Remote Role :: Network Security Engineer

Title - Network Security Engineer (Need experience on OT environments such as Manufacturing, Utilities or Critical Infrastructure )Location :: Remote (USA) expenses paid for travel to locations requiredDuration :: ContractPosition DescriptionTravel frequently to operational facilities to carry out on-site security deployments and network enhancements.Configure and optimize Cisco security devices to establish secure segmentation and isolation between control and enterprise zones.Replace outdated or unmanaged switching equipment with modern network hardware, ensuring proper VLAN design and segmentation.Support the deployment and configuration of Meraki switches and other network components to align with security and performance objectives.Collaborate with field technicians and plant teams during hardware setup and implementation activities (including limited rack-and-stack work).Support wireless infrastructure refresh efforts when required.Conduct testing and validation of traffic flows, failover paths, and segmentation using Cisco and SD-WAN solutions.Maintain clear documentation of site activities, configurations, and findings.Work closely with cross-functional security and operations teams to minimize downtime and ensure successful cutovers.ResponsibilitiesPractical, hands-on experience with enterprise-grade Cisco security platforms (Firepower preferred).Experience implementing VLANs and segmentation using Meraki or equivalent switch technologies.Familiarity with SD-WAN connectivity and integration within segmented OT networks.Working knowledge of cybersecurity principles and frameworks such as NIST and IEC 62443.Background supporting industrial control systems, utilities, or other critical operations.Strong analytical and troubleshooting ability in complex network environments.Excellent written and verbal communication skills with attention to detail.Willingness to travel extensively (up to 90% of the time).Preferred ExperienceIndustry certifications (e.g., Cisco Security, CISSP, GICSP, or ISA/IEC 62443).