Sr. OT Network Enginerer

Key Responsibilities: Design, deploy and maintain OT network architectures including Layer 2 and Layer 3 switching, VLANs, routing (BGP), and redundancy to support SCADA, DCS and field networks. Implement and manage network segmentation and zone models for OT environments to minimize risk and support secure remote access and jump servers. Integrate and support industrial protocols and systems including SCADA/ICS, PLCs, DCS, RTUs, DNP3, IEC 61850, IEC 60870, Ethernet/IP, OPC/OPC UA, BACnet and HART.Install, configure and operate industrial firewalls, IDS/IPS, secure remote access solutions and other network security controls specific to OT.Troubleshoot network issues across Ethernet/TCP/UDP, diagnostics for time synchronization (PTP/NTP) and layer-specific failures in production environments with minimal disruption. Lead OT incident response activities, perform root cause analysis, and implement long-term corrective actions in collaboration with cybersecurity and operations teams. Define and enforce configuration management, change control, patching and hardening standards for OT network devices and related infrastructure. Develop network diagrams, as-built documentation, standard operating procedures, and network runbooks for operations and maintenance. Perform vendor coordination, testing and validation for new devices, firmware and protocol integrations in a controlled lab and production staging environment. Mentor junior engineers, participate in on-call rotations, and provide subject-matter expertise for risk assessments, audits and compliance initiatives related to IEC 62443 and other industry standards.

Qualifications: Bachelors degree in Electrical Engineering, Computer Engineering, Computer Science, Information Security or equivalent experience; or related technical certification plus commensurate experience.7+ years of hands-on network engineering experience, with at least 35 years focused on OT/ICS/SCADA environments supporting critical infrastructure or industrial operations. Proven experience with PLCs, DCS, RTUs and SCADA architectures and familiarity with common industrial protocols: DNP3, IEC 61850, IEC 60870, Ethernet/IP, OPC/OPC UA, BACnet and HART.Deep networking skillset: Layer 2/Layer 3 switching, VLAN design, BGP, routing protocols, Ethernet/TCP/UDP, QoS and network troubleshooting tools. Experience implementing network segmentation, industrial firewalls, secure remote access (jump servers) and OT-specific security controls. Knowledge of time synchronization technologies (PTP and NTP) in industrial networks and experience validating time-critical systems. Familiarity with IEC 62443 and OT security best practices, and experience supporting compliance, audits and risk assessments. Strong hands-on experience with industrial network devices, vendor hardware (e.g., Cisco, Juniper, Siemens, Schneider, ABB), and firmware lifecycle management. Scripting and automation skills (Python, PowerShell or similar) for network automation, configuration management and data collection. Relevant certifications preferred: CCNP/CCIE, GICSP, GICSP, GCISSP, CISSP, SANS/GSEC or vendor-specific industrial security qualifications. Excellent communication skills; ability to translate technical concepts for operations and leadership, and work effectively in cross-functional teams.