Principal Network Engineer

Job Title: Principal Network Engineer

Location: Rensselaer, NY (5 days onsite)

Position Type: Contract position

Responsibilities:

This role will work across Corporate IT and site-based IT teams to help design, implement, secure, and support network segmentation within a regulated manufacturing environment. The ideal candidate will have deep experience with Palo Alto firewall security policies, OT/manufacturing networks, network segmentation, and the Purdue Model/ISA-95 framework.

The Principal Network Engineer will also support broader enterprise networking activities across LAN, WAN, wireless, network security, and secure access technologies.

Key Responsibilities:

• Support the design and implementation of OT network segmentation within a manufacturing environment.
• Configure and manage Palo Alto firewalls and security policies.
• Apply Purdue Model/ISA-95 concepts to manufacturing network architecture and segmentation.
• Install, configure, test, and support routing, switching, wireless, firewall, and Secure Access Service Edge solutions.
• Support network technologies from proof of concept through build and delivery.
• Partner with Network Operations to ensure a smooth transition from build to run.
• Maintain detailed network and security documentation to support operational handoff and GxP requirements.
• Identify risks, dependencies, network trends, and opportunities to improve reliability, security, and performance.
• Support capacity planning, infrastructure scaling, and network architecture activities.
• Identify opportunities to automate network infrastructure and administration.
• Provide clear status updates across concurrent deployments and communicate effectively with technical teams, project teams, and leadership.
• Collaborate with Network Engineering, Network Operations, Digital & Technology teams, and business stakeholders.

Required Qualifications:

• 8+ years of experience with network implementation and operations in complex, 24x7 enterprise environments.
• Strong experience with OT, laboratory, or manufacturing networks.
• Demonstrated experience with network segmentation.
• Strong hands-on experience with Palo Alto firewalls and firewall security policies.
• Familiarity with the Purdue Model and/or ISA-95 framework.
• Strong knowledge of:
• BGP and EIGRP
• Cisco routers and switches
• Cisco wireless networking
• WAN and SD-WAN
• Palo Alto firewalls
• Zscaler Internet Access and Zscaler Private Access
• TCP/IP and common IP protocols
• DNS, DHCP, NTP, Syslog, and other core network services
• Experience with capacity planning, infrastructure scaling, and network architecture.
• Strong network and security documentation skills.
• Excellent written and verbal communication skills.
• Ability to work effectively across technical and business teams.

Preferred Qualifications:

• Experience in pharmaceutical, biotechnology, life sciences, or another regulated manufacturing environment.
• Knowledge of GxP and 21 CFR Part 11.
• Experience with Plan/Build/Run operating models.
• Experience working with Managed Services Providers.
• Familiarity with cloud networking, load balancing, and Network Admission Control technologies.
• Experience with Splunk, LogicMonitor, and Cisco Catalyst Center.
• BA/BS in Computer Science, Management Information Systems, a related technical field, or equivalent practical experience.