Senior IT Infrastructure Analyst- Network Engineer

Network Engineer

Deriva Energy is a leading Independent Power Producer in the US renewables market, with over 6 GW of operating or under construction wind, solar and storage projects across the country. Deriva's ultimate parent is Brookfield Renewable and is poised for dynamic growth across its wind, solar, and storage portfolios. Join a dynamic team committed to excellence and innovation who envision a future of energy independence using resilient, carbon-free generation.

We offer competitive compensation, comprehensive benefits, and the opportunity to make a significant impact in the rapidly evolving renewable energy industry. Deriva empowers customers with innovative clean energy solutions that strengthen communities and serve future generations.

Deriva Energy is seeking an experienced Network Engineer to join our Network & Telecom team. This role is responsible for the design, implementation, administration, and ongoing optimization of Deriva's enterprise LAN/WAN environment — spanning core data centers, remote spoke sites, and critical operational technology (OT) infrastructure subject to NERC CIP compliance. The successful candidate will work directly with the IT Manager and collaborate with a team of network engineers, a third-party NOC, and Service Now/CMDB resources to mature the network environment, drive resiliency improvements, and maintain a strong compliance posture.

This role will be located at the Deriva Headquarters office in Charlotte, NC.

• Design, implement, and maintain LAN/WAN infrastructure including core routing and switching, remote spoke sites, and data center fabric interconnects.
• Administer and troubleshoot Cisco routers, switches, and related platforms across Deriva's redundant data center environments.
• Manage Palo Alto next-generation firewall policies, security zones, and always-on VPN configurations.
• Support and maintain Open Gear out-of-band management infrastructure for remote access and emergency console connectivity.
• Administer wireless LAN controllers and enterprise wireless infrastructure.
• Support Citrix virtual networking components as they intersect with network infrastructure.
• Maintain and optimize site-to-site and remote access VPN configurations to support distributed workforce and operational requirements.

• Configure and maintain ESP (Electronic Security Perimeter) and non-ESP network segments in compliance with NERC CIP standards including CIP-005, CIP-007, and CIP-010.
• Design and document network architecture that supports NERC CIP compliance requirements and audit readiness.
• Support CIP-013 supply chain risk management activities including vendor assessments and third-party access controls.
• Collaborate with compliance and legal teams on CIP-related documentation, evidence collection, and remediation activities.
• Maintain separation of BES Cyber System network zones and participate in CIP controls testing and validation.

• Monitor network health, availability, and performance using Solar Winds NPM/NCM and related tools; escalate and remediate issues proactively.
• Create, manage, and document change requests in Service Now following Deriva's Change Management process.
• Contribute to CMDB accuracy by maintaining CI records and relationship mappings for network assets.
• Participate in on-call rotation to support after-hours network incidents and escalations.

• Contribute to the design and evolution of Deriva's network architecture including planned redesign efforts across core, distribution, and access layers.
• Develop low-level and high-level design documentation; maintain current-state network diagrams and runbooks.
• Evaluate new technologies and platforms to support capacity planning and modernization roadmap objectives.

• Drive the Network & Telecom team's contributions to Deriva's Disaster Recovery (DR) and Business Continuity Planning (BCP) program.
• Develop, document, and test network failover and recovery procedures to bring DR/BCP posture to a complete and tested state.
• Ensure redundant data center connectivity and failover configurations are…