Sr. Network Engineer
Basic Function
The Engineering and Innovation (E&I) team at SB Energy provides technical insights and assists decision-making across all life cycle phases of renewable projects, from development, construction, and to operations and maintenance. The Innovation program ideates, evaluates, demonstrates, and deploys at-scale first-of-a-kind technologies. The Senior Network Engineering role will be responsible for designing, implementing, maintain, and supporting SB Energy’s growing network infrastructure, which comprises of SB Energy’s utility scale power plants, remote operations center, and data center infrastructure. Additionally, this role will implement and maintain SB Energy’s cybersecurity plan.
Responsibilities
- Own the end-to-end OT network architecture from development and detailed design through construction, commissioning, operations, upgrades, and asset handover.
- Design resilient, segmented power plant and substation networks, including LAN/WAN, VLANs and VRFs, routing and switching, firewalls and DMZs, redundant paths, fiber and telecom circuits, wireless or cellular links, and secure cloud or remote operations connectivity.
- Find solutions for telecomm/fiber to remote sites utilizing wireless or satellite backup communications.
- Create and maintain high- and low-level designs, network topology diagrams, IP address and VLAN plans, port/protocol matrices, firewall rule bases, equipment standards, bills of material, fiber schedules, test plans, and as-built records.
- Lead equipment selection, configuration standards, capacity planning, procurement support, factory/site acceptance testing, commissioning, failover testing, and operational handoff.
- Review EPC, OEM, integrator, and subcontractor designs and configurations; resolve technical gaps and verify that installations meet reliability, cybersecurity, schedule, budget, and supportability requirements.
- Embed defense-in-depth into OT network designs and operating practices, using risk-based principles aligned with company policy, NIST guidance for OT security, ISA/IEC 62443, and applicable NERC CIP requirements.
- Implement and govern security zones and conduits, firewall and access-control policies, industrial DMZs, allowlisted communications, least-privilege access, and documented separation between enterprise IT, site OT, vendor, and external networks.
- Secure interactive and vendor remote access through approved VPNs, multi-factor authentication, jump hosts or privileged access controls, time-bounded access, session accountability, and rapid revocation.
- Integrate network devices with centralized monitoring and security tooling, including health and performance monitoring, syslog/SIEM, time synchronization, configuration management, and OT-aware detection or network visibility platforms.
- Assess third-party equipment, connections, and support models for cybersecurity risk before deployment, and ensure vendors follow approved remote-access, change-control, and incident-notification requirements.
- Review network firmware updates and determine risk, impacts and implement updates.
- Report project progress updates to key stakeholders.
Qualifications
- Bachelor’s degree or equivalent education and experience.
- 5+ years of experience managing computer networks preferably in the OT energy sector (solar, battery storage, gas generation) and data center.
- 5+ years of experience with Microsoft Azure networking, site-to-site connectivity, virtual networks, VPN gateways, cloud firewalls, and hybrid monitoring.
- Experience with Palo Alto Networks/Cisco routers, firewalls, and switches, Dell Servers, Hyper-V, VMWare, Kubernetes, Docker.
- Current networking or security certifications such as CCNP/CCNA, PCNSE/PCNSA, GICSP, GRID, CISSP, or Security+.
- Familiarity with the NIST Cybersecurity Framework, NIST SP 800-82, ISA/IEC 62443, and NERC CIP applicability and compliance processes.
- Datacenter knowledge in Electric Power Management System (EPMS) and Building Management Systems (BMS) is a plus.
- Broad experience across new solar technologies, energy storage, or application of artificial intelligence / machine learning to renewable energy.
- Demonstrated strong engineering, design, and communication skills, and an ability to work in a dynamic team environment to think outside the box and solve traditional problems in new ways.
- Self-starter with the ability to prioritize efforts and drive towards completion.
- Strong verbal, written, interpersonal and communication skills.
- The position requires up to 10% domestic travel.
Location
Redwood City, CA; San Diego, CA; Denver, CO (preferred); and open for remote.
Pay
Base Pay - $100,000-$140,000. The pay range mentioned above is a guideline. We tailor each offer based on your unique skills, experience, location, and market benchmarks—while ensuring internal parity across our teams. The compensation range provided reflects base pay. Total rewards may also include performance-based bonuses, equity grants, and a market leading comprehensive health and wellness benefits package. Final details will be discussed during the later stages of the hiring process.
Benefits
- 100% Company-Paid Medical, Dental & Vision (for employees and dependents)
- 401(k) with Company Match
- Generous Paid Time Off + 11 Paid Holidays
- 12 Weeks Paid Parental Leave
- Life, AD&D & Long-Term Disability Coverage
- Flexible Spending Accounts (FSA) for Medical, Dependent Care, Transit & Parking (with company contributions)
- Mental, Physical & Social Wellness Support (with company contributions)
- Flexible Work Arrangements & Hybrid Office Setup Benefits
- Monthly Reimbursement for Phone, Internet & Data
- Optional Legal & Pet Insurance Plans
- Device Purchase Support