Manager - Network and Security

About Mesabi Metallics

When you join the team at Mesabi Metallics, you become part of a pioneering group advancing sustainable mining practices and driving innovation in the iron ore industry. Our commitment extends to providing a safe work environment, supporting environmental stewardship and generating value for all stakeholders. You will be joining us at a pivotal moment in Minnesota’s mining history: Mesabi Metallics’ cutting-edge iron ore mining and pelletization project is currently under construction. Once completed, it will mark the first new mine and pellet plant in Minnesota in nearly 50 years.

More importantly, you'll be immersed in a positive, supportive work environment that values your contributions and fosters your professional growth. Our culture is shaped by our core values which are sustainability, integrity, inclusivity, innovation, teamwork, determination and performance, and our employees are empowered to make a difference every day.

At Mesabi Metallics, you are part of a legacy of excellence, playing a key role in shaping the future of global infrastructure and industry.

Position Summary

The Network and Security Manager is responsible for managing and overseeing Mesabi Metallics's network infrastructure, ensuring the integrity, performance, and security of the network systems. This role involves designing, implementing, and maintaining secure network configurations, monitoring network performance, troubleshooting network issues, and safeguarding the organization’s data and IT infrastructure from cyber threats.

Job Responsibilities

The Manager - Network and Security will be responsible for the following:

• Architect and design secure, scalable, and high-performance network infrastructures to meet organizational needs.
• Develop and implement robust security frameworks, policies, and standards in line with best practices.
• Identify potential risks in the network and security landscape and propose effective mitigation strategies.
• Design complex network topologies, integrating firewalls, VPNs, intrusion detection/prevention systems, and secure remote access.
• Oversee the deployment and configuration of network devices such as routers, switches, firewalls, VPN gateways, and wireless access points.
• Implement enterprise-grade security solutions, including advanced firewalls, endpoint security systems, SIEM solutions, and network monitoring tools.
• Collaborate with vendors for procurement and implementation of technologies to meet organizational needs and budget constraints.
• Ensure compliance with security regulations such as GDPR, HIPAA, PCI DSS, and others where applicable.
• Manage incident response efforts, providing guidance in the identification and remediation of security threats and vulnerabilities.
• Provide 24/7 network support for troubleshooting, diagnosing, and resolving network and security-related issues.
• Continuously monitor and optimize network performance, ensuring minimal downtime and high availability of services.
• Conduct regular vulnerability assessments and penetration testing to ensure the network is secure against emerging threats.

Skills and Qualifications

• Networking: Proficient in TCP/IP, DNS, DHCP, BGP, OSPF, MPLS, VLANs, and wireless technologies (Wi-Fi, Wi-Fi6).
• Security: Strong knowledge of firewalls (Palo Alto, Cisco ASA, Fortinet), intrusion detection/prevention systems (IDS/IPS), VPNs, endpoint security, and encryption.
• Cloud Security: Hands-on experience securing cloud environments (AWS, Azure, GCP) and leveraging cloud-native security features (e.g., AWS Security Hub, Azure Security Center).
• Network Automation: Familiarity with network automation using tools like Ansible, Python, and Cisco DNA Center.
• Monitoring Tools: Experience with network monitoring solutions (e.g., SolarWinds, Nagios, PRTG) and Security Information and Event Management (SIEM) tools like Splunk, LogRhythm.
• Virtualization: Knowledge of SDN (Software-Defined Networking), virtualization technologies (VMware, Hyper-V), and network virtualization in cloud environments.
• Leadership: Ability to manage a team of network engineers, security specialists, and system administrators, fostering collaboration and ensuring optimal performance.
• Project Management: Experience in leading network and security projects, from design through implementation and ongoing support.
• Vendor Management: Expertise in managing vendor relationships, ensuring SLAs are met, and evaluating new technologies.
• Incident Management: Ability to lead the response to critical incidents, ensure effective troubleshooting, and mitigate the risk of future incidents.
• Regulatory Compliance: Understanding of regulatory frameworks (e.g., GDPR, HIPAA, PCI DSS) and how to integrate compliance into network security designs.
• Problem-Solving: Strong analytical skills for resolving complex technical issues.
• Communication: Ability to explain technical concepts in non-technical terms to senior leadership, stakeholders, and clients.
• Adaptability: Keeping up with evolving technologies and security threats and continuously improving the network infrastructure.
• Attention to Detail: Ensuring network configurations are accurate and security protocols are meticulously followed.

Education

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent work experience. Master’s degree in Information Security or related fields preferred.
• 5-10 years of experience in network and security management, with at least 3-5 years in a leadership role.
• Proven track record of designing and implementing large-scale network infrastructures, including experience with cloud-based solutions and hybrid environments.
• Hands-on experience with network security practices, managing security teams, and deploying security technologies.
• Extensive experience in leading complex IT projects, managing timelines, resources, and stakeholders.
• Cisco Certified Network Professional (CCNP) or Cisco Certified Internetwork Expert (CCIE)
• Juniper Networks Certified Internet Specialist (JNCIS) or Juniper Networks Certified Internet Expert (JNCIE)
• Certified Information Systems Security Professional (CISSP) 
• Certified Ethical Hacker (CEH) 
• CompTIA Security+ 
• Certified Information Security Manager (CISM) 
• Certified Cloud Security Professional (CCSP) 
• AWS Certified Solutions Architect 
• ITIL Foundation 

Physical Requirements

• Ability to work in both mining and plant environments, including exposure to dust, noise, and varying weather conditions.
• Capability to perform physical tasks, such as lifting, inspecting equipment, and navigating uneven terrain.

Benefits:

• Health Insurance: Comprehensive medical and dental coverage with an HSA option.
• Retirement Plan: 401(k) with 6% company match.
• Lincoln STD, LTD, & Life Insurance: Coverage provided by Mesabi Metallics.
• Paid Time Off (PTO): 0-5 Years: 120 hours per year. 
  5-10 Years: 160 hours per year. 
  10+ Years: 200 hours per year.
  Plus 9 paid holidays.

Mesabi Metallics Company LLC is an equal opportunity employer and values diversity in the workplace. We are committed to creating an inclusive environment where all employees feel valued, respected, and empowered to contribute to our success.