Principal Network Engineer

Include, but are not limited to, the following:

• Install and configure switching, routing, wireless, and network security solutions, including firewalls and Secure Access Service Edge platforms.

• Collaborate with Network Operations to ensure a seamless transition from build to run, delivering a reliable, secure, and consistent client experience.

• Maintain detailed network documentation to support operational handoff, explain the environment to other engineering groups, and meet GxP requirements.

• Support network technologies from proof of concept to build & delivery.

• Identify network trends and opportunities to improve business performance and recommend ways to align engineering strategy with efficient operations.

• Identify opportunities to automate network infrastructure and system administration.

• Communicate effectively across concurrent deployments, providing details to project teams and clear status updates to management.

• Collaborate with other members of Network Engineering and Operations, the Digital & Technology organization, as well as members of the larger business.

This position will primarily be supporting the OT (Operational Technology) Segmentation project occurring at the Rensselaer site. This is a collaboration between Corp and IOPS IT. Strong experience in segmentation and Palo Alto firewall security policies is required as well as familiarity with the Purdue model/ISA-95 framework used in manufacturing facilities for network security and segmentation., * Proven track record of developing, deploying, and delivering secure, optimized network solutions.

• Strong end-to-end knowledge of:

• Routing and switching protocols (BGP and EIGRP).

• Wide area networking and remote access solutions, including SD-WAN.

• Cisco routers and switches.

• Cisco wireless networking.

• Palo Alto firewalls and cloud-based security solutions.

• Zscaler Internet Access and Zscaler Private Access.

• The TCP/IP suite and other common IP protocols (HTTPS, FTP, etc.)

• Core network services, including DNS, DHCP, NTP, Syslog, etc.

• Strong end-to-end knowledge with OT/lab/manufacturing networks.

• Foundational knowledge of core GxP (Good “X” Practice) guidelines and compliance.

• Foundational knowledge of cloud networking, load-balancing, and Network Admission Control technologies.

• Familiarity with network and security monitoring and management tools, such as Splunk, LogicMonitor, and Cisco Catalyst Center.

• Strong organizational and time-management skills, with the ability to manage workload and meet deadlines.

• Experience with general office equipment and software packages.

Education

• BA/BS in Computer Science, Management Information Systems, a related technical field, or equivalent practical experience.

Experience

• 8+ years of experience with network implementation and operations in a 24x7 global network.

• Experience with capacity planning, infrastructure scaling, and network architecture.

• Experience operating in a Plan/Build/Run environment, utilizing a Managed Services Provider and following the ITIL v3 model.

• Excellent written and verbal communication skills, including network/security documentation, with the ability to interact effectively with stakeholders from application developers to the CIO, and build effective relationships internally and externally.

• Experience with regulatory compliance controls (GxP / 21 CFR Part 11) preferred., While performing this job, the employee is regularly required to use hands to manipulate objects or controls, reach with hands and arms, stand, walk, crouch, talk, see, and hear. Must be able to lift or move up to 50 pounds to transport computers and peripheral equipment.