Network Security Engineer - Field & Cloud Infrastructure

Cedarparktexasedc; Cedar Park (TX); On-site; USD 110,000 - 170,000; Full time

Job summary

Cedarparktexasedc is seeking a Network Security Engineer to safeguard field and cloud infrastructure across remote sites and enterprise networks. The role focuses on practical, deployable security controls while maintaining high uptime and ease of use for field operations.

The candidate should bring 5–10 years of cybersecurity/network engineering experience, strong scripting skills, and familiarity with OT security standards to drive risk-based improvements across IT/OT environments.

Qualifications

• Bachelor's degree or equivalent in a related technical field.
• 5–10 years in cybersecurity, systems or network engineering roles.
• Strong networking fundamentals: TCP/IP, routing, DNS, DHCP, NAT, VLANs, VPNs.
• Experience with vulnerability management, SIEM, and logging in IT/OT environments.
• Experience supporting industrial OT networks and secure remote access.
• Automation scripting in Python/PowerShell/Bash/Ansible/Terraform.
• Ability to communicate risks clearly to diverse stakeholders.
• Familiarity with NIST CSF 2.0, CIS Controls, ISO 27001, IEC 62443.

Responsibilities

• Collaborate with network and engineering teams to assess current configurations and document risks.
• Define mitigation paths balancing security, usability, and field deployment.
• Develop containment and recovery plans to minimize disruptions.
• Shadow field personnel to understand constraints and ensure practical implementations.
• Design secure industrial architectures following Purdue Model.
• Support OT cybersecurity incident response and investigations.
• Troubleshoot real-world issues using scripting and automation tools.
• Translate findings into actionable remediation plans.
• Support risk assessments per international and internal standards.
• Document SOPs and standards; contribute to knowledge base.

Skills

Networking fundamentals

Vulnerability management

Security monitoring

Centralized logging

Remote access technologies

OT networks support

Automation scripting

Risk assessments

Technical communication

Documentation

Cross-team collaboration

Cybersecurity frameworks

Cloud networking and security

Zero trust concepts

Industrial security standards

Education

Bachelor's degree in computer science or related field

Tools

Fortinet

Starlink

BeyondTrust

NinjaOne

Zabbix

SentinelOne

Jira

Terraform

Ansible

Job description

Network Security Engineer – Field and Cloud Infrastructure

The Network Security Engineer – Field and Cloud Infrastructure will be responsible for understanding the company’s existing field, network, and remote connectivity landscape, identifying potential security gaps, and helping design and implement practical solutions to improve the security, reliability, and maintainability of deployed systems.

This role requires a practical, operations-focused approach to network security. Most deployments are remote sites where uptime is critical, and ease of use is a top priority. The candidate must be able to identify security gaps while also understanding that improvements must be practical, deployable, supportable, and minimally disruptive to site operations.

Responsibilities include but are not limited to the following:

• Work closely with existing network, support, and engineering teams to evaluate current configurations, document risks, recommend improvements, and support implementation of security controls across field-hosted, cloud-connected, and enterprise network environments.
• Define realistic mitigation paths that balance security, usability, field deployment simplicity, customer needs, and maximum system availability.
• Develop containment strategies & recovery plans to minimize operational disruptions.
• Shadow field and support personnel on occasional field visits to understand the procedural, environmental, and operational constraints.
• Design secure industrial network architectures following Purdue Model principles.
• Participate and Support OT cybersecurity incident response and forensic investigations.
• Troubleshoot and resolve real-world issues using tools such as Python, PowerShell, Bash, Ansible, Terraform, or similar technologies.
• Identify risks and translate findings into actionable remediation plans
• Support risk assessments aligned with international (IEC 62443, ISO 27001, NIST CSF 2.0), regional (NOG-104, CIS), and internal standards.
• Identify creative methods to support customer requirements like data sovereignty while maintaining remote patching of international systems.
• Configure deployment and support technologies (Fortinet, Starlink, BeyondTrust) to maintain global standardization.
• Leverage centralized tools (NinjaOne, Zabbix, SentinelOne) and collaborate with Systems Engineers to quantify risks and track adoption of improvements.
• Contribute to cybersecurity documentation, SOPs, and standards
• Support workflow and ticketing integration using tools such as Jira
• Act as a bridge between cybersecurity and operational execution, translating security requirements into practical, scalable solutions

Required Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, network engineering, engineering, or a related technical field; equivalent experience may be considered.
• 5–10 years in cybersecurity, systems engineering, network engineering, or related roles
• Strong understanding of networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, NAT, VLANs, firewalls, VPNs, and remote access technologies.
• Experience deploying and maintaining vulnerability management, security monitoring, SIEM, centralized logging, configuration compliance, and alerting solutions within IT/OT environments to enhance security visibility, operational resilience, and risk reduction.
• Experience with local and remote support of industrial OT networks, firewall policy management, segmentation, secure remote access, and troubleshooting.
• Ability to evaluate technical environments, identify security gaps, and recommend practical remediation steps.
• Experience with cybersecurity risk assessments for industrial systems.
• Experience supporting products deployed in customer OT environments.
• Experience writing scripts or automation using tools such as Python, PowerShell, Bash, Ansible, Terraform, or similar technologies.
• Ability to communicate technical risks and recommendations clearly to both technical and non-technical stakeholders.
• Strong documentation skills, including network diagrams, configuration standards, implementation procedures, and technical notes.
• Ability to collaborate effectively with network, field support, cybersecurity, infrastructure, cloud, and application teams.
• Experience with standards or frameworks such as NIST CSF 2.0, CIS Controls, ISO 27001, IEC 62443, or other cybersecurity best practices.

