Network & Infrastructure Security Engineer

About Gleason With more than 2,200 employees and 13 manufacturing facilities worldwide, Gleason Corporation is a leader in gear technology. Gleason's product and service offerings include gear and transmission design software, gear manufacturing machines and related accessories, gear metrology equipment and automation systems. Gleason products are used by customers in e-mobility, commercial vehicles, aerospace, agriculture, mining, sustainable energy, construction, power tools, marine and many other industries Working for Gleason, you will be connected to work that matters, putting your expertise to its best use while developing skills for the future. The result is a career defined by you, supported by Gleason and built on tangible accomplishments. As we continue to grow and evolve, we are looking for the right people to join us on our mission. If you are interested in being part of our team, there are a few things you should know: We are energized by challenges and the effort needed to solve them. We like working with people who are positive, adaptable and growth-minded. We care how work gets accomplished and are deeply invested in the success of our customers and colleagues. If this sounds like you, we invite you to read on and learn more.

Why work at Gleason?

• Excellent benefits package including a 6% Company 401(k) match
• Flexible scheduling
• Tuition Assistance Program
• Employee Assistance Program
• Formal and informal Development opportunities.

Multi-site enterprise network security | Hands-on technical leadership

The opportunity

We are seeking an experienced, hands-on network and infrastructure security engineer to own the operational security, reliability, and continuous improvement of our networks across multiple company locations. This role is primarily focused on network engineering and defensive security - not a policy-only cybersecurity position. The successful candidate will be our resident technical expert for firewalls, secure connectivity, network segmentation, switching, wireless, and protection of internet-facing infrastructure.

You will work with Corporate IT and local IT teams to identify weaknesses before they are exploited, establish consistent technical standards, and resolve complex incidents without depending on vendors for routine diagnosis.

What you will own

• Firewall and perimeter security: Administer, harden, monitor, and troubleshoot next-generation firewalls and edge services; manage rule bases, NAT, IPS/IDS, remote access, VPNs, firmware, certificates, and secure management access. Experience with Palo Alto, SonicWall, Sophos, and/or Fortinet is especially relevant.
• Proactive vulnerability and patch management: Maintain an accurate inventory of network/security devices; track vendor advisories, exposed services, end-of-life systems, configuration drift, and vulnerabilities. Prioritize and coordinate firmware/security updates, validate remediation, and document exceptions.
• Segmentation and secure architecture: Design and maintain VLANs, ACLs, inter-VLAN controls, least-privilege access, site-to-site connectivity, and segmentation of user, server, guest, management, and other higher-risk networks. Reduce lateral-movement opportunities.
• Switching, wireless, and network operations: Configure and troubleshoot managed switches, routing, DNS/DHCP dependencies, wireless controllers/APs, authentication, and network performance. Understand the security implications of each component.
• Detection, response, and resilience: Review firewall/network telemetry and alerts, investigate suspicious traffic and attempted intrusions, support incident containment, validate backups of device configurations, and test recovery procedures.
• Multi-site standards and execution: Conduct regular site security reviews; maintain network diagrams, configurations, change records, runbooks, and remediation plans. Coordinate changes with local IT teams while ensuring common corporate security baselines.
• Technical Leadership and Continuous Improvement: Serve as a technical escalation point for complex network and security issues. Provide technical guidance to IT personnel across locations, establish engineering standards, and lead initiatives that improve the security and reliability of enterprise infrastructure.

Required experience and capabilities

• 3-5 years of hands-on enterprise network administration/engineering, including direct responsibility for firewall security and multi-site connectivity.
• Proven ability to configure, troubleshoot, and secure at least one major next-generation firewall platform; ability to learn and support additional platforms.
• Strong TCP/IP, routing, VLAN, ACL, VPN/IPsec, switching, wireless, DNS, DHCP, and network troubleshooting skills.
• Experience managing security patches, firmware upgrades, vulnerability remediation, and change control on production network devices.
• Ability to investigate issues using logs, packet captures, traffic analysis, and a structured root-cause methodology.
• Practical understanding of attack paths, exposed services, credential-based attacks, segmentation, least privilege, and defense in depth.
• Clear documentation, sound risk judgment, and ability to coordinate with distributed IT staff and business stakeholders.
• Ability to independently investigate complex security incidents using firewall logs, packet captures, network traffic analysis, and other diagnostic tools.
• Experience implementing secure administrative access, privileged access controls, and network management security best practices.
• Ability to lead technical projects, make architecture recommendations, and serve as a escalation resource for network and security operations.

Preferred qualifications

Experience across Palo Alto, SonicWall, Sophos, and Fortinet; enterprise Wi-Fi and switch management; hybrid Active Directory/Entra ID environments; endpoint detection and response integration; CrowdStrike vulnerability scanning and SIEM/log monitoring; manufacturing or operational technology (OT) segmentation; Experience with high availability, disaster recovery, and business continuity design. Relevant vendor certifications (for example PCNSE, NSE/FCP/FCSS, CCNP, or equivalent) are valued, but demonstrated hands-on ability matters more than credentials.

What success looks like

• Internet-facing devices are inventoried, hardened, monitored, and patched within risk-based targets.
• Firewall rules and VPN access are reviewed regularly; unnecessary exposure and overly permissive access are reduced.
• Sites follow consistent segmentation, configuration, logging, backup, and change-control standards.
• High-risk findings have clear owners, remediation plans, and evidence of closure.
• When an outage or suspicious event occurs, you can diagnose the technical cause, restore service safely, and prevent recurrence.

The salary range in this posting depends on qualifications and experience. Actual compensation may vary, and this job posting is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee, which is always dependent on relevant experience, qualifications/education, and other factors including work schedule, shift premiums, and overtime.

Gleason is an Equal Opportunity Employer and considers applicants for all positions without regard to age, disability, genetic information and/or predisposing genetic characteristics, marital status, national origin, race/color, religion, sex/gender, sexual orientation, military or veteran status, victim of domestic violence status, arrest or conviction record, or any other characteristic protected by applicable laws.

OFFICE ENVIRONMENT

PHYSICAL DEMANDS

The physical demands described here are representative of those that would need to be met by an employee to successfully perform the essential functions of this job in an office environment. While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use hands to finger, handle, or feel; and talk or hear. The employee may occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job may include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus.

WORK ENVIRONMENT

The work environment characteristics described here are representative of those an employee may encounter while performing the essential functions of this job in an office environment. While performing the duties of this job, the employee is occasionally exposed to moving mechanical parts. The noise level in the work environment is usually moderate.

REASONABLE ACCOMMODATIONS

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, experience and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

This job description in no way states or implies that these are the only duties to be performed. Employees are required to follow any other instructions and to perform any other duties requested by their manager or supervisor.

DISCLAIMER

The duties listed in this job description are intended only as illustrations of the various types of work that may be performed and is not an all inclusive summary of job duties and responsibilities. The omission of specific statements or duties and responsibilities does not exclude them from the position if the work is similar, related or a logical assignment to the position. This job description does not constitute an employment agreement between the employer and employee and is subject to change by the Company as the needs of the Company and requirements of the job change.