Senior Principal Security Engineer - East Coast or Midwest

About the Role

As a Sr. Principal Security Engineer at MKS Inc., you will partner with Engineering Teams, Operations Teams, Business Units, Field Services, and Vendors to perform engineering design and implementation of the company’s internal network and data communications systems, with a focus on overall network security protocols. You will report to the Director of IT Connectivity.

Responsibilities

• Own and drive the enterprise Zero Trust and SASE security architecture roadmap, ensuring alignment with business and regulatory requirements.
• Design, implement, and evolve secure data communications networks, including on-prem, cloud, and hybrid environments with AWS and Microsoft Azure.
• Define and enforce network segmentation strategies across IT and OT environments to reduce risk and support operational resiliency.
• Own the enterprise network security architecture and continuously improve designs based on industry standards, emerging threats, and organizational needs.
• Serve as the primary Subject Matter Expert (SME) for network security best practices, standards, and procedures.
• Act as a technical escalation point for complex network security issues across engineering, operations, and partner teams.
• Define, implement, and govern network security standards and best practices across the enterprise infrastructure.

Travel Requirements

Up to 0-5% of travel is required.

Qualifications

• Bachelor's Degree or Trade Certification in Computer-related fields preferred or equivalent work experience.
• Minimum 12+ years of experience in Security and Networking technology environments.
• Industry certifications such as PCNSA/PCNSE, CCNP, or CISSP (preferred).
• Experience with network and security platforms including ClearPass, SolarWinds, Cisco Umbrella, Infoblox, Cisco Thousand Eyes, and Prisma.
• Strong hands-on experience in establishing security policy governance and designing, deploying, and managing firewall solutions using Fortinet and Palo Alto firewalls.

Preferred Skills

• Remote access technologies (SSL, IPSec) and site-to-site VPN.
• Network Skills: TCP/IP, routing protocols (EIGRP, BGP, MPLS, IPSec VPN), Layer 2/3 switching and VLAN configuration, Firewall security policy.
• Familiarity with authentication services: Radius, TACACS/TACACS+, 802.1x.

Supervisory Scope

No direct management responsibilities, but as a Sr. Principal Engineer, projecting a leadership presence to the rest of the team as a technology owner is required.

Physical Demands and Working Conditions

• Perform activities such as sitting, standing, or typing for extended periods.
• Experience maintaining and supporting network infrastructure in a 24/7, On-Call model.
• Must be able to communicate information and ideas clearly and exchange accurate information.
• Operates in a professional office environment, constantly using a computer and other office productivity machinery.

Additional Material Job Duties

• Ability to take and follow directions and instructions.
• Ability to interact with employees, customers, suppliers, vendors, or the public in a safe, professional, and respectful manner.
• Access to sensitive and confidential business systems, personally identifying information, company financial information, and/or maintaining physical security and safety.
• Trustworthiness, reliability, and good judgment are essential.

Pay

Salary Pay Range: $135,000.00 - $225,000.00 per year. This range is a good faith estimate based on factors including qualifications, experience, operational needs, and other considerations permitted by law.

Benefits

• Comprehensive benefits package, including health insurance (medical, dental, vision), 401(k) with company match, life and disability insurance.
• 12 paid holidays, sick time, 15 paid vacation days.
• 6 weeks fully paid parental leave, adoption assistance, and tuition reimbursement.