Site IT​/OT Network Infrastructure Lead

Site IT/OT Network Infrastructure Lead

Ketjen Corporation is hiring for a Site IT/OT Network Infrastructure Lead in Amsterdam.

The Amsterdam site operates critical IT, lab, and OT networks, requiring secure, reliable connectivity during and after Ketjen’s separation from Albemarle. The role supports both IT and OT environments, ensuring secure connectivity, compliance with Zero Trust principles, cybersecurity frameworks, and alignment with Ketjen’s global cloud‑first architecture. This position collaborates closely with global IT partners (including managed service providers) and supports local site and data centre connectivity, Cloud, SD‑WAN, and OT network segments.

The role requires strong networking, security, Azure integration, and hands‑on on‑site technical capability. This role reports to Site IT Manager, Amsterdam. Some shared on‑call contribution is expected. The position is hybrid and located in Amsterdam.

• Manage Amsterdam’s segmented IT/Lab/OT network stack, including Cisco switching/routing, VLANs, L2/L3, and Meraki, Wireless APs, Forti Gate firewalls and SD‑WAN (manage firewall policies with global security/SOC).
• Maintain hybrid connectivity (SD‑WAN overlays, Express Route/VPN, site‑to‑cloud tunnels).
• Support Azure‑integrated networking (VNETs, routing, hub/spoke, private endpoints, Azure Firewall/NVA, Bastion, WAF) and identity flows aligned to Entra .
• Enforce Purdue‑aligned segmentation/DMZ patterns for IT/OT.
• Monitor and maintain network health via Azure Monitor and partner tools; manage patching, configuration standards, backups, and resilience.
• Maintain onsite installation, cabling, documentation, and server‑room hygiene (cabinets, UPS, racks); support lifecycle management for switches, firewalls, wireless, and related equipment.
• Enable secure IT/OT connectivity and vendor access (ZTNA/VDI/Secure Remote Access) and collaborate with MSPs, SOC/NOC, and global architects on cutovers, migrations, audits, and incident escalation.

• 5+ years in networking, infrastructure, or mixed IT/OT environments.
• Hands‑on expertise with Forti Gate firewalls and SD‑WAN.
• Strong Cisco switching/routing, VLANs, L2/L3, enterprise wireless/Meraki.
• Hybrid connectivity (Express Route/VPN, SD‑WAN), segmentation (IT/OT DMZ, Purdue).
• Azure networking & identity fundamentals (VNETs, routing, private endpoints, Entra , MFA/CA);
  Windows Server core services (AD/DNS/DHCP).
• Clear communication with technical and non‑technical users, and the ability to collaborate with global teams/MSPs while balancing project work with urgent onsite incidents.

• Experience applying Zero Trust principles for network and identity.
• Familiarity with SOC processes, SIEM telemetry, vulnerability management, and secure configuration practices.
• Exposure to PABX/VoIP/MS Teams Phone environments.
• Awareness of industrial concepts (Modbus, Profinet, Profibus, PLCs, LIMS/PI/historian flows).
• Experience in chemical, manufacturing, or OT‑heavy operational sites.

Competitive compensation and comprehensive benefits package. Hands‑on technical experience. Job variety and career flexibility. Collaboration with seasoned employees at every level. A proven record of innovation.

Equal Opportunity Employer – Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity.