OT System & Infrastructure Specialist

OT System & Infrastructure Specialist

The OT Infrastructure Specialist supports fleet-wide Operational Technology (OT) infrastructure used to operate industrial control systems across HF Sinclair sites. This position provides technical administration, troubleshooting, lifecycle support, documentation, backup and recovery, patch implementation, and project support for OT servers, endpoints, virtualization, networks, firewalls, and industrial control system infrastructure. The role reports to the OT Infrastructure & Cybersecurity Lead and coordinates closely with the OT Cyber Analyst, regional support teams, site OT teams, IT, vendors, and site stakeholders.

Job Duties:

• Administer, maintain, and support Operational Technology (OT) infrastructure systems across fleet locations, including servers, virtualization platforms, network devices, industrial firewalls, endpoint platforms, backups, and supporting services.
• Provide advisory and hands-on technical support, as appropriate, for OT infrastructure associated with Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, and other Industrial Automation and Control Systems (IACS) environments, including centrally managed platforms, approved fleet standards, escalated site support, and infrastructure lifecycle activities.
• Assist with implementation, configuration, and lifecycle management of OT infrastructure standards, including system hardening, configuration baselines, patching, backup schedules, and disaster recovery procedures.
• Deployment, configuration, lifecycle management, administration, and ongoing support of centrally managed OT infrastructure platforms and fleet-wide support tools and applications used across supported OT environments.
• Coordinate with refinery operations, maintenance, reliability, OT, IT, vendors, and contractors to support safe and reliable OT system operation.
• Maintain and improve OT infrastructure asset records, network documentation, system diagrams, configuration records, backup records, and infrastructure support documentation.
• Support efforts to ensure centrally managed OT assets and support platforms are accurately documented, visible, and supportable through approved fleet tools and reporting processes.
• Perform or coordinate approved OT infrastructure maintenance activities in accordance with change management, management of change, and site operating procedures.
• Support the implementation of security updates, operating system patches, application patches, and firmware updates for OT systems where validated and approved by the business.
• Monitor OT infrastructure health, availability, capacity, and performance; troubleshoot hardware, operating system, virtualization, network, and communication issues.
• Support incident response activities by providing technical analysis, system recovery assistance, log collection, and infrastructure restoration support.
• Assist with vulnerability remediation and corrective action activities identified by the OT Cybersecurity Analyst, OT Cybersecurity Specialist, audit findings, or risk assessments.
• Participate in technical and non-technical projects requiring OT infrastructure support and cybersecurity oversight to ensure standards, policies, procedures, and site requirements are followed.
• Support vendor access coordination and vendor maintenance activities in accordance with company remote access, cybersecurity, and safety requirements.
• Provide fleet guidance and technical support for OT infrastructure reliability, availability, backup, patching, and lifecycle practices.
• Maintain familiarity with ISA/IEC 62443 concepts related to zones and conduits, asset management, system hardening, patch management, backup and recovery, and secure maintenance of IACS environments.

Experience:

• At least 4 to 7 years of related experience in OT infrastructure, industrial control systems, process control systems, network administration, systems administration, or a combination of equivalent experience.
• Experience supporting industrial control system environments, preferably Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, or similar distributed control system platforms.
• Knowledge of Windows Server, endpoint…