Cybersecurity Network Engineer

Graham Packaging; United States; On-site; USD 95,000 - 143,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K plan

Wellness program

Paid time off

Job summary

Graham Packaging is seeking a Cybersecurity Network Engineer to design, implement, and support secure network infrastructure across enterprise and manufacturing environments. The role blends deep networking expertise with hands-on cybersecurity engineering to protect IT and OT systems.

The ideal candidate has strong knowledge of Cisco and Fortinet platforms, hybrid cloud (Azure), and core services like DHCP, DNS, and Active Directory, with experience in manufacturing settings and IT/OT security.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or related field (or equivalent experience)
• 4–8 years of experience in network engineering and cybersecurity
• Strong hands-on experience with Cisco networking (routing, switching, wireless) and familiar with DNS/DHCP, AD integration

Responsibilities

• Design, implement, and maintain secure enterprise network architectures across IT/OT environments
• Architect and configure firewall solutions (Fortinet, Cisco) with segmentation, VPNs, and zero-trust
• Develop secure network designs supporting manufacturing operations and ICS/OT systems
• Engineer and support core services including DHCP, DNS, IP addressing and AD integration
• Deploy, configure, and support network hardware and security systems with minimal business disruption
• Monitor events and respond to alerts; support incident response efforts

Skills

Network engineering

Cybersecurity engineering

Cisco networking

Fortinet

Azure networking

Active Directory

DNS/DHCP

Zero trust

ICS/OT security

Education

Bachelor's degree in IT/CS

Tools

Cisco routers/switches

Fortinet firewalls

Windows Server

Linux

Job description

Graham Packaging is a people, planet and values-based company and a leader in sustainable packaging manufacturing. From the kitchen to the laundry room, Graham Packaging is part of your everyday life.

For employees at Graham, our Blue Culture is part of their everyday lives, too. In other words, Blue is how we do things here.

At Graham, we are united by a clear vision. We know our part and help those around us know theirs, encouraging one another to continuously improve. We create a safe, challenging environment to innovate by supporting creative ideas and new ways of thinking. We take the initiative to cultivate our individual growth and help others do the same, while keeping ourselves and one another accountable. And we actively promote cooperation, collaboration, integrity and respect across regions and teams to foster an engaged, diverse and connected workforce.

We value our employees, and a Blue Culture allows for the most rewarding employee experience as part of the Graham family. Blue is how we feel about what we do—together—to create a better tomorrow. Working at Graham means you lead constructively with clear goals, use diverse thinking to drive excellence, accountability, innovation, as well as demonstrating collaboration, embracing learning, and taking action for continuous improvement and growth.

The Cybersecurity Network Engineer is a key technical role responsible for the design, implementation, and ongoing support of secure network infrastructure across enterprise and manufacturing environments.

This position combines deep networking expertise with hands-on cybersecurity engineering, ensuring the reliability, performance, and protection of critical IT and operational technology (OT) systems.

The ideal candidate is an experienced engineer with strong knowledge of Cisco and Fortinet platforms, hybrid cloud (Microsoft Azure), and core infrastructure services including DHCP, DNS, and Active Directory, with a proven ability to design and secure distributed environments in a manufacturing context.

Key Responsibilities

Network & Security Architecture

• Design, implement, and maintain secure enterprise network architectures across corporate, plant, and cloud environments
• Architect and configure firewall solutions (Fortinet, Cisco) including segmentation, VPNs, and zero-trust principles
• Develop secure network designs supporting manufacturing operations and industrial control systems (ICS/OT)

Infrastructure & Core Services

• Engineer and support core network services including:
• DHCP, DNS, IP addressing strategies
• Active Directory and identity-integrated network services
• Azure networking (VNets, NSGs, connectivity patterns)
• Integrate on-premises and cloud environments with secure hybrid connectivity

Operational Support & Engineering

• Deploy, configure, and support network hardware and security systems with minimal disruption to business operations
• Monitor network and security events; respond to alerts and drive root cause resolution
• Partner with cybersecurity teams to support incident response activities

Firewall & Security Engineering

• Configure and maintain firewall policies, routing, NAT, and access control frameworks
• Perform regular firewall rule reviews, optimization, and compliance alignment
• Support vulnerability remediation through network and configuration changes

Manufacturing & OT Security

• Support network segmentation strategies between IT and OT environments
• Design secure connectivity for plant systems, ensuring availability and resilience of manufacturing operations
• Collaborate with OT, engineering, and plant teams to align security controls with operational requirements
• Develop and maintain network and security architecture documentation
• Apply standardized configurations and best practices across all deployments
• Stay current on cybersecurity threats, vulnerabilities, and emerging technologies

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or related field (or equivalent experience)
• 4–8 years of experience in network engineering and cybersecurity
• Strong hands-on experience with:
• Cisco networking (routing, switching, wireless)
• Deep understanding of:
• TCP/IP, routing protocols, VLANs, VPNs
• DNS, DHCP, Active Directory integration
• Experience with Windows and Linux environments in enterprise settings

Preferred Qualifications

• Experience supporting manufacturing or industrial environments (OT/ICS exposure)
• Knowledge of network segmentation and zero trust architecture
• Familiarity with cybersecurity frameworks (NIST, ISO 27001) aligned to enterprise programs
• Fortinet (NSE)
• Strong problem-solving and troubleshooting skills
• Ability to design scalable, secure network architecture
• Strong collaboration with infrastructure, security, and operations teams
• Clear communication with both technical and non-technical stakeholders

The standard compensation for this role is $95,400 - 143,100. Salary offers will be determined based on final candidate qualifications, experience, skillset, and other relevant factors.

The expected salary range for the position described in this posting is made in accordance with the legal mandates of certain jurisdictions within the United States. The final agreed-upon compensation is based on individual qualifications and experience.

Benefits include medical, dental, vision and basic life insurance. Employees are able to enroll in the company’s 401K Employee Saving Plan and may participate in its Employee Wellness Program. Employees will also receive paid time off in accordance with company policy and state law requirements.

Graham Packaging is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, sex (including pregnancy), sexual orientation, religion, creed, age, national origin, physical or mental disability, gender identity and/or expression, marital status, veteran status or other characteristics protected by law.