Senior Principal Security Engineer - East Coast or Midwest

MKS Instruments•Andover, MA

17h•$135,000 - $225,000

About The Position

As a Sr. Principal Security Engineer at MKS Inc., you will be a partner with all Engineering Teams, Operations Teams, Business Units, Field Services, and Vendors as required to perform engineering design and implementation of the company’s internal network and data communications systems, with a focus on overall network security protocols. In this role, you will report to the Director of IT Connectivity. At MKS, it's all about courage, big ideas, and a serious passion for innovation. Winning here is about exploring possibilities, taking action, and solving our customers’ toughest challenges. It's not just a job – it's what you make of it. While you shape your role and make it unique, we invest in you with on-the-job and formal training, as well as educational assistance. Curiosity is key at MKS - ask questions, own your path. Our success comes from celebrating the unique skills, diverse perspectives, and lived experience of employees from over 100 countries. The goal is to make sure that everyone feels that they belong. Diversity isn't just a nice-to-have; making sure everyone feels included is a big deal for us. Our group of ~10,000 employees serves semiconductor manufacturing, electronics and packaging, and specialty industrial markets. With over 3,800 patents, our products are enabling advancements in 5G, renewable energy & storage, artificial intelligence, cloud technology, and big data. We're the behind-the-scenes support for some amazing technology. MKS Inc., enables technologies that transform our world.

Requirements

Bachelor's Degree or Trade Certification in Computer related fields preferred or equivalent work experience
Minimum 12+ years of experience in Security and Networking technology environments.
Experience with network and security platforms including ClearPass, Solar Winds, Cisco Umbrella, Infoblox, Cisco Thousand Eyes, and Prisma
Strong hands-on experience in establishing security policy governance and designing, deploying, and managing firewall solutions using Fortinet and Palo Alto firewalls
Experience maintaining and supporting network infrastructure in a 24/7, On-Call model
Must be able to communicate information and ideas so others will understand
Must be able to exchange accurate information

Nice To Haves

Industry certifications such as PCNSA/PCNSE, CCNP, or CISSP or equivalent (preferred)
Remote access technologies (SSL, IPSec) and site-to-site VPN
Network Skills: TCP/IP, routing protocols (EIGRP,BGP,MPLS,IPSec VPN), Layer2/3 switching and VLAN configuration, Firewall security policy
Familiar with authentication services: Radius, TACACS/TACACS+, 802.1x

Responsibilities

Owning and driving the enterprise Zero Trust and SASE security architecture roadmap, ensuring alignment with business and regulatory requirements
Designing, implementing, and evolving secure data communications networks, including on-prem, cloud and hybrid environments with AWS and Microsoft Azure
Defining and enforcing network segmentation strategies across IT and OT environments to reduce risk and support operational resiliency
Owning the enterprise network security architecture and continuously improving designs based on industry standards, emerging threats, and organizational needs
Serving as the primary Subject Matter Expert (SME) for network security best practices, standards, and procedures
Acting as a technical escalation point for complex network security issues across engineering, operations and partner teams
Defining, implementing, and governing network security standards and best practices across the enterprise infrastructure
Ability to take and follow directions and instructions.
Ability to interact with other employees, customers, suppliers, vendors, or the public, in a safe, professional, and respectful manner.
Access to sensitive and confidential business systems and software, personally identifying information, the company’s financial information, and/or the ability to maintain physical security and safety.
Because this position involves the above material job duties, trustworthiness, reliability, and good judgment also are material job duties.