OT Network Engineer
The AES Corporation · Houston, TX · 4 wk ago
On-siteInformation TechnologyFull-time
Primary Responsibilities
- Design and deploy Cisco network infrastructure (routers, switches, and firewalls) across multiple renewable energy sites
- Configure and maintain Cisco Firepower/FTD firewalls and Cisco SD-WAN architecture
- Build and monitor IPsec/GRE tunnels between data centers, substations, and field devices
- Ensure high availability and redundancy across primary and secondary data centers
- Manage site connectivity including private circuits, LTE failover, and remote access solutions
- Support SCADA network integration and ensure proper segmentation between IT and OT networks
- Collaborate with vendors for network commissioning, circuit turn-up, and troubleshooting
- Implement network monitoring, logging, and alerting for uptime and security
- Afford cybersecurity compliance activities (e.g., NERC CIP or company internal policies)
- Afford controlled change management processes and scheduled maintenance windows
- Maintain accurate network documentation, IP address plans, and device inventory
- Collaborate on infrastructure and compliance-related projects (e.g., network upgrades, site expansions, datacenter migrations)
- Communicate clearly with technical and non-technical stakeholders
Qualifications
- Bachelor’s Degree (Information Technology / Computer Science / Network Engineering) preferred or equivalent with relevant work experience required.
- 5+ years’ experience to include:
- Cisco network engineering (routing, switching, and firewalls)
- Experience with Cisco Firepower/FTD, ASA, and SD-WAN platforms
- Strong knowledge of IPsec/GRE VPN tunnels, BGP, OSPF, and VLAN architecture, and routing protocols (BGP, OSPF, EIGRP).
- Familiarity with network monitoring tools (e.g., SolarWinds, PRTG, or similar)
- Solid grasp of firewall rules, security zones, and remote access configurations
- Experience working in regulated or compliance-driven environments
- Solid written and verbal communication skills
- Ability to work independently and manage multiple technical responsibilities
- Physical ability to lift and maintain 70 LBS for short period of time
- Able to travel up to 25% and in field environments during project commissioning and support remote site deployment
Additional Qualifications
- Cisco certifications (CCNA, CCNP, or equivalent)
- Experience working with industrial communication protocols (Modbus, DNP3, IEC 61850)
- Experience supporting NERC CIP compliance in OT/ICS environments
- Familiarity with SCADA protocols and IT/OT convergence
- Experience with LTE/cellular failover and remote-access VPN solutions
- Knowledge of AES infrastructure standards and operational practices