Network Security Engineer

Oceaneering•Houston, TX

8h•Onsite

About The Position

The Network Security Engineer will play a vital role in ensuring the security and efficiency of Oceaneering International's global network infrastructure. This position demands a hands-on approach, bridging traditional networking practices with modern security solutions. The ideal candidate will have a strong background in network engineering, with a focus on security, and will be responsible for designing, implementing, and maintaining secure network environments.

Requirements

Proven track record in managing critical network operations in a 24/7 high-availability environment.
Strong knowledge of incident response and policy management in a security operations context.
3+ years of experience in BGP, Cisco Routing/Switching, and WAN technologies is essential.
3+ years of experience and understanding of Palo Alto Firewalls and their features, including Panorama.
3+ years managing large scale firewall environments and deployments.
U.S Citizen or Lawful Permanent Resident
Excellent leadership and communication skills, with the ability to work collaboratively and independently.
A proactive and analytical mindset, committed to continuous learning and staying updated with security advancements.

Nice To Haves

Experience with Azure/AWS networking security, including NSGs and Virtual WAN, is preferred.
Proficiency in automation tools like Ansible, Python, or Terraform is highly desirable.
Certifications such as PCNSE, CCNP Security, or CCIE are advantageous.
Experience with Zscaler solutions and their integration into a SASE framework.

Responsibilities

Design and configure Palo Alto Next-Generation Firewalls (NGFW) and Panorama for centralized security management.
Implement and monitor Zscaler Internet Access (ZIA) and Private Access (ZPA) to secure user traffic and enhance network security.
Configure and implement security policies, including App-ID and User-ID, to ensure network integrity.
Manage complex enterprise networks, including BGP routing and Cisco routers/switches, for optimal performance.
Administer Cisco Identity Services Engine (ISE) for network access control and identity management.
Lead incident response, performing deep analysis and implementing containment strategies for network security incidents.
Automate routine firewall changes and security checks using scripting languages to improve efficiency.
Create and maintain comprehensive documentation, ensuring compliance and knowledge sharing within the team.
Stay updated with the latest security trends and best practices, contributing to a proactive security culture.