Network Security Controls Senior Manager

Network Security Controls Senior Manager Locations: Arlington, VA; Auburn, WA; Berkeley, MO; Chicago, IL; El Segundo, CA; Everett, WA; Huntington Beach, CA; Huntsville, AL; Long Beach, CA; Mesa, AZ; North Charleston, SC; Oklahoma City, OK; Plano, TX; Renton, WA; Ridley Park, PA; San Antonio, TX; Seal Beach, CA; Seattle, WA; Wichita, KS. Overview As a senior manager in the Cyber Protection and Defense (CPD) organization, you will provide technical leadership and organizational management to build secure and modern Network Security Controls. You will report to the Deputy Chief Information Security Officer and be responsible for designing and delivering network security controls that improve the resilience, security, and scalability of the enterprise’s defense posture. Position Responsibilities Lead, mentor, and grow a multi-discipline network security engineering team (7–12 direct reports) supporting firewalls, VPN/remote access, zero trust network access, SASE/SSE, DNS filtering, NAC, micro-segmentation, wireless, Wi‑Fi, and network detection capabilities. Define and execute the network security product roadmap aligned to zero trust priorities and the broader CPD strategy. Drive the networking aspects of the enterprise Zscaler implementation, including ZIA and ZPA services. Build and maintain the network security control plane: design, engineering and lifecycle management of PaloAlto next‑generation firewalls, GlobalProtect, Prisma, DNS filtering, WAF, DDoS, NAC, micro‑segmentation, and detection tools. Champion modern engineering practices such as infrastructure as code, automated testing, and continuous improvement of the engineering lifecycle. Partner with other cyber control areas (IAM, endpoint, data, application, cloud security) to deliver Zero Trust across the organization. Establish an operational hand‑off model for day‑to‑day support, patching, and incident handling with Infrastructure & Operations. Manage vendor relationships, contracts and quarterly business reviews for PaloAlto and Zscaler and other network vendors. Serve as the ISO control owner for network security controls, managing findings and reconciling with Boeing policies. Support corporate audit and policy compliance for network security processes. Provide consulting to business units to influence adoption of security policies and network controls. Manage and secure the messaging backbone to protect Boeing email from spam, malware, and phishing. Own rule sets for International Traffic in Arms Regulations and non‑Boeing access filtering globally. Own capacity planning, cost management, and platform health reporting for network security services. Hire, retain, and develop senior contributors and team leads, including career development and performance reviews. Provide cost, risk, and impact analysis for network security design and operational decisions; present to executive stakeholders. Basic Qualifications (Required) Bachelor’s degree or higher. 10+ years experience in systems engineering, integration, software or electrical engineering, or cybersecurity. 10+ years experience with security risk analysis, network communication concepts, principles and architectures. 10+ years experience on cross‑functional or cross‑business teams with executive interface. 5+ years experience with PaloAlto firewalls. 3+ years experience with Zero Trust principles and architecture. 3+ years experience as a manager of people. Preferred Qualifications (Desired) Master’s or higher in Computer Science, Cybersecurity, Information Technology or related field. One or more recognized industry certifications such as CISSP, CCSP, or equivalent. Zscaler and/or PaloAlto certifications (e.g., PCNSE, PCDRA). Experience leading a Zero Trust program or major SASE/SSE migration. Experience integrating network security with identity systems (EntraID, Okta, Ping, etc.) for ZTNA and conditional access. Experience with public cloud security across AWS, Azure, or Google Cloud. Experience with regulatory/compliance frameworks (SOC2, ISO27001, FedRAMP, PCI, HIPAA, NIST CSF). Experience with NAC (CiscoISE, Aruba ClearPass), DNS security (CiscoUmbrella, Infoblox), or NDR (ExtraHop, Vectra, Darktrace). Experience with infrastructure‑as‑code (Terraform, Ansible) and policy‑as‑code for network automation. Vendor and contract management experience with major cyber vendors. Conflict of Interest Successful candidates must satisfy the company’s COI assessment process. Drug Free Workplace Boeing is a drug‑free workplace. Post‑offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol as per company policies. Pay & Benefits The role offers a competitive base pay and variable compensation. Eligible employees may enroll in health insurance, flexible spending accounts, health savings accounts, retirement plans, life and disability insurance, paid and unpaid time off, and other benefits as per location and eligibility. Summary Pay Range $150,450 – $233,450. Language Requirements Not applicable. Education Bachelor’s Degree or Equivalent. Relocation Relocation assistance is not a negotiable benefit for this position. Export Control Requirement Position requires a “U.S. Person” as defined by regulation. A U.S. Person includes a U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. Safety Sensitive This is not a safety‑sensitive position. Security Clearance Not required. Visa Sponsorship Employer will not sponsor applicants for employment visa status. Shift Shift 1 (United States of America). EEO Statement Applicants are considered without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status, or any other protected characteristic. EEO is the law. Boeing EEO Policy requests accommodations. Applicant privacy is protected. Boeing participates in E‑Verify. #J-18808-Ljbffr Boeing