Lead Network Security Specialist Infrast

Iberdrola; New York (NY); In loco; USD 106.000 - 133.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive benefits and growth

12% performance bonuses

401(k) match

Health, dental, vision insurance

Tuition reimbursement

Professional development

Descrizione del lavoro

Avangrid is seeking a Lead Network Security Specialist to act as a senior technical advisor for enterprise network security. The role leads engineering, installation, maintenance and administration for critical infrastructure, translating business needs into secure network solutions.

The incumbent will supervise incident responses, design and implement security changes, ensure NERC/CIP compliance, and mentor staff within a 24x7 on‑call environment.

Competenze

• Requires a technical degree with extensive enterprise infrastructure experience.
• Experience across data center operations, DR/BC, security compliance, and technical project coordination.
• Operational experience configuring Cisco routers/switches/firewalls and next‑gen firewalls (Check Point, Palo Alto).

Mansioni

• Respond to incidents and requests to meet SLAs.
• Collaborate with clients, contractors and project teams to design solutions.
• Plan and implement environment changes for projects.
• Lead technical implementation plans and mentor team members.
• Maintain regulatory compliance (NERC/CIP) and high security controls for SCADA systems.

Conoscenze

Network security

Firewall management

Cisco security devices

NERC CIP compliance

Cloud architectures

SD-WAN

Security policy development

Formazione

AS/BS/MS in technical field

10+ years enterprise infrastructure experience

Strumenti

Cisco Nexus

Check Point/ Palo Alto firewalls

Cisco ISE/ ASA

Descrizione del lavoro

Position Information

Job Title: Lead Network Security Specialist

Infrastructure Location: Rochester, NY

Salary Range: $106,000 - $132,500

Schedule: On Site, Office, 5 days

Job Summary

Serves as senior technical advisor responsible for implementing enterprise network security solutions using current and emerging technologies. Leads the engineering, installation, maintenance and administration of technical aspects for the OSG Infrastructure team supporting Critical Infrastructure. Responsible for translating business requirements into secure network solutions or process designs.

Key Responsibilities

• Provide timely responses to all incidents, tasks and requests assigned to meet Service Level Agreements.
• Work with internal clients, suppliers/contractors, project teams and other technical staff to identify, design and support technical solutions.
• Design, plan and implement changes to the environment for improvements or projects
• Provide maintenance of infrastructure technologies following the change management process
• Lead the technical implementation plans in support of infrastructure technologies
• Leads others to solve problems
• Leads contractors to deliver services to projects and or operational duties as needed
• Leads functional teams or projects as assigned
• Lead the evaluation, selection, and testing of hardware and software products
• Maintain regulatory compliance under NERC/CIP guidelines
• Maintain high quality security controls surrounding the critical SCADA systems
• Perform/coordinate special assignments from OSG Infrastructure Management
• Provide 24x7 on call support
• Provide professional and technical mentoring for team members

Required Qualifications

• AS Technical Related Degree with 12+ years’ technical experience, or BS Technical Related Degree with 8+ years’ technical experience; or MS Technical Related Degree with 5+ years’ technical experience
• Position requires a minimum of ten (10) years’ experience working with infrastructure solutions in an enterprise environment
• Position requires professional experience with more than one of the following areas: Data Center Operations, Disaster Recover/Business Continuity Planning & Execution, Security & Compliance Management, Infrastructure Operational Policies & Procedures, and/or Technical Project Coordination
• Position requires Operational experience in an Enterprise Environment configuring and maintaining Cisco Routers/Switches/Firewalls such as Cisco Nexus 9K, Cisco Catalyst, Cisco ASR Routers, Cisco 4K Routers, Cisco ISE, Cisco Firepower, Cisco ASA
• Position requires Operational experience in an Enterprise Environment configuring and maintaining Next generation firewalls such as Checkpoint and Palo Alto

Skills/Abilities

• Expert within network infrastructure, operations & network security
• Proficient in professional standards and trends within area of expertise
• Proficient in deploying Checkpoint, Palo Alto, Cisco ASA firewalls along with implementing VPN’s
• Knowledge of multiple security technologies, to include network security, NAC, Micro segmentation, network security architecture
• Implementing security technologies such as SAML and PKI Infrastructure
• Network Access Control systems in a large enterprise
• Experience with authentication systems such as RADIUS, TACACS+, SSO, LDAP
• Experience planning, researching, and developing security policies, standards, and procedures
• Experience with architecting in cloud environments (AWS, Azure, and GCP)
• SD-WAN and other tunneling\encryption transport technologies
• Network Security Automation and DevOps
• Strong Routing and Switching experience (BGP, OSPF, VPC, VXLAN, vain traffic engineering, Multicast, etc.

Preferred Qualifications

• Experience with packet capture software such as Wireshark, WinDump, tcpdump, etc.
• Experience with installing and configuring Citrix Netscalers in an Enterprise High Availability environment
• Experience with installing and configuring Cisco ISE in a distributed deployment with multiple personas
• Experience with Zero Trust Architecture
• Experience working in a regulated environment
• NERC/CIP experience a plus
• Experience with Cisco Nexus Dashboard Fabric Controller (Formerly DCNM)
• Experience using Solarwinds Orion platform suite of tools

Competencies

• Growth & Continuous Improvement
• Initiative & Change
• Focused on Results
• Customer Centric (internal and/or external)
• Communication
• Collaboration
• Leadership (people managers/leaders)

What We Offer

• Competitive benefits and growth opportunities
• Generous performance‑based bonuses 12%
• 401(k) match
• Comprehensive health, dental, and vision insurance
• Tuition reimbursement
• Professional development and clear career‑advancement pathways

Mobility Information

Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.

At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law.

If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at [e-mail].

Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions.

This does not include those that will work for Avangrid Power.

Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&P) responsibilities.

This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas.

NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.

Job Posting End Date: November-27-2026