Network Engineer, OT

Position:
Network Engineer, OT

Reports To: VP IT Operations

Work Location: 6246 McHard Road, Houston, TX 77053

• Design and implement sophisticated network architectures for SCADA, DCS, historian systems, and industrial control networks using Cisco Industrial Ethernet switches and Cisco Catalyst infrastructure
• Engineer and maintain next-generation firewalls (NGFWs) for network segmentation, UTM, application control, and IPS/IDS functionality across IT/OT boundaries
• Deploy and manage Cisco SD-WAN solutions for multi-site connectivity, optimize configurations, and implement advanced routing protocols (OSPF, EIGRP, BGP) for enterprise and industrial networks
• Configure redundant network topologies utilizing protocols such as RSTP, PRP, HSR, and Cisco Stack Wise for high-availability industrial applications
• Implement Quality of Service (QoS) policies, VLAN architectures, and traffic shaping to prioritize real-time control system communications and support converged IT/OT networks
• Design and maintain enterprise Wi-Fi infrastructure using Wireless LAN Controllers and access point solutions for both corporate and industrial environments
• Manage network infrastructure supporting virtualization platforms (VMware vSphere), cloud connectivity (Azure), and hybrid IT architectures
• Deploy and optimize network monitoring solutions including Solar Winds, Cisco Catalyst Center, and Forti Analyzer for comprehensive visibility across IT/OT environments
• Architect and implement defense-in-depth security strategies and network access control (NAC) technologies
• Configure and manage firewall security policies, SSL/IPsec VPN tunnels, and secure remote access solutions for critical infrastructure personnel
• Design Electronic Security Perimeters (ESP) compliant with NERC-CIP standards, implementing defense mechanisms including firewalls, unidirectional gateways, and DMZ architecture
• Deploy and maintain intrusion detection/prevention systems (IDS/IPS) using next-gen technologies for continuous threat monitoring
• Implement zero-trust network architectures, micro-segmentation strategies, and least-privilege access controls across IT and OT domains
• Maintain comprehensive compliance with NERC-CIP and related standards for critical infrastructure protection
• Conduct vulnerability assessments, penetration testing coordination, and security hardening of network devices following ISA/IEC 62443 and NIST Cybersecurity Framework guidelines
• Lead incident response activities for network security events, coordinate forensic analysis, and implement corrective action plans
• Configure and optimize industrial protocol communications including Modbus TCP/RTU, DNP3, OPC UA, IEC 61850, and Profinet across control system networks
• Implement protocol gateways, serial-to-Ethernet converters, and ensure proper encapsulation for legacy industrial communications
• Support historian database connectivity, real-time data acquisition systems, and SCADA master-to-RTU communication architectures
• Design redundant communication paths for critical control functions utilizing diverse routing and automatic failover mechanisms
• Troubleshoot deterministic Ethernet configurations, time-sensitive networking (TSN), and precision time protocol (PTP/IEEE 1588) implementations
• Coordinate with controls engineers on PLC/DCS network requirements including Allen-Bradley Control Logix, GE Mark series, and Siemens S7 platforms
• Integrate OT networks with enterprise IT services including Active Directory, DNS, DHCP, NTP, and Windows Server infrastructure while maintaining proper segmentation
• Configure and manage network infrastructure for Microsoft 365/Azure AD integration, site-to-site VPNs, and cloud service connectivity
• Implement network solutions for audio/visual conferencing systems, IP telephony (VoIP), and unified communications platforms
• Deploy network infrastructure for physical security systems including IP camera networks, access control integration, and building management systems (BMS)
• Manage patch management, firmware updates, and change control processes for network devices across IT and OT environments using Service Now or similar ITSM platforms
• Monitor and optimize network performance utilizing advanced analytics, Net Flow/sFlow analysis, and packet capture tools (Wireshark, tcpdump) for troubleshooting
• Implement redundancy and high-availability solutions ensuring 99.99% uptime for critical OT communications and 24/7 operational support capabilities
• Conduct capacity planning, bandwidth analysis, and network lifecycle management to support growing operational and business data requirements
• Design and test disaster recovery/business continuity procedures for network infrastructure, including backup configurations and restoration processes
• Maintain comprehensive network documentation including logical/physical topology diagrams, IP address management (IPAM), and configuration management databases (CMDB)
• Lead network design and implementation for new facility construction, equipment…