Info Sec Engineer III

Entergy•The Woodlands, TX

1d•Hybrid

About The Position

This position assists in securing Entergy’s networks from internal and external threats across corporate Information Security (IS), Information Technology (IT), and Operational Technology (OT). The engineer will assist with the lifecycle management, expansion, and operational support of Network Access Control (NAC), Microsegmentation, and Certificate Management solutions across data centers, office buildings, and critical infrastructure. This role requires a high degree of attention to detail, strong troubleshooting capabilities, and the ability to build strong relationships with internal business partners and external vendors. The engineer will assist with the execution of processes, develop automation, and leverage analytical skills to create metrics and dashboards that maintain audit readiness for NRC Nuclear Cyber, NERC CIP, and Sarbanes-Oxley regulations.

Requirements

Associate or Bachelor’s degree strongly preferred in computer science, cyber security or a related discipline or equivalent work experience.
4+ years of demonstrated experience in network security administration including microsegmentation & macrosegmentation technologies, network access control, VPN solutions (client and site-to-site), PKI/certificate management, and enterprise security architecture.
Strong interpersonal skills with demonstrated ability to coordinate effectively between internal teams, external vendors, and cross-functional stakeholders.
Knowledge and experience deploying and managing cloud security infrastructure and segmentation technologies within cloud platforms like AWS, Azure, or Google Cloud.
Knowledge of cloud security, best practices, and industry standards.
Strong organizational and time management skills.
Experience working in an on-call team rotation.
Strong understanding of general networking and design, operating system platforms, security operations, cyber security monitoring, intrusion detection, secured networks and scripting languages.
Strong understanding of regulatory and compliance requirements; (SOX, NERC CIP, and NRC Nuclear Cyber (10 CFR 73.54)).
Understanding of security and attack frameworks such as Nation institute of Standards and Technologies (NIST) Cyber Security Framework (CSF), Cyber Kill Chain and MITRE ATT&CK.
Self-directed and with the ability to operate with significant discretion and manage multiple tasks simultaneously.
Excellent communication skills.
Strong problem-solving skills.
Available to travel (Up to 10%).
Authorization to work in the United States is a precondition to employment in this position. Entergy will not sponsor candidates for work visas for this position.

Nice To Haves

Technical or InfoSec certifications are a plus (e.g., CompTIA, ISACA, or ISC2).
Relevant vendor credentials or experience with the following is highly preferred: NAC: Cisco ISE, Aruba ClearPass, or ForeScout. Microsegmentation: Akamai Guardicore, Illumio, or Cisco Secure Workload. Macrosegmentation: Palo Alto, Fortinet, or Checkpoint Certificate Management: Venafi, AWS Certificate Manager, Microsoft CA, or Keyfactor.

Responsibilities

Support the engineering, deployment, and execution of day-to-day operations supporting design and policy decisions for network access control. This includes identity-based access policies, endpoint profiling rules, and posture assessment criteria, to secure wired, wireless, and VPN access across IT and OT environments.
Assist in policy and exception management initiatives.
Execute the rollout and management of both hardware and Software-Defined Microsegmentation tools. Focus on providing deep visibility and policy enforcement for East-West traffic within data centers and cloud environments, ensuring granular security that prevents lateral movement without disrupting critical services.
Administer and automate the lifecycle of digital certificates using enterprise certificate management platforms. Maintain Certificate Authorities (CA) and certificate validation infrastructures to ensure secure encryption across the enterprise.
Support the modernization of key operational processes through intelligent automation and AI-driven solutions. Design and implement automation platforms that reduce manual overhead, scale operations efficiently, and enable the team to accelerate delivery on security program goals. Proactively identify opportunities to automate workflows, enhance monitoring and decision-making, and strengthen organizational security and reliability—directly driving business impact and customer trust.
Provide input to the development and implementation of the strategy, roadmap, and project delivery for network security in coordination with the Security Architecture and Enterprise Architecture functions. Monitor network security trends for their area of support and suggest improvements to policy, procedures, tools and technologies to enhance the security of Entergy’s network.
Support continuous improvement processes, operational excellence and deliver world-class network security solutions for all corporate and operational technology needs, including business operations, power generation units, electric substations, system control and data acquisition (SCADA) systems, distribution automation (DA), and advanced metering infrastructure (AMI).
Serve as an escalation point for complex network security issues. Lead efforts to identify, diagnose, and resolve technical friction between security controls and business applications, ensuring optimal performance and minimal operational impact.
Utilize analytical skills to design, build, and modify dashboards and reporting tools that provide visibility into the effectiveness, maturity, and health of network security operations.
Assist with compliance efforts for network security, specifically requirements in support of North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54), and Sarbanes-Oxley.
Participate in a 24/7, 365-day rotational on-call schedule to support critical infrastructure. Available to respond to urgent production issues outside of standard business hours, including nights, weekends, and holidays.
Other duties as required.