Network Security Engineer

Oceaneering•Houston, TX

About The Position

The Network Security Engineer will help ensure the security and efficiency of Oceaneering International’s global network infrastructure. This hands-on role combines traditional network engineering with modern security solutions and is responsible for designing, implementing, and maintaining secure network environments. The role involves managing enterprise network and security technologies, responding to network security incidents, automating routine security tasks, and maintaining documentation. The engineer is expected to contribute to a proactive security culture and support critical network operations in a 24/7 high-availability environment.

Requirements

Proven track record managing critical network operations in a 24/7 high-availability environment.
Strong knowledge of incident response and policy management in a security operations context.
At least 3 years of experience in BGP, Cisco routing and switching, and WAN technologies.
At least 3 years of experience and understanding of Palo Alto firewalls and features, including Panorama.
At least 3 years managing large-scale firewall environments and deployments.
Must be a U.S. citizen or lawful permanent resident.
Excellent leadership and communication skills, with the ability to work collaboratively and independently.
A proactive and analytical mindset and commitment to continuous learning and keeping up with security advancements.

Nice To Haves

Experience with Azure or AWS networking security, including NSGs and Virtual WAN.
Proficiency with automation tools such as Ansible, Python, or Terraform.
Certifications such as PCNSE, CCNP Security, or CCIE.
Experience with Zscaler solutions and their integration into a SASE framework.

Responsibilities

Design and configure Palo Alto Next-Generation Firewalls (NGFW) and Panorama for centralized security management.
Implement and monitor Zscaler Internet Access (ZIA) and Private Access (ZPA) to secure user traffic and enhance network security.
Configure and implement security policies, including App-ID and User-ID, to ensure network integrity.
Manage complex enterprise networks, including BGP routing and Cisco routers and switches, for optimal performance.
Administer Cisco Identity Services Engine (ISE) for network access control and identity management.
Lead incident response, perform in-depth analysis, and implement containment strategies for network security incidents.
Automate routine firewall changes and security checks using scripting languages.
Create and maintain documentation to support compliance and knowledge sharing within the team.
Stay current with security trends and best practices and contribute to a proactive security culture.