Network Engineer, OT

About the role

PROENERGY is an engineering, R&D, and manufacturing powerhouse addressing fast-start power generation needs. The Network Engineer, OT is responsible for designing, implementing, and maintaining enterprise-grade network infrastructure supporting both operational technology (OT) and IT systems across critical power generation facilities.

Responsibilities

• Design and implement sophisticated network architectures for SCADA, DCS, historian systems, and industrial control networks using Cisco Industrial Ethernet switches and Cisco Catalyst infrastructure.
• Engineer and maintain next-generation firewalls (NGFWs) for network segmentation, UTM, application control, and IPS/IDS functionality across IT/OT boundaries.
• Deploy and manage Cisco SD-WAN solutions for multi-site connectivity, optimize configurations, and implement advanced routing protocols (OSPF, EIGRP, BGP) for enterprise and industrial networks.
• Configure redundant network topologies utilizing protocols such as RSTP, PRP, HSR, and Cisco StackWise for high-availability industrial applications.
• Design and maintain enterprise Wi-Fi infrastructure using Wireless LAN Controllers and access point solutions for both corporate and industrial environments.
• Manage network infrastructure supporting virtualization platforms (VMware vSphere), cloud connectivity (Azure), and hybrid IT architectures.
• Deploy and optimize network monitoring solutions including SolarWinds, Cisco Catalyst Center, and FortiAnalyzer for comprehensive visibility across IT/OT environments.
• Architect and implement defense-in-depth security strategies and network access control (NAC) technologies.
• Configure and manage Firewall security policies, SSL/IPsec VPN tunnels, and secure remote access solutions for critical infrastructure personnel.
• Deploy and maintain intrusion detection/prevention systems (IDS/IPS) using next-gen technologies for continuous threat monitoring.
• Implement zero-trust network architectures, micro-segmentation strategies, and least-privilege access controls across IT and OT domains.
• Maintain comprehensive compliance with NERC-CIP and related standards for critical infrastructure protection.
• Conduct vulnerability assessments, penetration testing coordination, and security hardening of network devices following ISA/IEC 62443 and NIST Cybersecurity Framework guidelines.
• Lead incident response activities for network security events, coordinate forensic analysis, and implement corrective action plans.
• Configure and optimize industrial protocol communications including Modbus TCP/RTU, DNP3, OPC UA, IEC 61850, and Profinet across control system networks.
• Implement protocol gateways, serial-to-Ethernet converters, and ensure proper encapsulation for legacy industrial communications.
• Support historian database connectivity, real-time data acquisition systems, and SCADA master-to-RTU communication architectures.
• Design redundant communication paths for critical control functions utilizing diverse routing and automatic failover mechanisms.
• Troubleshoot deterministic Ethernet configurations, time-sensitive networking (TSN), and precision time protocol (PTP/IEEE 1588) implementations.
• Coordinate with controls engineers on PLC/DCS network requirements including Allen-Bradley ControlLogix, GE Mark series, and Siemens S7 platforms.
• Integrate OT networks with enterprise IT services including Active Directory, DNS, DHCP, NTP, and Windows Server infrastructure while maintaining proper segmentation.
• Configure and manage network infrastructure for Microsoft 365/Azure AD integration, site-to-site VPNs, and cloud service connectivity.
• Deploy network infrastructure for audio/visual conferencing systems, IP telephony (VoIP), and unified communications platforms.
• Manage patch management, firmware updates, and change control processes for network devices across IT and OT environments using ServiceNow or similar ITSM platforms.
• Monitor and optimize network performance utilizing advanced analytics, NetFlow/sFlow analysis, and packet capture tools (Wireshark, tcpdump) for troubleshooting.
• Implement redundancy and high-availability solutions ensuring 99.99% uptime for critical OT communications and 24/7 operational support capabilities.
• Conduct capacity planning, bandwidth analysis, and network lifecycle management to support growing operational and business data requirements.
• Design and test disaster recovery/business continuity procedures for network infrastructure, including backup configurations and restoration processes.
