Cybersecurity Network Engineer

Graham Inc.
Lancaster, PA, United States
2 months ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
4 years minimum
Compensation
$128,400.0 - $192,600.0
Working hours
Regular working hours
Job source

Tech stack

Microsoft Windows Active Directory Microsoft Azure Cyber Security Dynamic Host Configuration Protocol Network Address Translation Distributed Systems Domain Name System (DNS) Networking Hardware IP Addressing Virtual Private Networks (VPN) Network Security
+21 more
Linux System Administration Network Monitoring Routing Network Segmentation Network Service Zero Trust Network Access Security Information and Event Management TCP/IP Virtual Local Area Networks Software Vulnerability Management Computer Networking Systems Cloud Platform System Cyber Threat Analysis HybridCloud Firewalls (Computer Science) Information Technology Process Control Systems Operational Systems Fortinet Firewall Services Module Cisco

Job description

of the Graham family. Blue is how we feel about what we do-together-to create a better tomorrow. Working at Graham means you lead constructively with clear goals, use diverse thinking to drive excellence, accountability, innovation, as well as demonstrating collaboration, embracing learning, and taking action for continuous improvement and growth. Overview: The Cybersecurity Network Engineer is a key technical role responsible for the design, implementation, and ongoing support of secure network infrastructure across enterprise and manufacturing environments. This position combines deep networking expertise with hands-on cybersecurity engineering, ensuring the reliability, performance, and protection of critical IT and operational technology (OT) systems. The ideal candidate is an experienced engineer with strong knowledge of Cisco and Fortinet platforms, hybrid cloud (Microsoft Azure), and core infrastructure services including DHCP, DNS, and Active Directory, with a proven ability to design and secure distributed environments in a manufacturing context. Responsibilities: Key Responsibilities Network & Security Architecture

  • Design, implement, and maintain secure enterprise network architectures across corporate, plant, and cloud environments
  • Architect and configure firewall solutions (Fortinet, Cisco) including segmentation, VPNs, and zero-trust principles
  • Develop secure network designs supporting manufacturing operations and industrial control systems (ICS/OT)

Infrastructure & Core Services

  • Engineer and support core network services including: *

  • DHCP, DNS, IP addressing strategies
  • Active Directory and identity-integrated network services
  • Azure networking (VNets, NSGs, connectivity patterns)
  • Integrate on-premises and cloud environments with secure hybrid connectivity

Operational Support & Engineering

  • Deploy, configure, and support network hardware and security systems with minimal disruption to business operations
  • Monitor network and security events; respond to alerts and drive root cause resolution
  • Partner with cybersecurity teams to support incident response activities

Firewall & Security Engineering

  • Configure and maintain firewall policies, routing, NAT, and access control frameworks
  • Perform regular firewall rule reviews, optimization, and compliance alignment
  • Support vulnerability remediation through network and configuration changes

Manufacturing & OT Security

  • Support network segmentation strategies between IT and OT environments
  • Design secure connectivity for plant systems, ensuring availability and resilience of manufacturing operations
  • Collaborate with OT, engineering, and plant teams to align security controls with operational requirements

Standards, Documentation & Continuous Improvement

  • Develop and maintain network and security architecture documentation
  • Apply standardized configurations and best practices across all deployments
  • Stay current on cybersecurity threats, vulnerabilities, and emerging technologies

Requirements

  • Bachelor’s degree in Information Technology, Computer Science, or related field (or equivalent experience)
  • 4-8 years of experience in network engineering and cybersecurity
  • Strong hands-on experience with: *

  • Cisco networking (routing, switching, wireless)
  • Fortinet firewall platforms (design & configuration)
  • Microsoft Azure networking
  • Deep understanding of: *

  • TCP/IP, routing protocols, VLANs, VPNs
  • DNS, DHCP, Active Directory integration
  • Experience with Windows and Linux environments in enterprise settings

Preferred Qualifications

  • Experience supporting manufacturing or industrial environments (OT/ICS exposure)
  • Knowledge of network segmentation and zero trust architecture
  • Familiarity with cybersecurity frameworks (NIST, ISO 27001) aligned to enterprise programs
  • Certifications preferred: *

  • Cisco (CCNA / CCNP)
  • Fortinet (NSE)
  • Microsoft Azure (AZ-700 or similar)

Key Competencies

  • Strong problem-solving and troubleshooting skills
  • Ability to design scalable, secure network architecture
  • Strong collaboration with infrastructure, security, and operations teams
  • Clear communication with both technical and non-technical stakeholders

Benefits & conditions

Pulled from the full job description

  • 401(k)
  • Paid time off
  • Vision insurance
  • Dental insurance
  • Life insurance
  • Wellness program, The standard compensation for this role is $128,400 - $192,600. Salary offers will be determined based on final candidate qualifications, experience, skillset, and other relevant factors. Compensation Statement: The expected salary range for the position described in this posting is made in accordance with the legal mandates of certain jurisdictions within the United States. The final agreed-upon compensation is based on individual qualifications and experience. Benefits Statement: Benefits include medical, dental, vision and basic life insurance. Employees are able to enroll in the company’s 401K Employee Saving Plan and may participate in its Employee Wellness Program. Employees will also receive paid time off in accordance with company policy and state law requirements. EEO Disclaimer: Graham Packaging is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, sex (including pregnancy), sexual orientation, religion, creed, age, national origin, physical or mental disability, gender identity and/or expression, marital status, veteran status or other characteristics protected by law.

About the company

Company Statement: Graham Packaging is a people, planet and values-based company and a leader in sustainable packaging manufacturing. From the kitchen to the laundry room, Graham Packaging is part of your everyday life. For employees at Graham, our Blue Culture is part of their everyday lives, too. In other words, Blue is how we do things here. At Graham, we are united by a clear vision. We know our part and help those around us know theirs, encouraging one another to continuously improve. We create a safe, challenging environment to innovate by supporting creative ideas and new ways of thinking. We take the initiative to cultivate our individual growth and help others do the same, while keeping ourselves and one another accountable. And we actively promote cooperation, collaboration, integrity and respect across regions and teams to foster an engaged, diverse and connected workforce. We value our employees, and a Blue Culture allows for the most rewarding employee experience as part

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

5:02 min

Mapping distributed compute paradigms to modern vehicles

Joachim Werner · LIVE

1:29 min

Expanding practical knowledge with community sandboxes and resources

Stuart Clark · LIVE

2:04 min

Enhancing network privacy with routing fees and onion routing

Andreas M Antonopoulos · LIVE

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

3:45 min

Prototyping deterministic agents with n8n and PyATS

Alfonso Sandoval Rosas Alfonso Sandoval Rosas · Europe 2026 Virtual

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

Videos

See all

Related articles

See all