Sr Principal Network Engineer

Company Overview CB&I delivers integrated storage and asset‑management solutions that help customers operate safely, reliably, and efficiently across the lifecycle of their facilities. Through our two global business units - Storage Solutions, the world leader in tanks, terminals, and storage systems, and Asset Solutions, a leading provider of operations, management, wells and decommissioning services - we combine technical excellence with execution capability to extend asset life, optimize performance, and maximize value. Overview CB&I® is the most experienced and the only worldwide builder and designer of industrial storage products and facilities. Headquartered in Houston, Texas, CB&I has the global expertise and strategically located operations to provide engineering, procurement and construction solutions for our customers’ most complex energy projects. The Senior Principal Technology Specialist – Senior Network Engineer addresses complex, high-impact challenges by combining strategic vision with hands-on expertise. An expert in data communications and network security, the Senior Principal Technology Specialist architects, secures, and scales data and firewall solutions while guiding the direction and resource allocation of projects and programs. This Individual Contributor role reports directly to the Director, Information Technology Infrastructure and routinely interacts with Global IT, Business Leads, Project Management, Engineering, and Operations. Responsibilities Develop and execute a strategic vision for the enterprise and data center networks, security perimeters, and telecommunications environments by leveraging innovative technologies, implementing industry best practices, and driving continuous improvement to optimize service delivery and elevate customer satisfaction. Design, configure, implement, and maintain secure, scalable, and resilient network infrastructure, firewalls, security perimeters, wireless networks, cloud environments, third-party integrations, security tools, SASE, and supporting auxiliary systems such as monitoring, DHCP, and DNS. Collaborate with IT teams, cross-functional teams, and third parties to gather business requirements, assist with business plan development, and implement technologies such as integrated innovative network infrastructure, security controls, cloud solutions, and applications, while ensuring seamless and future-ready operation across the organization. Execute a wide range of network and security initiatives, including deploying and integrating technologies across the global enterprise to securely manage data traffic flows and access management for systems and applications.  Engineer, deploy, and operate monitoring tools to enable visibility, control, proactive mitigation, system health, and operational effectiveness. Analyze network performance data and implement strategies to optimize system performance, such as bandwidth utilization, network throughput, routing, call quality, hardware and software turning, application filtering, and response times. Design and implement predictive and preventive system maintenance techniques, including lifecycle management strategies. Design and implement integration services with Third-Party Systems, IAM, cloud services, next generation firewalls, DNS services, WAF, CDN, and SaaS. Adapt leading security frameworks NIST, CIS, ISO, CSA, and CB&I specific security controls to enhance cybersecurity effectiveness. Develop and implement robust security policies, processes, and technology systems specific to network, firewalls, security perimeters, and telecommunications domains in collaboration with the Cybersecurity team. Develop, review, maintain, and disseminate comprehensive and accessible documentation, including configuration details, changes, troubleshooting guides, standard operating procedures, business processes, and runbooks to ensure operational clarity and compliance. Leverage network, cybersecurity, and telecommunications governance expertise and infrastructure frameworks to develop and enforce policies and procedures that support continuous improvement and compliance. Serve as a subject matter expert within your area of responsibility, mentoring members of the global IT organization, delivering technical and operational cross-training, and providing advanced support for problem-solving and root cause analysis. Collaborate with Disaster Recovery (DR) and Business Continuity stakeholders to design, implement, and maintain comprehensive disaster recovery plans and strategies, ensuring continuous availability and resilience of network, firewall, security perimeter, and VoIP/telephony services during outages, natural disasters, or cybersecurity incidents. Qualifications Minimum bachelor's degree in computer science, Computer Engineering, Management Information Systems, or related field or equivalent work experience. Preferred 15 or more years of LAN/WAN, enterprise, and data center network, routing, switching, and wireless experience. Minimum 8 years designing, configuring, and maintaining, Palo Alto or Cisco firewall policies, security rules, NAT, VPNs (IPSec/SSL), and application-based filtering Security appliance experience integrating firewalls and security solutions with (SIEM, IDPS/IPS, and Threat intelligence), centralized firewall administration and policy orchestration using tools such as Panorama and conduct rule base and configuration reviews ensuring audit and control compliance. Minimum 4 years of cloud network and infrastructure technologies experience Experience designing, configuring, and implementing unified communications a plus. VoIP, Telephony on-prem and cloud, conference systems, third-party telephony integration, SIP, and PSTN. Preferred certifications or equivalent: Cisco CCNP Enterprise or Security, PCNSE, MS Azure Network, Network + In-depth experience designing, implementing, maintaining, and troubleshooting converged global n