OT Network & Security Engineer

Vulcan Elements is manufacturing American rare-earth permanent magnets for a secure, resilient future. With a focus on national security and economic resiliency, we serve critical industries such as defense, aerospace, and automotive powering a high-technology future. Vulcan Elements is building a team of ambitious professionals committed to Mission Focus, Technical Excellence, and Transparency.

As the OT Network & Security Engineer you will design and secure the operational technology backbone for a massive 1 million square foot manufacturing facility expansion. You will produce the OT network design basis for the new facility, author the IEC 62443 zone-and-conduit architecture and write security requirements into every OEM equipment contractor develop them in parallel. This is a high-impact, high-ownership role requiring genuine depth in both industrial networking and OTsecurity.

• Produce the OT network architecture for a large-format industrial facility: MDF/IDF distribution, fiber backbone topology, switching and routing design, IP schema, and resilience strategy.
• Freeze IDF locations, pathways, and enclosure requirements into construction drawings on the construction schedule’s
• Author andmaintainthe IEC 62443 zone-and-conduit register,the living document that is thefirewallpolicy.
  
  Set security-level targets per zone.
• Write network and security requirements into allequipment packages ahead of Factory Acceptance Tests, andverify them at acceptance alongside
  
  Controls Engineers.
• Design andoperatethe remote access architecture for internal OT network access andOEM support connectivity, with per-vendor approval and session control.
• Coordinate the enterprise boundary with IT: DMZ services, WAN demarcation, identity architecture, and CMMC/CUI compliance evidence for the U.S. government partnership.
• Select and onboard the managed OT detection-and-response provider ahead of first energization; scope the independent IEC 62443 risk assessment and penetration test; own patch-versus-compensating-control decisions with the area controls engineers.

• OT network design basis, MDF/IDF standards, IP schema, and fiber/cablingspecifications with acceptance criteria.
• Zone-and-conduit register, security-level targets,firewallpolicy set, and the secure remote access design.
• OEM network/security requirement specifications, FAT verification records, CMMC/CUI evidence packages, and the OT incident-response plan.
• Switch andfirewallconfiguration standards under change control, asset inventory, and themanaged detection and service integration.

Responsibilities and tasks outlined are not exhaustive and may change asdeterminedby the needs of the business.

• Bachelor’s or Master’s degree in Engineering, Computer Science, or a related field with7+ years spanning industrial networking and OT security, or equivalent demonstrated depth in both— genuine capability on each side, not one with awareness of the other.
• Ability to design and defend segmentation, switching, routing, andfirewallpolicy for industrial Ethernet environments, and to reason about control-traffic behavior (Ether Net/IP or comparable) when making design trade-offs.
• Ability to apply zone/conduitthinking and risk-based security levels to a real plant-asset inventory, monitoring, secure remote access, and patch/compensating-control judgment under production constraints.
• Ability to take a network design through construction: fiber topologies, IDF and enclosure planning, and working productively with construction and cabling contractors.
• Ability to write requirements vendors can build to and auditors can verify, and to defend security decisions to both operations and compliance audiences.

Must be a U.S. Person due to required access to U.S. export-controlled information or facilities.

• FormalIEC 62443 project experience (zone/conduit registers, security-level assessments) or NERC CIP program work that translates directly to it.
• Greenfield or major-expansion industrial network design, including construction-phase coordination.
• Field or professional-services background with an OT security platform…