Sr Network Engineer / Architect, Global Network & Security - Alpharetta, GA, Boston, MA or Bill[...]

Cabot Corporation; Billerica (MA); On-site; USD 143,650 - 214,900; Full time

Benefits offered by this job

Health benefits from day one

401K savings plan

Annual bonus based on performance

Job summary

Cabot Corporation is looking for a Sr Network Engineer / Architect to join their Digital Security team. Located in Billerica, MA, this role emphasizes the security of the enterprise network and its framework.

Candidates should bring 10+ years of enterprise networking experience, overseeing a global network platform, and knowledge of Zero Trust principles. The position offers a hybrid work arrangement and a competitive salary based on experience.

Qualifications

• 10+ years in enterprise networking (engineering and architecture).
• Experience owning or operating a global network platform.
• Strong knowledge of WAN architectures and network security controls.

Responsibilities

• Own the global network platform model and its operation.
• Lead network technology selection and lifecycle management.
• Define and maintain the target-state network architecture.

Skills

Enterprise networking experience

Strong knowledge of routing and switching

Experience with Zero Trust concepts

Hands-on experience within an MSP

Excellent English skills

Education

University degree or equivalent experience

Tools

ServiceNow

Python

Ansible

Job description

Your Role at Cabot

Cabot Corporation seeks a Sr Network Engineer / Architect to join the Digital Security team at one of our locations: Alpharetta, GA; Boston, MA; or Billerica, MA.

The role ensures the enterprise network operates as a security‑aligned control plane, enabling Zero Trust, segmentation, and modern access models across IT and OT environments.

Key attributes of the position:

• Full ownership of the global enterprise network platform: architecture, engineering, implementation, security and operation.
• Dual mandate: (1) own the network platform as a core capability; (2) align architecture and operations to enterprise security principles.
• Hybrid work arrangement: remote Monday/Friday, in‑office Tuesday‑Thursday.
• Domestic and international travel up to 15%.
• Off‑hours availability for critical incidents.

Platform Ownership & Security Alignment

• Own the global enterprise network platform (LAN, WAN, wireless, remote access, voice, and perimeter services).
• Ensure architecture and operations align to enterprise security principles and risk tolerance.
• Establish and enforce global network standards, design patterns, and implementation models.
• Ensure the network functions as a security‑aligned control plane, not merely a connectivity service.
• Maintain consistency, repeatability and enforceability of all designs and implementations across regions and environments.

Platform Engineering & Delivery (Hands‑On)

• Lead and execute global network engineering and modernization initiatives (firewalls, switching, routing, wireless, voice and collaboration platforms).
• Design, configure, and implement solutions aligned to defined architecture, standards and security principles.
• Plan and execute site deployments, migration activities, cutover events and post‑deployment stabilization (hyper‑care).
• Develop and maintain design documentation, runbooks, operational procedures and as‑built configurations.
• Coordinate with regional IT teams, managed service providers and vendors for consistent global implementations.
• Act as the escalation point for network and security issues on managed service providers, providing technical direction and driving resolution.

Primary Responsibilities

• Own the global network platform model (architecture, standards, implementation and operation).
• Define and maintain the target‐state network architecture and modernization roadmap (SD‑WAN, SASE, cloud networking).
• Lead network technology selection, lifecycle management and rationalization.
• Ensure alignment of engineering and operations to enterprise security strategy (Zero Trust, segmentation, access control).
• Define and enforce network segmentation and secure access patterns across IT and OT environments.
• Provide hands‑on engineering leadership for complex design, implementation and problem resolution.
• Govern MSP‑delivered network services, ensuring compliance with standards, SLAs and architectural intent.
• Define operational expectations, validation requirements and acceptance criteria for network changes and deployments.
• Support logging, telemetry, detection and response requirements across the network.
• Facilitate secure integration between enterprise IT and manufacturing/OT environments.
• Translate technical risk into clear, actionable insights for leadership.
• Authority to demand redesign or remediation where necessary.

What You'll Bring

• 10+ years in enterprise networking (engineering and architecture).
• University degree or equivalent experience in related technologies.
• Experience owning or operating a global network platform.
• Strong knowledge of routing, switching, WAN architectures and network security controls.
• Experience with Zero Trust concepts, segmentation strategies and secure access models.
• Hands‑on experience within an MSP or hybrid delivery model.
• Excellent English skills, both verbal and written.

Experience That Strongly Aligns

• Network architecture within global industrial or manufacturing environments.
• SASE/SSE platforms (Zscaler, Netskope, Prisma, etc.).
• Cloud networking (Azure, AWS).
• Operational technology (OT) and industrial network segmentation.

Additional Preferred Experience

• Industry certifications: CCNP, CCDA/CCDP, Fortinet NSE 4 or higher, CWNA.
• Familiarity with InfoSec frameworks (NIST, ISO 27001 or equivalent).
• Experience with ServiceNow for change and incident management.
• Scripting or automation experience (Python, Ansible).
• Bilingual or multilingual capability.

How You'll Operate

• Operate with a platform‑ownership mindset, accountable for end‑to‑end outcomes.
• Align engineering and operational decisions to security principles and risk posture.
• Balance architecture, engineering depth and operational execution.
• Establish clarity through structured, enforceable design patterns and governance.
• Maintain operational reliability while advancing modernization and security posture.

Measures of Success

• Adoption of a globally consistent network architecture and standards model.
• Improved network availability, performance and resilience.
• Measurable advancement in network security posture (segmentation, access models, Zero Trust).
• Effective governance and performance of MSP‑delivered network services.
• Successful execution of modernization initiatives (e.g., SD‑WAN, SASE).

Benefits and Compensation

• Pay range: $143,650 – $214,900 (dependent on location and experience).
• All positions eligible for health benefits on the first day of employment; 401K savings plans; vision, dental; and annual bonus based on company performance.

EEO Statement

Cabot Corporation is an equal opportunity employer. We are committed to fostering an inclusive culture that embraces our differences. All employment decisions are made without regard to sex, race, color, religion, national origin, citizenship, age, disability, marital or veteran status, sexual orientation, gender identity or expression, or any other legally protected categories. Reasonable accommodations are available for employees and applicants with disabilities or religious beliefs.