• Maintain comprehensive network documentation including logical/physical topology diagrams, IP address management (IPAM), and configuration management databases (CMDB).
• Lead network design and implementation for new facility construction, equipment installations, and technology refresh initiatives.
• Participate in commissioning activities, factory acceptance testing (FAT), and site acceptance testing (SAT) for control system network infrastructure.
• Provide technical leadership for vendor evaluations, RFP development, and technology selection processes for network equipment and services.
• Mentor junior engineers and technicians on advanced networking concepts, Cisco/Fortinet technologies, and OT security best practices.
• Develop and maintain standards, procedures, and technical documentation including network design templates and troubleshooting guides.
• Coordinate with IT Operations teams on service delivery, SLA management, and continuous improvement initiatives across infrastructure domains.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Electrical Engineering, or related technical discipline.
• Minimum 7-10 years of progressive experience in network engineering with at least 5 years focused on industrial/OT environments.
• Proven track record of managing complex, multi-site network infrastructure projects from design through implementation.
• Exceptional analytical and troubleshooting abilities for complex network issues in time-critical operational environments.
• Outstanding written and verbal communication skills with ability to translate technical concepts for diverse audiences including operations personnel and executive leadership.
• Strong project management capabilities with experience coordinating cross-functional teams and managing multiple concurrent initiatives.
• Demonstrated customer service orientation with focus on supporting 24/7 critical operations.
• Meticulous attention to detail for configuration management, documentation standards, and regulatory compliance.
• Expert-level proficiency with Cisco enterprise and industrial networking technologies including Catalyst switches, Nexus data center switches, ISR/ASR routers, and Industrial Ethernet (IE-4000/IE-5000) platforms.
• Advanced expertise in Fortinet FortiGate firewalls, FortiManager central management, FortiAnalyzer logging/reporting, and Security Fabric integration.
• Comprehensive knowledge of routing protocols (OSPF, EIGRP, BGP), switching technologies (STP/RSTP/MST), and VLAN design principles.
• Advanced experience with SCADA networks, DCS infrastructure, and industrial control system communications architecture.
• Strong proficiency in industrial protocols including Modbus TCP/RTU, DNP3, OPC UA, and Ethernet/IP.
• In-depth understanding of NERC-CIP Critical Infrastructure Protection standards, particularly CIP-005, CIP-007, and Electronic Security Perimeter requirements.
• Working knowledge of PLC/PAC technologies including Allen-Bradley ControlLogix, Rockwell Automation FactoryTalk, and Siemens SIMATIC platforms.
• Experience with network security technologies including VPN (IPsec/SSL), NAC, 802.1X authentication, and identity management solutions.
• Proficiency with network monitoring and management tools such as SolarWinds, Cisco Prime Infrastructure, PRTG, or equivalent platforms.
• Understanding of IT infrastructure including Windows Server environments, Active Directory, virtualization (VMware/Hyper-V), and cloud networking concepts.

Qualifications

• US work authorization is a precondition of employment.

Skills

• Experience with Cisco technologies, architecture, deployment, and management.
• Experience with Fortinet technologies, architecture, deployment, and management.
• Familiarity with network automation and scripting using Python, Ansible, or similar tools for infrastructure-as-code implementations.
• Experience with time-sensitive networking (TSN), deterministic Ethernet, and precision time protocol (PTP/IEEE 1588).
• Understanding of wireless industrial networks including WirelessHART, ISA100.11a, and private LTE/5G for industrial applications.
• Knowledge of fiber optics and other advanced networking technologies.

Benefits

PROENERGY offers competitive pay, excellent benefits that include Medical, Dental, Vision, and Life/Disability Insurance at minimal cost to the employee, 10 paid holidays, paid time off, and a 401K plan.

Pay

Competitive salary commensurate with experience.

Schedule

Full-time, 40 hours per week.