Network Security Engineer

Requisition Number: 77250

The company built on breakthroughs. ​  
Join us.​          

Corning is one of the world’s leading innovators in glass, ceramic, and materials science. From the depths of the ocean to the farthest reaches of space, our technologies push the boundaries of what’s possible.  ​  

How do we do this? With our people. They break through limitations and expectations – not once in a career, but every day. They help move our company, and the world, forward. ​  

​At Corning, there are endless possibilities for making an impact. You can help connect the unconnected, drive the future of automobiles, transform at-home entertainment, and ensure the delivery of lifesaving medicines. And so much more.​   

​ Come break through with us.  

Corning’s businesses are ever-evolving to best serve our customers, industries, and consumers. Today, we accelerate and transform life sciences, mobile consumer electronics, optical communications, display, automotive, and solar markets. We are changing the world with: 

• Trusted products that accelerate drug discovery, development, and delivery to save lives
• Damage-resistant cover glass to enhance the devices that keep us connected
• Optical fiber, wireless technologies, and connectivity solutions to carry information and ideas at the speed of light
• Precision glass for advanced displays to deliver richer experiences 
• Auto glass and ceramics to drive cleaner, safer, and smarter transportation 
• Solar polysilicon, wafers, and innovative photovoltaic modules, enabling low-cost solar energy solutions

Title: Network Security Engineer

SCOPE/PURPOSE OF POSITION:

We are seeking an experienced and highly skilled Network Engineer to join our team. In this position, you will be at the forefront of designing, implementing, and optimizing innovative network solutions supporting Corning’s businesses globally. This role requires solid experience with network technologies and network authentication, a proactive mindset and a strong focus on supporting reliable and secure global network.

As a Network Engineer, you will support the design, deployment, and maintenance of enterprise-wide Network Access Control solutions. You will work with platforms such as Cisco ISE to enforce secure access policies, integrate with authentication systems, and ensure compliance across diverse environments. Strong experience with automation and API integration is required to support scalable, Infrastructure as Code (IaC)-driven operations. Familiarity with OT or manufacturing environments is a plus.

ROLES AND RESPONSIBILITIES:

• Manage and administer ISE clusters to include design, implementation, and maintenance activities.
• Develop, implement, and support Network Access Controls (NAC) policies for user and device authorization to align with security compliance requirements.
• Development of radius policies for dynamic assignment of VLANs to associated devices or users as required. 
• Develop and support radius wireless policies for user/device authentication.
• Support TACACS device manager service for management of enterprise grade devices.      
• Work with other network technologies as needed.
• Maintain and update system certificates associated to ISE authentication processes.
• Troubleshoot ISE performance and end user authentication issues.
• Develops network design, documentation, and implementation plans for assigned projects.
• Performs proactive management and auditing of network, including event logs as needed.
• Document work via ServiceNow ticket system.
• Participate in after hours on-call, network maintenance windows and critical response activities.
• Assisting with implementation of new solutions, or upgrades to existing solutions, including communications, preparation of documentation and training.
• Participating in root cause analysis on incidents, helping to drive identification of preventative actions meant to ensure problems don’t recur, and delivering on the tasks within those actions.

EDUCATION REQUIREMENTS

4-year degree or equivalent combination of education and experience

WORK EXPERIENCE

• Experience in the deployment and support of Cisco ISE environments in support of wired/wireless/data network functions/tools/processes in a large enterprise environment.
• Experience supporting large, complex enterprise network systems.  
• Experience aligning infrastructure requirements with working in both manufacturing and office environments.

REQUIRED SKILLS

• Fluent in English, with excellent verbal and written communication skills
• Experience as a Cisco ISE Engineer creating design documentation, building ISE rules, policies, implementing ISE solutions across a variety of environments, and serve as a subject matter expert.
• Hands-on experience with automation, Infrastructure as Code (IaC), and API integrations, using tools such as Python and Ansible to streamline NAC deployments and policy enforcement.
•  
• Experience as a systems or infrastructure engineer, working directly with wired and wireless network technologies on an enterprise scale.
• Demonstrated initiative, flexibility, and ability to adapt to changing priorities and work environments.
• Proven ability to build and facilitate relationships at all levels of the organization, both internally and externally.
• Knowledge of application transport and network infrastructure protocols.
• Ability to create accurate network diagrams and documentation for design and planning network communication systems.
• Excellent communications, interpersonal and influencing skills.
• Demonstrated track record of on time delivery within budget; ability to drive projects to successful conclusion using influencing tools.
• Successfully navigate within teams across multiple initiatives, spanning various lines of business, geographic borders, time zones, and cultures.
• Will be required call available for after-hours support and an on-call rotation.

DESIRED SKILLS

• Certified Information Systems Security Professional (CISSP)
• Network certifications such as: Cisco Certified Network Professional (CCNP) or Cisco Certified Design Professional (CCDP) certification
• Knowledge of traffic analysis and performance, and network capacity/tools experience
• Experience with multi-vendor network environments including Juniper Mist, Arista and others to ensure consistent policy enforcement across diverse infrastructure
• Understanding of Agile methodologies and ability to work in Agile-drive environments

TRAVEL:

• Potential travel of up to 25%, which may include international destinations. During critical projects may be higher.