Network Security Architecture Engineer( MPN2 segmentation/OT segmentation)

Title: Network Security Architecture Engineer( MPN2 segmentation/OT segmentation )

Location: Gothenburg, Sweden (Hybrid)

Employment Contract.

Job Description:

8–10+ years in network security architecture with proven IT + OT segmentation projects.

Design and lead execution of MPN2 segmentation for Engineering rigs and PVÖ stations, aligning with Volvo’s Segmentation Blueprint (IEC 62443 / NIST, Purdue aligned) and Network Security guardrails.

Drive per area cycle: plan → design zones/subnets & policies (autogenerate/clean) → implement/activate/verify → document & hand over.

Produce security zone definitions, dedicated subnets, object/group structures, and firewall rules; coordinate implementation with Firewall & LAN teams.

Analyze flows (e.g., via NetFlow/AppViz) to define least privilege policies; manage rule cleanup and avoid shadowing.

Ensure remote support standard is applied; validate with rig owners and run migration tests; define rollback and verification steps.

Document in Algosec AppViz and IPAM; assign/record ownership for AppViz definitions; contribute to CMDB Excel lists.

Confirm DoD gate: MPN2 migration completed; policies refined; facility nodes moved to WPX; endpoint compliance (OS, tools, auto patching) is achieved per area.

Mandatory skills:

Expertise with Purdue model segmentation and controls aligned to IEC 62443 / NIST, Strong with firewall policy design/cleanup, Algosec AppViz, and working knowledge of Panorama/IPAM. Comfortable engaging rig owners (engineering test benches, HIL, DAQ), balancing uptime with cutover plans.

Desired skills:

Comfortable engaging rig owners (engineering test benches, HIL, DAQ), balancing uptime with cutover plans.