Cybersecurity Engineer II

Cybersecurity Engineer II•Romeoville, IL

2d•Onsite

About The Position

The Cybersecurity Engineer II independently owns, improves, and delivers security technologies across G&W Electric's global enterprise and manufacturing environments. The role develops technical designs and standards, leads complex changes and troubleshooting, and manages the operational lifecycle of assigned network, secure-access, identity, and privileged-access capabilities. Working under the direction of the Cybersecurity Lead, the Cybersecurity Engineer II translates architecture, risk, and compliance requirements into scalable, supportable technical solutions. The position serves as an experienced individual contributor and subject matter expert.

Requirements

3+ years of professional experience in network engineering, systems administration, cybersecurity engineering, or a related technical discipline.
Strong working knowledge of TCP/IP, VLANs, subnetting, routing, switching, DNS, virtual private networks, and network-security architecture.
Hands-on experience configuring and troubleshooting enterprise firewalls, secure remote-access solutions, or secure access service edge technologies.
Experience implementing identity, authentication, privileged-access, or directory-service security controls in enterprise environments.
Experience leading technical changes through design, testing, implementation, validation, documentation, and operational handoff.
Strong troubleshooting skills and the ability to isolate complex issues spanning networks, identity systems, endpoints, and third-party services.
Strong written and verbal communication skills, including the ability to present technical options, risks, and recommendations.
Ability to independently own platforms or technical workstreams while collaborating effectively across a global organization.

Nice To Haves

Advanced experience with enterprise firewall, network-security, segmentation, secure remote-access, or secure access service edge technologies.
Experience with privileged access management, identity and access management, or directory-service technologies.
Experience securing manufacturing, industrial, or operational technology environments using segmentation, controlled remote access, and Purdue Model concepts.
Working knowledge of NIST CSF, NIST 800-171, CMMC, ISO 27001, IEC 62443, or related technical-control requirements.
Bachelor�s degree in cybersecurity, information technology, computer science, or a related field, or equivalent practical experience.
Certification such as CCNA, Security+, ISC2 SSCP, a relevant network-security platform certification, or equivalent.

Responsibilities

Own administration, lifecycle planning, and continuous improvement for assigned network-security, segmentation, virtual private network, and secure remote-access capabilities.
Design and implement secure connectivity and access-policy solutions, including secure access service edge capabilities, aligned with approved architecture and business requirements.
Lead implementation and improvement of privileged access management and identity security controls, including account tiering, least privilege, multifactor authentication, and credential governance.
Develop detailed technical designs, configuration standards, implementation plans, test plans, and rollback procedures aligned with approved security architecture.
Lead troubleshooting of complex network, remote-access, authentication, and security-platform issues across vendors, infrastructure teams, and global sites.
Plan and execute platform deployments, upgrades, migrations, and high-impact configuration changes through established change-management processes.
Assess technical control effectiveness, identify design or configuration gaps, recommend improvements, and coordinate remediation through completion.
Maintain authoritative diagrams, standards, runbooks, configuration records, and engineering documentation for assigned platforms and integrations.
Lead defined technical workstreams, manage dependencies, communicate risks, and provide implementation status to the Cybersecurity Lead.
Share expertise, perform peer reviews, and provide technical escalation support to colleagues and infrastructure partners without assigning work or managing performance.