OT Network Engineer​/Consultant

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients. We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data and business applications. We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals.

As the OT Network Engineer / Consultant, you will play a key role in the design, implementation and delivery of secure and resilient network infrastructure across complex OT and industrial environments.

You will work across industrial networking, network security and segmentation, supporting solutions from initial design and configuration through integration, testing, commissioning and deployment. This will include working with firewalls, switches, routers, industrial DMZs and secure connectivity across IT, OT and safety-critical environments.

Working closely with clients, vendors and specialists across OT, infrastructure, engineering and cyber security, you will help solve complex network challenges, support the integration of industrial systems and ensure solutions are secure, resilient and aligned with operational requirements.

• Design and implement secure OT and industrial network architectures
• Configure and manage firewalls, switches, routers and secure remote access solutions
• Design and implement network segmentation across IT, OT and safety-critical environments
• Support the deployment of industrial DMZs, security zones and conduits
• Configure VLANs, routing, access controls and network security policies
• Support firewall policy design, rule reviews and optimisation
• Implement secure connectivity for OT applications, servers, engineering workstations and industrial systems
• Support vendor and third-party network integration
• Support network migrations, upgrades and infrastructure refresh programmes
• Undertake network testing, validation and performance analysis
• Support FAT, SAT, commissioning and production go-live activities
• Troubleshoot complex network, connectivity and firewall issues
• Support network hardening, vulnerability remediation and security improvement activities
• Produce HLDs, LLDs, network diagrams, firewall rule sets, test plans and as-built documentation
• Work alongside OT, cyber security, infrastructure, application and engineering teams
• Provide technical consultancy and guidance to clients on OT network security and resilience

• Strong hands-on experience with enterprise and industrial networking
• Strong knowledge of TCP/IP, VLANs, routing, switching, DNS and network services
• Experience configuring and managing next-generation firewalls
• Experience with platforms such as Palo Alto Networks, Fortinet, Cisco or Check Point
• Strong understanding of firewall policies, NAT, VPNs, IPS/IDS and application-based security controls
• Experience designing and implementing OT network segmentation and industrial DMZs
• Experience with Cisco switching and routing technologies
• Experience supporting secure remote access into OT environments
• Understanding of industrial protocols and OT network architectures
• Experience with network monitoring, packet analysis and troubleshooting tools
• Experience with high availability, redundant networking and resilient network architectures
• Experience with network device hardening and vulnerability remediation
• Experience supporting network integration, testing, validation and commissioning activities
• Experience producing technical network designs, diagrams, security documentation and test procedures
• Strong technical troubleshooting and problem-solving skills
• Confidence working directly with clients, vendors and technical stakeholders
• Experience with in OT / ICT, industrial, energy, utilities or Critical National Infrastructure environments
• Knowledge of OT security principles and frameworks such as IEC 62443, Purdue Model, NCSC CAF or NIST
• Networking certifications such as CCNA or CCNP would be advantageous

At Sword, our core values and culture are based on caring about our people, investing in training and career development, and building inclusive teams where we are all encouraged to contribute to achieve success. We offer…