Staff Controls Engineer

Insulet Corporation•Acton, MA

1d•$141,600 - $212,400•Onsite

About The Position

This Senior Staff Engineer, Network & Cybersecurity role is a hands-on leadership position focused on designing, implementing, and securing the network infrastructure that supports automated manufacturing equipment and production systems. You will partner with IT, cybersecurity teams, controls engineers, and equipment vendors to ensure manufacturing systems are reliable, scalable, compliant, and protected from cyber threats. Responsibilities include developing plant-floor network architectures, managing segmentation and remote access, supporting incident response and disaster recovery planning, validating equipment security requirements, and establishing global standards across manufacturing sites. The ideal candidate has extensive experience in network engineering and cybersecurity within industrial or manufacturing environments, strong knowledge of industrial networking and security frameworks, and the ability to lead cross-functional projects in a highly regulated setting. This is an on-site role with approximately 20% domestic and international travel. Position Overview: The Sr. Staff Engineer for Network and Cybersecurity will lead in network design and implementation, and in collaboration and execution of cybersecurity mitigations for equipment used in Manufacturing. The role will lead cross-functionally, in collaboration with Insulet IT, Global Controls Engineering and equipment vendors. The team is responsible for providing automated manufacturing controls and product test processes that are capable, secure, scalable globally, cost effective, reliable, documented and validated. The candidate will be responsible for network and cyber aspects of installation and start-up of new equipment and continuous improvements to existing equipment and infrastructure. This role reports directly to Manufacturing and offers a broad range of career and experience opportunities. This role has global responsibilities, including determining standards and processes for implementation across all manufacturing sites and in supportive collaboration with the sites.

Requirements

Bachelor of Science in Electrical Engineering, Computer Science, Computer Engineering, Cybersecurity, or related field.
10+ years of hands-on network engineering and/or cybersecurity implementation, including network architecture, segmentation, remote access, and firewall administration, with demonstrated experience applying these in an industrial control system environment.

Nice To Haves

Understanding of EtherNet/IP, Modbus TCP, OPC UA, or other industrial protocols
Experience in deploying and configuration of industrial network switches such as Cisco IE series, Allen-Bradley Stratix, Moxa, etc.
Working knowledge of core network services - IP address schema design, DHCP/DNS/NTP
Working knowledge of security standards such as IEC-62443 and NIST SP800.
Working knowledge of Crowdstrike, SentinelOne, Microsoft Defender or similar EDR and Vulnerability Management (VM) solutions, Dragos / Claroty / Armis / Nozomi OT solutions and runZero as dashboard.
Cisco CCNA Routing and Switching and/or CCNA Wireless certification preferred.
Palo Alto Networks PCNSE certification preferred.
Understanding of the cyber-attack kill chain, MITRE ATT&CK Framework and Zero Trust
EDR in manufacturing; SIEM/SOAR awareness to partner with Enterprise Cybersecurity team
Cybersecurity certifications such as GCFA, GCIH, GCTI or GICSP preferred
Familiarity with plant-floor IT infrastructure - Windows Server, Active Directory, virtualization (VMware/Hyper-V), thin clients, and backup/recovery for equipment PCs, sufficient for system design and support in a medical device manufacturing environment.
Appreciation for the engineering, design and development of manufacturing equipment for high volume, high speed, high precision assembly operation and complex industrial systems
Experience with Rockwell Automation products preferred
Experience in a medical device or regulated environment with validated processes preferred
Familiarity with computer systems validation, 21 CFR Part 11, and change management
Basic understanding of ALCOA+
Strong project management, organizational and documentation skills desired.
Ability to work in a collaborative, safe, continuously improving and dynamic team environment

Responsibilities

Design and configure VLANs, IP addressing schemes, and network segmentation between manufacturing zones and the enterprise network, consistent with ISA-95/IEC 62443.
Drive the network and cybersecurity aspects of design, development, implementation and analysis of plant-floor network infrastructure supporting automated high-speed manufacturing and test control systems, including servo drives, HMI, PLC’s, equipment safety systems, robots, I/O systems, and data collection.
Review network and security requirements in equipment specifications during vendor selection and verify vendor compliance at FAT/SAT before equipment ships or is released to production.
Coordinate with IT to maintain infrastructure supporting manufacturing systems and documentation including network architecture documentation, IP schemas, and asset inventory.
Enable appropriate need-based access to equipment systems for both onsite and remote users.
Support incident investigation and recovery for manufacturing systems, serving as the OT technical resource to the Enterprise Cybersecurity team.
Participate in disaster recovery and business continuity planning for manufacturing systems, including recovery time objectives for critical production equipment.
Support ISO27001, SOC, HITRUST, and other audit activities for security operations, threat intelligence, and incident response.
Collaborate with Corporate Cybersecurity team to analyze incident and alert trends to recognize various threat groups, attack patterns, tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs) and attack vectors for a holistic understanding of the threat landscape.
Support process verification, validation and documentation.