Manager Network

Summary of Position

Manage Curium’s global Network Services within the hosting domain (IT & OT), ensuring reliable, secure and compliant connectivity across NA, EMEA and APZ. This management-focused role is accountable for day-to-day run of LAN/WAN/SD‑WAN, WLAN, remote access, DDI (DNS/DHCP/IPAM), load balancing and cloud networking; the operational management of enterprise firewalls (policy lifecycle, changes, posture) for both IT and OT; SLA/OLA performance; and resource/capacity planning to support infrastructure and business projects. Participate in Intake/ARB by providing FTE sizing and capacity estimates for initiatives in scope.

Work Schedule: M - F 8am - 5pm

Essential Functions

Principal Responsibilities of the Role

• Own end‑to‑end delivery of network services (LAN, WAN/SD‑WAN, WLAN, Internet egress, remote access/VPN, DDI, load balancing, cloud networking) with SLA/OLA definition, measurement and improvement; run monthly service reviews with KPI trends (availability, latency, packet loss, change success, incident/problem).
• Operate and continuously improve enterprise firewalls across IT & OT (policy lifecycle, change control, rule hygiene, recertification, segmentation/DMZ controls, logging/monitoring) and ensure alignment to security baselines and standards.
• Ensure all network devices (firewalls, SD‑WAN, switches, wireless controllers/APs, load balancers) are patched/updated per vulnerability management cadence; track compliance, report exceptions and coordinate emergency remediation for critical CVEs.
• Govern Incident/Problem/Change for network; chair/participate in CAB; lead major network incident bridges through to PIR and closure.
• Maintain the service catalogue and underpinning OLAs/UCs (ISPs, carriers, MSPs); manage capacity, performance and resilience (HA, failover, DR patterns for connectivity).
• Provide project resources and capacity planning for infrastructure and business projects; balance run vs. change; contribute FTE sizing at Intake/ARB and ensure network NFRs are met.
• Drive IT/OT network segmentation (e.g., Industrial/Internal DMZ, VLAN/VRF, allow‑list models) and partner with Security for monitoring (NetFlow, IDS/IPS) and zero‑trust controls.
• People leadership: build and coach a high‑performing global team; ensure on‑call and follow‑the‑sun operations; uphold documentation, standards and handovers.
• Compliance & Quality: ensure adherence to Curium policies/SOPs (Change, Patch & Vulnerability, CMDB/CI accuracy, Qualification where applicable); support internal/external audits.
• Vendor and financial management: manage telco/ISP/MSP performance against SLAs; contribute to budgeting and cost optimisation while safeguarding service quality.
• Must maintain operational compliance with US and international regulatory agencies and guidelines (i.e. FDA, DEA, EU, HC, TGA, PIC/S, ISO, USP, NRC, cGMP, etc.).

Requirements

Must‑have Experience/Skills

• Proven leadership of network operations teams across NA/EMEA/APZ with measurable SLA improvements.
• Deep operational knowledge of LAN/WAN/SD‑WAN (Fortinet or equivalent), WLAN, remote access/VPN, DDI (DNS/DHCP/IPAM), load balancing and cloud networking (Azure).
• Hands‑on firewall operations for both IT & OT: rule design and recertification, DMZ patterns, segmentation and micro‑segmentation, NAT, logging/monitoring and change control.
• Patch & vulnerability management for network appliances (firmware/software) including emergency remediation coordination and compliance reporting.
• Strong ITIL/ITSM practice for Incident/Problem/Change and Service Catalogue; ServiceNow reporting; major incident leadership and CAB participation.
• Solid understanding of IT/OT networking models (e.g., Purdue), industrial DMZ concepts, and collaboration with plant/site operations.
• Excellent stakeholder communication and executive reporting; ability to translate risk/performance into business terms.

Nice‑to‑have Experience/Skills

• Certifications: Fortinet NSE, Cisco CCNP/CCIE, Azure Network Engineer, ITIL 4, ISA/IEC 62443 familiarity.
• Experience with SASE/ZTNA, NAC, proxy/secure web gateway and SIEM integrations.
• Experience in regulated pharma/life‑science (GxP) with qualification/validation awareness for network/firewall changes.

Education

Preferably holds a Bachelor of Science degree in Computer Science, Information Technology, Network Engineering or a related field.

Working Conditions:

• Willingness to work in plant producing radioactive materials and requiring all employees to participate in safety programs designed to minimize potential and/or actual exposure levels.
• Responsibilities include the ability to lift up to 70 pounds, kneeling, crouching, twisting the upper body, walking, bending, stooping, pushing, pulling, reaching, must be able to physically negotiate stairs and evacuation ladders with or without accommodation, wear and operate safety equipment, enter vessels, and inspect equipment.  
• Material handling devices (e.g., hand truck, fork truck, and conveyors) are used when possible, however, use of proper lifting and movement techniques is necessary to prevent injury.
• Must be willing to wear a variety of Personal Protective Equipment (PPE) and hearing protection as needed.
• May be required to sit or stand for long periods of 8+ hours a day while performing duties.  
• Must possess good hand-eye coordination; close attention to detail is required.
• Must be able to work indoors and outdoors with exposure to mechanical/moving parts, hazards including corrosive, flammable and toxic material, dust, dirt, odors, and irritants. 
• Willingness to complete safety training within allotted timeframes, and work in a team-based environment.
• Must be able to work outside of regular work hours, including off shift, weekend, and holiday work as business needs require.