OT System Administrator

About the role

This role spans the full breadth of enterprise systems administration: Windows and Linux server management, VMware virtualization, NetApp storage, RSA authentication, enterprise backup and recovery, and the supporting infrastructure that keeps OT environments stable and audit-ready.

Responsibilities

• System Administration & Operations
  • Administer and maintain Windows Server and Linux systems supporting OT environments, including control centers, ancillary applications, and field-connected infrastructure.
  • Manage VMware virtualization platforms (vSphere, ESXi, vCenter) including virtual machine provisioning, template management, resource allocation, and performance tuning.
  • Administer NetApp storage infrastructure including volume provisioning, snapshot management, replication configuration, and capacity planning.
  • Manage RSA authentication infrastructure, including token administration, user provisioning, and integration with OT access control systems.
  • Perform routine system health checks, capacity monitoring, and performance tuning across OT-connected servers, applications, and storage platforms.
  • Provide scheduled on-call and incident response support for OT systems as part of a 24/7 rotation.
• Endpoint, Server & Field Device Build/Deploy
  • Build, image, configure, and deploy Windows-based workstations and field devices, including Remote Terminal Units (RTUs), for control center and field site environments.
  • Build and deploy physical servers and rack infrastructure, including hardware configuration, OS installation, hardening, and integration into OT environments.
  • Build and provision virtual servers within VMware environments from template or bare configuration through production-ready baseline.
  • Maintain standardized build documentation and configuration baselines for all endpoint, server, and field device types.
  • Carefully coordinate field deployments with OT operations teams to minimize operational impact during installation and cutover activities.
  • Manage physical hardware assets including procurement coordination, imaging, asset tracking, and compliant end-of-life disposal.
• Patch Management & System Hardening
  • Apply vendor-released security patches and updates.
  • Monitor FoxGuard advisories and vendor security bulletins on a weekly basis to assess patch criticality and prioritize remediation.
  • Implement and maintain system hardening configurations aligned to internal security baselines across Windows, Linux, and virtualization platforms.
  • Maintain auditable patch records and configuration baselines to support compliance reviews and audit evidence requests.
  • Utilize enterprise patch management tools (e.g., IBM BigFix) for deployment tracking and compliance reporting.
• Backup, Recovery & Continuity
  • Administer enterprise backup solutions (Veeam and/or Commvault) for OT systems, including job configuration, retention policy management, and schedule verification.
  • Perform and document backup verification and restoration testing in compliance with CIP-009 requirements.
  • Support disaster recovery planning, execution, and documentation for critical OT infrastructure.
  • Carefully coordinate with NetApp replication and snapshot capabilities to support backup redundancy and rapid recovery objectives.
• Security & Compliance
  • Support compliance with NERC CIP standards, including but not limited to CIP-007, CIP-008, and CIP-009.
  • Integrate system logs with Splunk for centralized visibility and alerting; conduct weekly log reviews to identify anomalies and support incident detection.
  • Track incidents and compliance evidence in AssurX (or equivalent compliance tracking platform); participate in CIP-008 Security Incident Response Team (SIRT) exercises.
  • Collect and maintain audit evidence for technical controls, including patch records, configuration baselines, and security event logs.
  • Aid with vulnerability remediation, configuration reviews, and coordination with OT Security and Compliance teams during audits and regulatory assessments.
  • Aid in endpoint protection (e.g., Symantec) and support security event monitoring activities.
• Identity & Access Management
  • Manage Active Directory infrastructure including user account lifecycle, group membership, and organizational unit structure.
  • Configure and maintain Group Policy Objects (GPOs) to enforce security settings and system configuration standards.
  • Administer DNS services, RSA authentication services, and privileged access management (PAM) controls.
  • Conduct regular access reviews to ensure least-privilege principles are maintained across OT-connected systems.
• Application, Database & File Services
  • Support OT applications and services, including system dependencies, integrations, and service availability.
  • Administer Microsoft SQL Server instances supporting OT-connected applications, including routine maintenance, backup configuration, performance monitoring, and availability management.
  • Manage enterprise file shares, SharePoint, and document management systems (e.g., LaserFiche) including permissions, quotas, and retention policies.
  • Support application teams with database connectivity, instance health, and escalated troubleshooting for SQL Server-dependent OT systems.
• Change & Configuration Management
  • Execute system changes through approved change management processes, including documentation of pre-change baselines and rollback procedures.
  • Maintain accurate and current system documentation including architecture diagrams, configuration standards, and operational runbooks.
  • Participate in bi-weekly technical reviews of system changes impacting compliance or OT operations.

Qualifications

• Bachelor of Science in Information Technology, Computer Science, Engineering, or a related field; in lieu of degree, 8+ years of directly applicable IT/OT systems administration experience.
• 5+ years of experience in systems administration in regulated, mission-critical, or industrial environments.
• Strong hands-on experience administering both Windows Server and Linux systems, including configuration, hardening, and lifecycle management.
• Demonstrated experience with VMware virtualization platforms (vSphere, ESXi, vCenter), including virtual machine build, provisioning, and day-to-day administration.
• Hands-on experience with NetApp storage administration, including volume management, snapshots, and replication.
• Experience administering enterprise backup solutions such as Veeam or Commvault, including restore testing and documentation.
• Demonstrated experience building and deploying physical servers, Windows-based workstations, and field devices from bare metal through production-ready configuration.
• Working knowledge of RSA authentication infrastructure and enterprise identity and access management practices.
• Solid working knowledge of Microsoft SQL Server administration, including routine maintenance, performance monitoring, and availability support for application-connected instances.
• Excellent written and verbal communication skills with the ability to document and communicate across all organizational levels.
• Self-motivation, discipline, and strong organizational and critical-thinking skills suited to a regulated environment.
• Willingness to participate in scheduled on-call rotations supporting 24/7 OT system coverage.