> Markdown version of [/jobs/ext/3322597-principal-network-engineer-ot-network-segmentation-palo-alto-firewall](https://www.wearedevelopers.com/jobs/ext/3322597-principal-network-engineer-ot-network-segmentation-palo-alto-firewall). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Network Engineer - OT Network Segmentation / Palo Alto Firewall - **Company:** Insikt - **Location:** Rensselaer, NY, United States - **Experience:** Expert - **Salary:** $135,200.0 - $145,600.0 - **Contract:** Temporary to permanent - **Skills:** Microsoft Access, Border Gateway Protocol, Cisco Routers, Cloud Computing, Dynamic Host Configuration Protocol, Domain Name System (DNS), Enhanced Interior Gateway Routing Protocol, IT Management, Network Security, Network Architecture, Routing, Network Segmentation, Network Service, Network Protocols, Syslog, TCP/IP, Wide Area Networks, Wireless Networks, Load Balancing, Computer Network Operations, Firewalls (Computer Science), Information Technology, Palo Alto Networks, Operational Systems, Splunk, Cisco Switches, GXP, Cisco - **Published:** September 8, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=0edfea50b5992ab4 ## About the Role * 8+ years of network engineering experience supporting complex, highly available, 24x7 enterprise environments. * Strong hands-on experience with OT, industrial, laboratory, or manufacturing networks. * Demonstrated experience designing or implementing network segmentation. * Strong hands-on experience with Palo Alto firewalls, including security policies and firewall rule management. * Working knowledge of the Purdue Model and/or ISA-95 framework. * Strong understanding of enterprise routing and switching technologies. * Strong experience with: * BGP * EIGRP * Cisco routers and switches * Cisco wireless networking * WAN and SD-WAN * Palo Alto Networks firewalls * Zscaler Internet Access (ZIA) * Zscaler Private Access (ZPA) * TCP/IP * DNS * DHCP * NTP * Syslog * Common IP protocols and network services * Experience with network capacity planning and infrastructure scaling. * Experience contributing to network architecture and infrastructure design. * Strong troubleshooting and root cause analysis skills. * Strong network and security documentation skills. * Excellent written and verbal communication skills. * Ability to work effectively with engineering teams, operations teams, project teams, leadership, and business stakeholders. Preferred Qualifications * Experience within pharmaceutical, biotechnology, life sciences, or another regulated manufacturing environment. * Knowledge of GxP and 21 CFR Part 11 requirements. * Experience with OT cybersecurity and manufacturing network security. * Experience working within Plan / Build / Run operating models. * Experience partnering with Managed Services Providers (MSPs). * Experience with cloud networking technologies. * Familiarity with load balancing technologies. * Familiarity with Network Admission Control (NAC) technologies. * Experience with: * Splunk * LogicMonitor * Cisco Catalyst Center * Bachelor's degree in Computer Science, Management Information Systems, Engineering, or another technical discipline, or equivalent practical experience. Ideal Candidate We are particularly interested in candidates who have worked directly in OT or manufacturing environments and understand the security and operational complexities involved in separating manufacturing systems from traditional enterprise IT networks. The strongest candidates will have hands-on experience with: * Palo Alto firewall security policies * OT / manufacturing networks * Network segmentation * Purdue Model / ISA-95 * Cisco routing and switching * Regulated or pharmaceutical manufacturing environments ## Description This is a highly technical, hands-on role focused on designing, implementing, securing, and supporting network segmentation across manufacturing and enterprise environments. The ideal candidate will have deep experience with Palo Alto firewalls, firewall security policies, OT/manufacturing networks, network segmentation, and the Purdue Model / ISA-95 framework. In addition to the OT segmentation initiative, this role will support broader enterprise networking technologies including LAN, WAN, wireless, SD-WAN, SASE, routing, switching, network security, and secure access technologies., * Support the architecture, design, and implementation of OT network segmentation within a pharmaceutical manufacturing environment. * Configure, manage, and troubleshoot Palo Alto firewalls and firewall security policies. * Apply Purdue Model / ISA-95 principles to OT and manufacturing network architecture. * Design and implement secure network zones, segmentation strategies, and access controls between enterprise IT and operational technology environments. * Install, configure, test, troubleshoot, and support: * Cisco routers and switches * Cisco wireless technologies * LAN and WAN infrastructure * SD-WAN * Palo Alto firewalls * Secure Access Service Edge (SASE) technologies * Zscaler Internet Access (ZIA) * Zscaler Private Access (ZPA) * Support networking technologies throughout the lifecycle from proof of concept through design, build, deployment, and operational handoff. * Partner with Network Operations teams to ensure a smooth transition from project implementation into production support. * Maintain detailed network architecture, configuration, security, and operational documentation. * Ensure network documentation and implementation practices support GxP and regulated manufacturing requirements. * Identify network risks, dependencies, performance trends, and opportunities to improve security, reliability, scalability, and resiliency. * Support network capacity planning, infrastructure scaling, and future-state network architecture. * Troubleshoot complex routing, switching, firewall, connectivity, and network performance issues. * Identify opportunities to automate network infrastructure deployment, configuration, monitoring, and administration. * Provide clear status updates across multiple concurrent initiatives and deployments. * Collaborate with Network Engineering, Network Operations, Digital & Technology teams, manufacturing IT, project teams, vendors, managed service providers, and business stakeholders. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)