Staff Controls, Network and Cyber Engineer (Onsite - Acton)

Position Overview

The Sr. Staff Engineer for Network and Cybersecurity will lead in network design and implementation, and in collaboration and execution of cybersecurity mitigations for equipment used in Manufacturing. The role will lead cross-functionally, in collaboration with Insulet IT, Global Controls Engineering and equipment vendors. The team is responsible for providing automated manufacturing controls and product test processes that are capable, secure, scalable globally, cost effective, reliable, documented and validated. The candidate will be responsible for network and cyber aspects of installation and start-up of new equipment and continuous improvements to existing equipment and infrastructure. This role reports directly to Manufacturing and offers a broad range of career and experience opportunities. This role has global responsibilities, including determining standards and processes for implementation across all manufacturing sites and in supportive collaboration with the sites.

Responsibilities

• Design and configure VLANs, IP addressing schemes, and network segmentation between manufacturing zones and the enterprise network, consistent with ISA-95/IEC 62443.
• Drive the network and cybersecurity aspects of design, development, implementation and analysis of plant-floor network infrastructure supporting automated high-speed manufacturing and test control systems, including servo drives, HMI, PLC’s, equipment safety systems, robots, I/O systems, and data collection.
• Review network and security requirements in equipment specifications during vendor selection and verify vendor compliance at FAT/SAT before equipment ships or is released to production.
• Coordinate with IT to maintain infrastructure supporting manufacturing systems and documentation including network architecture documentation, IP schemas, and asset inventory.
• Enable appropriate need-based access to equipment systems for both onsite and remote users.
• Support incident investigation and recovery for manufacturing systems, serving as the OT technical resource to the Enterprise Cybersecurity team.
• Participate in disaster recovery and business continuity planning for manufacturing systems, including recovery time objectives for critical production equipment.
• Support ISO27001, SOC, HITRUST, and other audit activities for security operations, threat intelligence, and incident response.
• Collaborate with Corporate Cybersecurity team to analyze incident and alert trends to recognize various threat groups, attack patterns, tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs) and attack vectors for a holistic understanding of the threat landscape.
• Support process verification, validation and documentation.

Minimum Requirements

• Bachelor of Science in Electrical Engineering, Computer Science, Computer Engineering, Cybersecurity, or related field.
• 10+ years of hands-on network engineering and/or cybersecurity implementation, including network architecture, segmentation, remote access, and firewall administration, with demonstrated experience applying these in an industrial control system environment.

Preferred Skills and Competencies

• Understanding of EtherNet/IP, Modbus TCP, OPC UA, or other industrial protocols
• Experience in deploying and configuration of industrial network switches such as Cisco IE series, Allen-Bradley Stratix, Moxa, etc.
• Working knowledge of core network services - IP address schema design, DHCP/DNS/NTP
• Working knowledge of security standards such as IEC-62443 and NIST SP800.
• Working knowledge of Crowdstrike, SentinelOne, Microsoft Defender or similar EDR and Vulnerability Management (VM) solutions, Dragos / Claroty / Armis / Nozomi OT solutions and runZero as dashboard.
• Cisco CCNA Routing and Switching and/or CCNA Wireless certification preferred.
• Palo Alto Networks PCNSE certification preferred.
• Understanding of the cyber-attack kill chain, MITRE ATT&CK Framework and Zero Trust
• EDR in manufacturing; SIEM/SOAR awareness to partner with Enterprise Cybersecurity team
• Cybersecurity certifications such as GCFA, GCIH, GCTI or GICSP preferred
• Familiarity with plant-floor IT infrastructure - Windows Server, Active Directory, virtualization (VMware/Hyper-V), thin clients, and backup/recovery for equipment PCs, sufficient for system design and support in a medical device manufacturing environment.
• Appreciation for the engineering, design and development of manufacturing equipment for high volume, high speed, high precision assembly operation and complex industrial systems
• Experience with Rockwell Automation products preferred
• Experience in a medical device or regulated environment with validated processes preferred
• Familiarity with computer systems validation, 21 CFR Part 11, and change management
• Basic understanding of ALCOA+
• Strong project management, organizational and documentation skills desired.
• Ability to work in a collaborative, safe, continuously improving and dynamic team environment

Physical Requirements

The successful candidate will be expected to travel domestically and internationally. Anticipated travel is estimated at 20%.