Cybersec Systems Engineering Analyst – Network Defense Substation Def & FW Compliance

Important Application Submission Information

In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Sunday, May 24, 2026

More than a career - a chance to make a difference in people's lives.

Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

Job Summary

The Cybersecurity System Engineer role provides technical oversight and support of the Palo Alto Networks, Cisco ASA, and Fortinet platforms. Additionally, the role will support NERC CIP, TSA, PCI, and SOX compliance initiatives including evidence generation, document reviews, requirement implementation, and audits. The role will support various Cybersecurity projects and business process enhancement requests. Ideal candidates would have experience administering platforms used by Duke Energy and adhering to regulatory requirements in a large enterprise environment. A strong understanding of enterprise networks, hands-on experience architecting and implementing firewall security policy, and any relevant industry certifications are preferred. Position will work closely with various internal and external business areas to help align platform capabilities with compliance requirements and business processes.

Responsibilities

• Maintain network protection devices across multiple OT sites, generation facilities, and data centers connected to several thousand servers, routers, and other OSI Layer 3 devices .

• Work with transmission engineers to implement and/or troubleshoot OT related communications (e.g. ModBus/DNP3).

• Monitor system health, respond to customer inquiries, and oversee system management.

• Develops automated work flows to help drive efficiency in the environment.

• Periodically performs firewall rule optimization and reviews.

• Manage the system including software updates, SSL certificates, and hardware life-cycle refreshes when needed.

• Works closely with governance groups to meet activities that support various regulatory

• requirements.

• Assists with managing vendor relationships and manages statement of work engagements with vendor.

• Assists with establishing solution roadmap.

• Recommends feature adoption as appropriate for enhancement of security or efficiency in managing security assets.

• Leads/participates in Cybersecurity projects and initiatives.

• Drives security requirements through the organization.

• Proactively identifies/recommends solutions/resolves potential security gaps.

• Participation in 24x7 system environment including on-call periods and some nights and weekends as needed.

• Provides increased availability during Storm Mode, wide impacting major incidents (MIs), and security incident response events.

• Adheres to proper Change Management and Human Performance requirements and processes.

• Represents Cybersecurity professionally in interaction with internal business partners and other IT Support groups.

• Responsible for understanding the global threat environment and general security best practices.

• Drive continuous improvement of processes and procedures to improve analysis, detection, and mitigation of incidents in support of the overall Cyber Defense mission.

• Provide audit support to internal and external groups as required.

• Collaborate as appropriate with leadership and other key stakeholders.

• Maintain current skills and develop new skills as required by changes in business processes and technology.

Basic/Required Qualifications

• High School/GED

• Minimum 6 years related work experience

Desired Qualifications

• Previous Duke Energy Experience

• CCNA or higher certification

• CISCO Certified - CCNA and/or Palo Alto Networks Certified Network Security Engineer (PCNSE) and/or CISSP

• Network engineering/design/project experience

• Extensive experience in firewall security policy architecture and implementation.

• Experience in firewall administration

• Scripting experience for system automation, maintenance and operations (i.e., Bash