OT Security Analyst

Solaris Energy Infrastructure, Inc. (NYSE:SEI) provides scalable equipment-based solutions for use in distributed power generation as well as the management of raw materials used in the completion of oil and natural gas wells. Headquartered in Houston, Texas, Solaris serves multiple U.S. end markets, including energy, data centers, and other commercial and industrial sectors.

Solaris Energy Infrastructure, Inc. (NYSE:SEI) provides scalable equipment-based solutions for use in distributed power generation as well as the management of raw materials used in the completion of oil and natural gas wells. Headquartered in Houston, Texas, Solaris serves multiple U.S. end markets, including energy, data centers, and other commercial and industrial sectors.

Solaris is building out networked power generation and distribution assets across multiple customer sites. Site networks reach down to turbine and balance-of-plant equipment, SCADA runs on Ignition, and protection and control includes SEL devices connected over SEL software-defined networking.

This environment is being designed and deployed now - which means security can be built in rather than retrofitted. That is the opportunity in this role.

As our OT Security Analyst, you will help design secure operational technology systems as sites are built, then continuously validate and monitor that what was designed is what is actually running. This is a newly created position reporting directly to the SVP of Information Technology and working as a peer to our enterprise Cybersecurity Analyst.

Design at Solaris is collaborative. You will work side by side with Engineering and IT Systems, bringing the security requirements, standards, and risk perspective to the table while remaining accountable for the security posture of what gets built. You will not inherit a mature program, you will create one.

• Partner with Engineering and IT Systems on network design for each new site build, bringing security requirements into the design process early
• Contribute to SDN flow policy design and review, ensuring engineered flows are least-privilege, documented, auditable, and current as sites change
• Develop and maintain a reference architecture for OT network segmentation that scales across sites
• Define hardening baselines for Ignition gateways, SEL device management, industrial switching, and OT endpoints
• Establish secure remote access for internal teams, OEMs, and third-party service providers, including authentication, session logging, and approval workflow
• Evaluate the current security stack against OT requirements and recommend tooling to close identified gaps

• Build and maintain OT network visibility and asset inventory across all operating sites
• Extend existing enterprise security tooling into OT where safe, and recommend purpose-built platforms where passive or protocol-aware monitoring is required
• Run continuous vulnerability management against industrial assets using a risk-based, operationally realistic remediation approach
• Monitor for anomalous OT network activity; triage, investigate, and escalation
• Periodically audit deployed sites against design standards and close configuration drift

• Maintain and exercise OT incident response playbooks; lead or support OT-involved incidents
• Produce audit evidence supporting SOX ITGC where OT systems touch financial reporting
• Maintain OT security policy and standards documentation aligned to IEC 62443 and NIST CSF
• Support customer security questionnaires and contract security reviews
• Provide OT security input to Engineering and Operations on new equipment and vendor selection

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related technical field, or equivalent practical experience
• 4+ years in cybersecurity, including a minimum of 2 years hands-on in operational technology, industrial control systems, or SCADA environments
• Demonstrated experience designing or reviewing segmented industrial networks, including the Purdue reference model and zone/conduit architecture
• Working knowledge of industrial protocols such as Modbus, DNP3, OPC UA, or IEC 61850
• Experience with vulnerability management in environments where devices cannot be freely scanned, patched, or rebooted
• Hands-on comfort configuring and hardening industrial network equipment and firewalls

• Hands-on…