IT OT Network Engineer

Position Summary

The Operational Technology (OT) Network Engineer is responsible for designing, implementing, maintaining, and securing the network infrastructure that supports Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), Distributed Control Systems (DCS), remote field operations, and critical infrastructure.

Key Responsibilities

• Remote Network & Telecommunications Management
  Assist with the specification, deployment, configuration, and ongoing maintenance of network and telecommunications hardware at remote field sites.
  Troubleshoot VPN tunnels, WAN connectivity, and remote communications issues between field locations and corporate infrastructure.
  Coordinate directly with Internet Service Providers (ISPs), telecommunications vendors, and local contractors to resolve communication issues.
  Participate in network planning, onboarding, and commissioning activities for new customer sites and remote facilities.

• Third-Party Vendor & Firewall Management
  Serve as the primary technical liaison between the organization and third-party firewall support providers.
  Manage support tickets, coordinate troubleshooting activities, and ensure timely resolution of network and security issues.
  Assist with firewall configuration reviews, policy changes, firmware updates, and ongoing security improvements.

• Access Control & OT Cybersecurity
  Administer and audit user access for technicians, operators, engineers, contractors, and customers.
  Manage role-based access control (RBAC), authentication, and security policies across OT systems.
  Ensure all network and security decisions align with Critical Infrastructure Protection (CIP) principles, NERC CIP requirements, defense-in-depth strategies, and proper network segmentation.
  Support vulnerability remediation efforts while minimizing operational impact to production systems.

• Azure Cloud & Hybrid Infrastructure
  Assist with the administration, maintenance, and optimization of the organization's Microsoft Azure environment.
  Support the migration from traditional infrastructure to a hybrid cloud architecture.
  Collaborate with leadership and technical staff to leverage Azure services that improve operational efficiency, customer services, and internal workflows.
  Participate in implementing secure connectivity between cloud and on-premises OT environments.

• Data Management, Research & Development, and Documentation
  Configure and maintain databases supporting historical operational data, network configuration information, and asset inventories.
  Develop comprehensive documentation for OT infrastructure, remote sites, and communication networks.
  Build and maintain an organized inventory and indexing system for remote facilities and network assets.
  Design, implement, and support a dedicated Research & Development (R&D) network segment for testing new technologies and validating system changes prior to production deployment.

• Network Engineering & Operations
  Design, configure, and maintain Layer 2 and Layer 3 industrial networks.
  Configure switches, routers, firewalls, VPN concentrators, wireless infrastructure, and industrial networking equipment.
  Support industrial communication protocols including: EtherNet/IP, Modbus TCP/IP, PROFINET, OPC UA, DNP3.
  Implement network segmentation, redundancy, and high-availability architectures appropriate for industrial environments.
  Monitor network health and proactively identify potential reliability or security issues.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Electrical Engineering, or a related field (or equivalent professional experience).
• 5+ years of experience administering enterprise and/or industrial networking environments.
• Strong experience with: Networking technologies, Industrial Ethernet, VPN technologies, Firewall administration, Routing and switching.
• Experience supporting remote field communications and telecommunications infrastructure.
• Working knowledge of Microsoft Azure administration.
• Experience documenting complex network environments and maintaining accurate technical documentation.
• Basic database administration experience (Microsoft SQL Server, PostgreSQL, MySQL, or similar).
• Strong understanding of industrial cybersecurity principles and network segmentation.

Preferred Qualifications

• Experience supporting SCADA, PLC, DCS, or other Industrial Control Systems (ICS).
• Familiarity with NERC CIP requirements and Critical Infrastructure Protection best practices.
• Experience working in utilities, renewable energy, water/wastewater, oil & gas, manufacturing, or other critical infrastructure industries.
• Experience with VMware or Hyper-V virtualization.
• Familiarity with scripting using PowerShell or Python.
• Experience with network monitoring and management platforms.

Desired Skills

• Strong troubleshooting and analytical skills.
• Excellent communication and documentation abilities.
• Ability to work independently while collaborating effectively across teams.
• Strong organizational and project coordination skills.
• A security-first mindset with an understanding of industrial operational constraints.
• The ability to prioritize production uptime while implementing technology improvements.