Senior Principal Security Engineer - East Coast or Midwest

MKS Instruments•Andover, MA

19h•Onsite

About The Position

As a Sr. Principal Security Engineer at MKS Inc., you will be a partner with all Engineering Teams, Operations Teams, Business Units, Field Services, and Vendors as required to perform engineering design and implementation of the company’s internal network and data communications systems, with a focus on overall network security protocols. In this role, you will report to the Director of IT Connectivity.

Requirements

Bachelor's Degree or Trade Certification in Computer related fields preferred or equivalent work experience
Minimum 12+ years of experience in Security and Networking technology environments.
Strong hands-on experience in establishing security policy governance and designing, deploying, and managing firewall solutions using Fortinet and Palo Alto firewalls
Familiar with authentication services: Radius, TACACS/TACACS+, 802.1x

Nice To Haves

Industry certifications such as PCNSA/PCNSE, CCNP, or CISSP or equivalent (preferred)
Experience with network and security platforms including ClearPass, Solar Winds, Cisco Umbrella, Infoblox, Cisco Thousand Eyes, and Prisma
Remote access technologies (SSL, IPSec) and site-to-site VPN
Network Skills: TCP/IP, routing protocols (EIGRP,BGP,MPLS,IPSec VPN), Layer2/3 switching and VLAN configuration, Firewall security policy

Responsibilities

Owning and driving the enterprise Zero Trust and SASE security architecture roadmap, ensuring alignment with business and regulatory requirements
Designing, implementing, and evolving secure data communications networks, including on-prem, cloud and hybrid environments with AWS and Microsoft Azure
Defining and enforcing network segmentation strategies across IT and OT environments to reduce risk and support operational resiliency
Owning the enterprise network security architecture and continuously improving designs based on industry standards, emerging threats, and organizational needs
Serving as the primary Subject Matter Expert (SME) for network security best practices, standards, and procedures
Acting as a technical escalation point for complex network security issues across engineering, operations and partner teams
Defining, implementing, and governing network security standards and best practices across the enterprise infrastructure
Experience maintaining and supporting network infrastructure in a 24/7, On-Call model
Must be able to communicate information and ideas so others will understand
Must be able to exchange accurate information
Operates in a professional office environment
Constantly operates a computer and other office productivity machinery
Ability to take and follow directions and instructions.
Ability to interact with other employees, customers, suppliers, vendors, or the public, in a safe, professional, and respectful manner.
Access to sensitive and confidential business systems and software, personally identifying information, the company’s financial information, and/or the ability to maintain physical security and safety.