Engineer III, Systems Network

American Bureau of Shipping (ABS)

. Define and maintain the enterprise network security infrastructure roadmap aligned with Zero Trust principles, NIST 800-171/CMMC frameworks, and business objectives .

Posted 10/6/2026full-timeHouston • Texas • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in designing and maintaining enterprise network security infrastructures aligned with Zero Trust principles and NIST/CMMC frameworks. Proficient in optimizing firewall rulebases and integrating multi-cloud environments while providing architectural guidance and mentorship.

Highest-signal resume keywords

Palo Alto NGFW ExpertiseZero Trust ArchitectureNetwork Security EngineeringCloud Security CertificationsFirewall Rulebase Optimization

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network Security EngineeringFirewall Policy DesignVPN ConfigurationBGPOSPFEIGRPSD-WANIPSec VPNAzure VNetCloud Interconnects

Soft Skills

Technical MentorshipStakeholder CommunicationCollaboration

Tools & Technologies

Palo Alto PanoramaAzure FirewallCloudflareZscalerOracle Cloud Infrastructure

Certifications & Qualifications

Palo Alto PCNSAPalo Alto PCNSECisco CCNPCloud Certifications (Azure, OCI, GCP)NIST/CMMC Certifications

Industry Keywords

Zero Trust PrinciplesNIST 800-171CMMC FrameworksITAR ComplianceMicrosegmentation

Tech Stack

Tools & technologies

AzureCloudGoogle Cloud PlatformOracle

About the role

Key responsibilities & impact

Define and maintain the enterprise network security infrastructure roadmap aligned with Zero Trust principles, NIST 800-171/CMMC frameworks, and business objectives
Design secure, scalable, high-availability network architectures across on-premises, Azure, Oracle Cloud, and multi-cloud environments
Develop network security best practices and translate security policy requirements into infrastructure designs
Evaluate emerging technologies and provide architectural recommendations to IT leadership
Serve as technical authority for firewall, segmentation, VPN, and remote access infrastructure decisions
Develop and maintain reference architectures, design patterns, and network security infrastructure standards
Evaluate and integrate technologies for user-to-resource mapping across on-premises, cloud, and remote access environments
Develop identity-based policy enforcement standards supporting Zero Trust maturity
Design and implement firewall policy cleanup, ownership, review, and decommission workflows
Lead firewall rulebase optimization across security and NAT policies
Standardize and automate repeatable manual engineering workflows
Establish documentation standards and templates for the engineering team
Provide architectural guidance and mentorship to network and firewall engineers
Lead collaboration with security operations, cloud engineering, identity/access management, and application teams
Translate security policy requirements into infrastructure designs and configurations
Serve as subject matter expert and escalation point for complex firewall, VPN, routing, and multi-cloud connectivity issues
Support security audits, compliance assessments, and incident response with architectural context and technical expertise
Report directly to IMS Management; direct reports may include outside contractors

Requirements

What you’ll need

8+ years of progressive experience in network security engineering
At least 3 years in a senior engineer or technical lead capacity
5+ years of hands-on experience with Palo Alto NGFW and Panorama in a global enterprise environment with hybrid-cloud infrastructure
College degree or recognized equivalent, preferably in Computer Science, Computer Engineering, or a related field, from an accredited university, or comparable on-the-job experience
Palo Alto PCNSA / PCNSE
Cisco CCNP (Security or Enterprise)
Cloud certifications (Azure, OCI, GCP)
NIST / CMMC related certifications
Cloudflare ASE/ACE, Zscaler ZDTA, ZDTE, ZDXA
Deep expertise designing enterprise-grade network security infrastructure across hybrid-cloud environments (on-prem, Azure, OCI, GCP)
Advanced knowledge of Palo Alto NGFW, Panorama, App-ID, Threat Prevention, GlobalProtect, and Security Zone design
Experience redesigning and optimizing large-scale firewall rulebases (1000+ rules)
Strong command of BGP, OSPF, EIGRP, VPC, HSRP, VLAN design, SD-WAN, and DMVPN architectures
Extensive experience with IPSec VPN, GlobalProtect, SSL VPNs, SAML/MFA integration, and failover design
Hands-on experience with Azure VNet, NSG, Azure Firewall, OCI VCN/DRG, and cloud interconnects such as Megaport and ExpressRoute
Working knowledge of Zero Trust architecture, microsegmentation, NIST 800-171, NIST 800-53, and CMMC frameworks
Ability to produce technical documentation including runbooks, SOPs, design documents, and training materials
Experience articulating architectural decisions to technical and non-technical stakeholders, mentoring engineers, and leading technical initiatives
Understanding of ITAR compliance requirements and their impact on infrastructure design
Working knowledge of the ABS Health, Safety, Quality and Environmental Management System
Must satisfy U.S. export-control requirements as a U.S. Person or obtain required export licenses or authorizations

Benefits

Comp & perks

Medical insurance (PPO and HD)
Dental and vision insurance
Health Savings Account (HSA)
Flexible Savings Account (FSA)
Life insurance
Accidental death and dismemberment insurance
Disability leave programs
Parental leave program
Paid holidays
Paid vacation time
Employee Assistance Plan (EAP) with personal wellness and work-life services
401K plan with a generous company match, subject to plan requirements