Job description

Your Job As the Security Platform Engineer, you will engineer, operate, automate, and continuously improve the network security platforms that protect Georgia-Pacific's IT and OT environments, starting with the enterprise firewall platform across more than 150 locations. You will translate security standards into practical, well-governed policy and own the platform lifecycle, from request intake and change control through upgrades, monitoring, and support. This role will partner with Cyber Operations, Infrastructure & Site Reliability, Process Control, Koch shared services, and vendors to deliver secure connectivity and approved projects from design through go-live. You will also apply automation and data to reduce manual effort, rule sprawl, and operational risk while sustaining the reliability our manufacturing operations depend on. This role will be based in our Atlanta GP HQ or our Wichita Koch HQ with an expectation of three (3) days in the office per week. Our Team The Cyber Security team within Georgia-Pacific is focused on managing risk across IT and OT environments by setting security standards and building the platforms, processes, and automation that put them into practice. Our goal is to provide valuable insights and dependable capabilities to business partners, enabling profitable, risk-based cyber security decisions. The team works collaboratively with Cyber Operations, Infrastructure & Site Reliability, Process Control and operations teams, Koch and shared-service partners, and third-party providers to protect critical systems, simplify how secure connectivity is requested and delivered, and drive sustainable operational outcomes. What You Will Do • Engineer, operate, and continuously improve Georgia-Pacific's network security platforms, starting with next-generation firewalls protecting business, DMZ, and process control (OT) networks across more than 150 locations • Own the platform lifecycle, including centralized policy management, disciplined change control tied to approved requests, health monitoring, and planned upgrade cycles that keep the fleet current, supported, and secure • Design and drive adoption of global, standards-based security policies that translate security standards into practical rules, align stakeholders, and reduce rule sprawl • Improve and automate the request intake and fulfillment experience, automating routine changes while providing an effective path for complex changes, incidents, and monitoring alerts • Partner with Cyber Operations, Infrastructure & Site Reliability, Process Control, approvers, and vendors to define clear roles and responsibilities, communicate cross-site changes, and deliver approved projects through go-live and cutover • Support adjacent security platforms such as OT network monitoring and privileged remote access, maintain supporting lab environments, and provide cyber review of vendor remote-access and OT connectivity requests Who You Are (Basic Qualifications) • Hands-on experience engineering, operating, or administering enterprise network security platforms such as next-generation firewalls • Experience with networking fundamentals, including TCP/IP, routing, and network segmentation • Experience working within change control and IT service management processes to deliver changes safely, predictably, and with clear documentation • Experience using scripting or automation to reduce manual effort and improve consistency and quality • Experience translating security standards and business needs into practical, maintainable policy • Must have legal authorization to work permanently in the United States for any employer without requiring a visa transfer or visa sponsorship What Will Put You Ahead • Experience with Fortinet platforms such as FortiGate and FortiManager, including fleet-wide policy management and firmware upgrades, or Fortinet NSE certification • Experience with Palo Alto Networks firewalls or firewall policy management tools such as FireMon • Experience in OT/ICS network security, including the Purdue model, ISA/IEC 62443, and OT monitoring platforms • Experience automating network and security operations • Experience with privileged remote access solutions such as BeyondTrust • Relevant industry certifications such as CCNP Security or GICSP, or sustained professional development in network or IT/OT security At Koch companies, we are entrepreneurs. This means we openly challenge the status quo, find new ways to create value and get rewarded for our individual contributions. Any compensation range provided for a role is an estimate determined by available market data. The actual amount may be higher or lower than the range provided considering each candidate's knowledge, skills, abilities, and geographic location. If you have questions, please speak to your recruiter about the flexibility and detail of our compensation philosophy. Hiring Philosophy All Koch companies value diversity of thought, perspectives, aptitudes, experiences, and backgrounds. We are Military Ready and Second Chance employers. Who We Are As a Koch company and a leading manufacturer of bath tissue, paper towels, paper-based packaging, cellulose, specialty fibers, building products and much more, Georgia-Pacific works to meet evolving needs of customers worldwide with quality products. In addition to the products we make, we operate one of the largest recycling businesses. Our more than 30,000 employees in over 150 locations are empowered to innovate every day – to make everyday products even better. At Koch, employees are empowered to do what they do best to make life better. Learn how our business philosophy helps employees unleash their potential while creating value for themselves and the company. Our Benefits Our goal is for each employee, and their families, to live fulfilling and healthy lives. We provide essential resources and support to build and maintain physical, financial, and emotional strength - focusing on overall wellbeing so you can focus on what matters most. Our benefits plan includes - medical, dental, vision, flexible spending and health savings accounts, life insurance, ADD, disability, retirement, paid vacation/time off, educational assistance, and may also include infertility assistance, paid parental leave and adoption assistance. Specific eligibility criteria is set by the applicable Summary Plan Description, policy or guideline and benefits may vary by geographic region. If you have questions on what benefits apply to you, please speak to your recruiter. Additionally, everyone has individual work and personal needs. We seek to enable the best work environment that helps you and the business work together to produce superior results. Equal Opportunity Employer Equal Opportunity Employer, including disability and protected veteran status. Except where prohibited by state law, some offers of employment are conditioned upon successfully passing a drug test. This employer uses E-Verify. Please click here for additional information. (For Illinois E-Verify information click here, aquí, or tu). #LI-GM1 #LI-Onsite

Requirements

Must-haves

Engineer, operate, and continuously improve Georgia-Pacific's network security platforms, starting with next-generation firewalls protecting business, DMZ, and process control (OT) networks across more than 150 locations
Own the platform lifecycle, including centralized policy management, disciplined change control tied to approved requests, health monitoring, and planned upgrade cycles that keep the fleet current, supported, and secure
Design and drive adoption of global, standards-based security policies that translate security standards into practical rules, align stakeholders, and reduce rule sprawl
Improve and automate the request intake and fulfillment experience, automating routine changes while providing an effective path for complex changes, incidents, and monitoring alerts
Support adjacent security platforms such as OT network monitoring and privileged remote access, maintain supporting lab environments, and provide cyber review of vendor remote-access and OT connectivity requests
Who You Are (Basic Qualifications)
Hands-on experience engineering, operating, or administering enterprise network security platforms such as next-generation firewalls
Experience with networking fundamentals, including TCP/IP, routing, and network segmentation
Experience working within change control and IT service management processes to deliver changes safely, predictably, and with clear documentation
Experience using scripting or automation to reduce manual effort and improve consistency and quality
Experience translating security standards and business needs into practical, maintainable policy
Must have legal authorization to work permanently in the United States for any employer without requiring a visa transfer or visa sponsorship
What Will Put You Ahead
Experience with Fortinet platforms such as FortiGate and FortiManager, including fleet-wide policy management and firmware upgrades, or Fortinet NSE certification
Experience with Palo Alto Networks firewalls or firewall policy management tools such as FireMon
Experience in OT/ICS network security, including the Purdue model, ISA/IEC 62443, and OT monitoring platforms
Experience automating network and security operations
Experience with privileged remote access solutions such as BeyondTrust
Relevant industry certifications such as CCNP Security or GICSP, or sustained professional development in network or IT/OT security
Hiring Philosophy
All Koch companies value diversity of thought, perspectives, aptitudes, experiences, and backgrounds. We are Military Ready and Second Chance employers.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: avature
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

Parental Leave

Professional Development