IT Infrastructure Engineer

About the role

The IT Infrastructure Engineer oversees and secures the enterprise IT networks and field Operational Technology (OT) infrastructure powering pipeline operations. This role ensures continuous high availability, optimizes remote telemetry communications, strengthens Industrial Control System (ICS) security baselines, and deploys scalable network architectures and compliance frameworks. The position reports directly to the Technology Manager.

Responsibilities

• Maintain, optimize, and troubleshoot enterprise and field data communications, including cellular, satellite, radio telemetry, SIM management, and static IP assignments across distributed assets.
• Develop, implement, and enforce IT and OT cybersecurity standards, baseline policies, and operational procedures to safeguard critical infrastructure.
• Integrate cybersecurity architecture and security controls into operational capital projects and infrastructure expansions.
• Configure, manage, and routinely audit firewalls to maintain strict network segmentation between IT and OT environments (e.g., Purdue Model / IEC 62443).
• Conduct cybersecurity risk assessments and audits, implementing security controls aligned with industry standards (e.g., NIST SP 800‑82, API 1164, ISA/IEC 62443).
• Support and secure industrial automation protocols (Modbus, DNP3, OPC, MQTT, and proprietary drivers) to ensure high availability and data integrity between field PLCs/RTUs, SCADA/DCS systems, and corporate enterprise applications.
• Continuously monitor enterprise and OT network traffic for performance degradation, protocol anomalies, potential security breaches, and unauthorized access attempts.
• Serve as primary contact for IT/OT cybersecurity incidents, performing rapid containment, root‑cause analysis, and threat remediation.
• Lead efforts to evaluate and deploy emerging cybersecurity and networking technologies, ensuring alignment with regulatory and industry requirements.
• Conduct onsite visits to field and office locations across Texas and Louisiana (up to 15% travel).

Requirements

• Network & Infrastructure (5+ years)
  • Advanced proficiency in TCP/IP, DNS, DHCP, ARP, BGP, OSPF, and MPLS.
  • Designing and deploying LAN, WAN, VLAN, and secure site‑to‑site VPN configurations.
  • Hands‑on experience with routers, switches, firewalls, IDS/IPS, NAC, and load balancers.
  • Knowledge of enterprise wireless networking, industrial radio/cellular communications, access point deployment, and wireless security protocols.
  • Expertise in network monitoring and packet analysis tools for real‑time troubleshooting.
  • Automation & scripting experience using Python, Bash, or infrastructure‑as‑code tools (Ansible, Puppet, Terraform).
• Operational Technology (OT) & Compliance (3‑5 years)
  • Experience setting up and securing OT environments (DCS, ICS, PLCs, field automation).
  • Working knowledge of pipeline and industrial control standards, including DOT, API, and ISA (e.g., ISA/IEC 62443).
• Certifications
  • CompTIA Network+
  • Cisco Certified Network Associate (CCNA)
  • Certified Information Systems Security Professional (CISSP) or equivalent industrial cybersecurity credential (e.g., GICSP)

Benefits

• Employer‑matched 401(k)
• Medical, dental, and vision insurance
• Basic life and AD&D insurance
• Other benefit offerings
• Location: Austin, Texas or Houston, Texas (in‑office position)

Schedule

Monday–Friday schedule with extended hours and an on‑call rotation (nights, weekends, and holidays) to support continuous 24/7 operations.