Sr. OT Network Engineer (Liberty, NC)

About the role

Design and strengthen the networks that keep industrial and manufacturing environments connected and secure. As a Senior OT Network Engineer, you’ll deliver and maintain operational technology infrastructure, apply network segmentation and zero-trust principles, and help ensure resilient plant-floor operations. This is a hands-on technical leadership role for an engineer who can work across IT and plant teams. You’ll shape secure OT network architectures, lead Cisco SD-Access implementation, troubleshoot complex issues, and help other technical teams build confidence in OT networking and security.

Responsibilities

• Deploy, modernize, and manage OT network infrastructure across industrial environments.
• Design secure network architectures using IDMZ, macro-segmentation, and microsegmentation across Purdue Model layers.
• Implement Cisco SD-Access to support fabric automation and identity-based access control.
• Troubleshoot complex network incidents and coordinate upgrades, cutovers, and maintenance activities.
• Partner with IT and plant teams to translate operational needs into secure network solutions.
• Mentor local technical teams on OT networking and security fundamentals.

Time allocation: OT network architecture and infrastructure lifecycle — 25%; Cisco SD-Access and fabric implementation — 20%; Network segmentation and OT security — 20%; Troubleshooting and escalation support — 15%; Upgrades, cutovers, and maintenance — 10%; Collaboration and technical mentorship — 10%.

Requirements

• 10+ years of progressive network engineering experience, or equivalent practical experience.
• Hands-on experience with routing, switching, LAN/WAN, and high-availability network environments.
• Experience designing or securing OT networks in manufacturing, industrial, or plant-floor settings.
• Knowledge of network segmentation, zero-trust principles, and industrial DMZ (IDMZ) design.
• Strong communication, problem-solving, and stakeholder collaboration skills.
• Bachelor’s degree in a STEM field or equivalent experience.

Qualifications

Active certifications such as CCNP, CCIE, CISSP, or GICSP.

Skills

• Experience implementing Cisco SD-Access (SDA), DNA Center/Catalyst Center, and Cisco ISE.
• Familiarity with microsegmentation, identity-based access policies, or software-defined firewalls.
• Experience with industrial wireless, next-generation firewalls, or high-availability design.
• Familiarity with industrial protocols such as EtherNet/IP or Modbus.

Posted By: Tyler Weston