibility,
• technical viability
• Contribute to realize technical implementation relevant to support the strategy of OT and:
• Roadmap Solution design and implementation
• Assist in designing the overall solution
• Ensure that required capabilities for service development are supported
• Lead effort to implement the solution across the different projects
• Lead effort to test, debug, performance analyze and document components around the domain
• of expertise
• Write technical documentation and procedures
• Operations and delivery
• Administration/management and monitoring of the platforms, conducting daily technical
• administrative work to ensure the availability, stability and security of the platforms
• Support major Operational Technology projects
• Create procedures/scripts on system implementation and backups
• Monitoring logs and alerts of various sites, create automatic reports
• Specify/evaluate system/server requirements
• Adhere to Company ITIL change management process
• L3 Support and problem management
• L3 Troubleshoot, root cause analysis on the major incidents/problems
• Coordinate problem resolution between teams inside and outside of the OT team
• Produces and maintains operational procedures
• Contribute to the problem management and Continuous Improvement processes around the
• specific platforms. This does include strong contributions with knowledge management
• (procedures, knowledge articles, etc, .)
• Overtime may be required to meet project deadlines or to work on Critical Incidents
Education Requirements
• Bachelors degree in Computer Science or IT security or other relevant area (or equivalent
• experience)
• CISSP, GRID, GICSP, or similar certifications are a plus
General Requirements
• 5 to 9 years of experience with at least 3 with network security and 2 with Palo Alto firewalls is a "must have"
• Knowledge and know-how specific to the position
• Knowledge on architecture/design/implementation/support of Palo Alto firewalls, HP/Aruba
• switches, Solarwinds, Bomgar/SIRA, DNS, SMTP, Splunk, Active Directory
• Proven experience including hands-on capacity for troubleshoot and monitor with Palo Alto
• firewalls, HP/Aruba switches, Bomgar/SIRA, DNS, SMTP ("must have")
• Understanding of the generated logs and security architectures
• Good knowledge of standard protocols (SMTP, LDAP, Kerberos, SNMP ...)
• Good knowledge of Windows / Linux architectures
• Knowledge of AWS security and/or industrial IT security would be a plus
• Familiarity with fundamental networking/distributed computing environment concepts; ability to
• configure file sharing (NFS/SAMBA or Windows); ability to query DNS records.
• Strong Knowledge of Network Design/Implementation.
• Familiar with principles, practice of system configuration management
• Ability to troubleshoot and support technical issues both remotely and on-site using standard
• tools and techniques (wireshark, nmap, powershell, event logs, netstat, ping, putty, )
• Understanding authentication/authorization processes in use at the site, local and network
• resources and resource sharing
• Ability to design architecture and document procedures
• Good understanding of service management tools for event management, provisioning, and
• monitoring
• Experience with ITSM tool with a preference for Service Now
• Fluency in English is mandatory in a multicultural environment. French or Spanish is a Plus
Critical competencies
• Able to think creatively & exploit opportunities
• A demonstrated ability in successful problem-solving and management of multiple
• tasks/priorities. Ability to effectively manage a crisis situation (technical problem)
• Strong interpersonal and communication skills
• Listening and dialogue to understand needs and problems encountered by users, ability to act as
• a vendor liaison, make presentations to customers or client audiences
• Highly efficient written skills (documenting standards, process and procedure guides, runbooks,
• ability to write purchase justifications, etc, )
Strong Organizational Skills and Standardization
• Technical transition & documentation skills. Qualitative and quantitative analytical skills with
• ability to collect and correlate information and data
• Strong ability to learn; follow instructions well
• Strong ability to work alone (Independent problem-solving, self-direction, autonomy and
• organization in order to better manage its perimeter) as well as on a team