Preferred Qualifications

• Experience supporting remote field networks, industrial environments, customer-connected systems, or distributed infrastructure.
• Experience supporting offshore, drilling, marine, energy, or critical infrastructure environments.
• Experience with cloud networking and security concepts in platforms such as Azure, AWS, or Google Cloud.
• Familiarity with zero trust concepts, identity-based access, certificate-based authentication, privileged access management, and least-privilege design.
• Relevant certifications such as CCNA, CCNP, Security+, CySA+, CISSP, GICSP, PCNSA, Fortinet NSE, or equivalent.
• Experience working with

Network Security Engineer – Field and Cloud Infrastructure

The Network Security Engineer – Field and Cloud Infrastructure will be responsible for understanding the company’s existing field, network, and remote connectivity landscape, identifying potential security gaps, and helping design and implement practical solutions to improve the security, reliability, and maintainability of deployed systems.

This role requires a practical, operations-focused approach to network security. Most deployments are remote sites where uptime is critical, and ease of use is a top priority. The candidate must be able to identify security gaps while also understanding that improvements must be practical, deployable, supportable, and minimally disruptive to site operations.

Responsibilities include but are not limited to the following:

• Work closely with existing network, support, and engineering teams to evaluate current configurations, document risks, recommend improvements, and support implementation of security controls across field-hosted, cloud-connected, and enterprise network environments.
• Define realistic mitigation paths that balance security, usability, field deployment simplicity, customer needs, and maximum system availability.
• Develop containment strategies & recovery plans to minimize operational disruptions.
• Shadow field and support personnel on occasional field visits to understand the procedural, environmental, and operational constraints.
• Design secure industrial network architectures following Purdue Model principles.
• Participate and Support OT cybersecurity incident response and forensic investigations.
• Troubleshoot and resolve real-world issues using tools such as Python, PowerShell, Bash, Ansible, Terraform, or similar technologies.
• Identify risks and translate findings into actionable remediation plans
• Support risk assessments aligned with international (IEC 62443, ISO 27001, NIST CSF 2.0), regional (NOG-104, CIS), and internal standards.
• Identify creative methods to support customer requirements like data sovereignty while maintaining remote patching of international systems.
• Configure deployment and support technologies (Fortinet, Starlink, BeyondTrust) to maintain global standardization.
• Leverage centralized tools (NinjaOne, Zabbix, SentinelOne) and collaborate with Systems Engineers to quantify risks and track adoption of improvements.
• Contribute to cybersecurity documentation, SOPs, and standards
• Support workflow and ticketing integration using tools such as Jira
• Act as a bridge between cybersecurity and operational execution, translating security requirements into practical, scalable solutions

Required Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, network engineering, engineering, or a related technical field; equivalent experience may be considered.
• 5–10 years in cybersecurity, systems engineering, network engineering, or related roles
• Strong understanding of networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, NAT, VLANs, firewalls, VPNs, and remote access technologies.
• Experience deploying and maintaining vulnerability management, security monitoring, SIEM, centralized logging, configuration compliance, and alerting solutions within IT/OT environments to enhance security visibility, operational resilience, and risk reduction.
• Experience with local and remote support of industrial OT networks, firewall policy management, segmentation, secure remote access, and troubleshooting.
• Ability to evaluate technical environments, identify security gaps, and recommend practical remediation steps.
• Experience with cybersecurity risk assessments for industrial systems.
• Experience supporting products deployed in customer OT environments.
• Experience writing scripts or automation using tools such as Python, PowerShell, Bash, Ansible, Terraform, or similar technologies.
• Ability to communicate technical risks and recommendations clearly to both technical and non-technical stakeholders.
• Strong documentation skills, including network diagrams, configuration standards, implementation procedures, and technical notes.
• Ability to collaborate effectively with network, field support, cybersecurity, infrastructure, cloud, and application teams.
• Experience with standards or frameworks such as NIST CSF 2.0, CIS Controls, ISO 27001, IEC 62443, or other cybersecurity best practices.

Preferred Qualifications

• Experience supporting remote field networks, industrial environments, customer-connected systems, or distributed infrastructure.
• Experience supporting offshore, drilling, marine, energy, or critical infrastructure environments.
• Experience with cloud networking and security concepts in platforms such as Azure, AWS, or Google Cloud.
• Familiarity with zero trust concepts, identity-based access, certificate-based authentication, privileged access management, and least-privilege design.
• Relevant certifications such as CCNA, CCNP, Security+, CySA+, CISSP, GICSP, PCNSA, Fortinet NSE, or equivalent.
• Experience working with

Every day, the oil and gas industry’s best minds put more than 150 years of experience to work to help our customers achieve lasting success.

We Power the Industry that Powers the World

Throughout every region in the world and across every area of drilling and production, our family of companies has provided the technical expertise, advanced equipment, and operational support necessary for success—now and in the future.

Global Family

We are a global family of thousands of individuals, working as one team to create a lasting impact for ourselves, our customers, and the communities where we live and work.

Purposeful Innovation

Through purposeful business innovation, product creation, and service delivery, we are driven to power the industry that powers the world better.

Service Above All

This drives us to anticipate our customers’ needs and work with them to deliver the finest products and services on time and on budget.

Corporate

Our family of companies is supported by our global Corporate teams, providing expert knowledge from functions including Human Resources, Information Technology, Compliance, Finance, QHSE, Marketing and Legal centers of expertise. We are structured to provide guidance and service above all to all our business operations.