Sr. Network Security Engineer

Job ID: 18359 

Alternate Locations:  

Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco®, Coleman®, Oster®, Rubbermaid®, Sharpie® and Yankee Candle® - and 24,000 talented teammates around the world. Our culture is built on values in action: Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact—supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day.

Job Summary:

The Senior Network Security Engineer provides dedicated engineering capacity to accelerate Newell Brands network segmentation buildout and materially reduce lateral movement risk across the enterprise. This role is the hands-on technical lead for network segmentation architecture and enforcement of network security controls across IT, OT, and cloud environments within Newell’s global multi-site footprint. The engineer does not just design; they design, validate, and partner across infrastructure and business stakeholders to drive adoption of controls that reduce real-world attack surface. 

Key Responsibilities:

• Own and drive execution of the network segmentation roadmap, translating architecture designs into firewall rule requirements, validated post-implementation with the network team

• Architect and support network zone boundaries, trust relationships, and inter-zone communication rules aligned to Zero Trust principles

• Drive the strategic shift from port/protocol-based to App-ID and User-ID driven segmentation, integrating identity-based access controls across sites 

• Lead microsegmentation design for high-risk environments including manufacturing OT, data center, cloud connected, and retail POS segments

• Architect and specify cloud network security controls — network segmentation, cloud firewall policy, and secure cloud-to-on-prem connectivity

• Partner with the OT Security Specialist to design and support IT/OT demilitarized zone architecture and manage converged traffic flow design safely

• Conduct and document network architecture reviews to identify trust boundary gaps, flat network zones, and legacy segment exposure

• Specify and validate firewall rules against segmentation design and security baselines across IT and OT environments

• Drive firewall rule lifecycle reviews: review and tune rule sets, identify unused or overly permissive rules, and coordinate remediation with the network team

• Review and approve firewall change requests for security impact, and verify post-implementation rule accuracy

• Build and maintain network security engineering runbooks and configuration baselines for the Security Engineering team

•  Leverage AI-assisted tools and automation to accelerate firewall policy analysis, segmentation validation, and engineering documentation 

Required Qualifications:

• 5+ years of hands-on network security engineering experience: firewall policy, segmentation design, and enterprise network architecture • Demonstrated experience designing and validating network segmentation in a complex, multi-site environment

• Working knowledge of Zero Trust Network Access (ZTNA) concepts and practical application to enterprise segmentation

• Working knowledge of cloud network security controls and architecture in at least one major cloud platform (Azure, AWS, or GCP) • Familiarity with enterprise firewall policy management and rule lifecycle tooling (e.g., policy orchestration and change management platforms)

• Understanding of OT/ICS network environments and IT/OT segmentation best practices (Purdue Model, IEC 62443)

• Strong documentation skills: ability to produce architecture diagrams, configuration runbooks, and network design documentation

• Bachelor's degree in Computer Science, Network Engineering, Information Security, or equivalent practical experience 

Preferred Qualifications:

• Experience with SASE or cloud-delivered network security platforms 

• Demonstrated experience securing hybrid cloud environments, including cloud-to-on-prem network segmentation and enforcement (Azure, AWS, or GCP) 

• Cloud security certifications (e.g., AZ-500, AWS Security Specialty, CCSP)

• Experience in a manufacturing, consumer goods, or retail environment with distributed site and OT/IT network challenges

• Experience with SD-WAN architecture and security policy enforcement across distributed sites

• Industry certifications in network security (e.g., PCNSE, CCNP Security, GIAC GAWN, or equivalent) 

Newell Brands (NASDAQ: NWL) is a leading global consumer goods company with a strong portfolio of well-known brands, including Rubbermaid, Sharpie, Graco, Coleman, Rubbermaid Commercial Products, Yankee Candle, Paper Mate, FoodSaver, Dymo, EXPO, Elmer’s, Oster, NUK, Spontex and Campingaz. We are focused on delighting consumers by lighting up everyday moments. Newell Brands and its subsidiaries are Equal Opportunity Employers and comply with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply.