Network & Systems Administrator; On-Site

Job Summary: The IT Network & Systems Administrator (SCADA/OT Support) is responsible for implementing and maintaining specialized network and server architectures that support real-time monitoring and control of industrial processes. This role ensures availability, security, and reliability of OT networks and supporting IT systems. Scope includes Windows-based infrastructure, identity management, and name resolution for the OT environment and SCADA infrastructure, distinct from general enterprise IT network administration.

The position bridges network engineering with systems administration to secure communications between field devices (PLCs, RTUs) and centralized control systems. Because these systems directly affect water treatment, chemical dosing, and distribution operations, system availability carries public health and safety implications beyond standard IT service levels.

• Hardware Maintenance:
  Install, configure, and maintain industrial-grade networking equipment, including routers, switches, firewalls, and telemetry devices (radio, fiber, cellular).
• System Integration:
  Support network connectivity for new field devices as directed by Operational Technology or SCADA staff. Verify data flow paths across OT network segments to SCADA servers.
• Active Directory Administration:
  • Install and configure Active Directory Domain Services (AD DS) for SCADA and OT environments.
  • Manage users, groups, service accounts, and Group Policy Objects (GPOs). Enforce role‑based access control (RBAC) policies.
• DNS & Core Services:
  • Deploy and maintain DNS servers to support SCADA systems, redundancy, and name resolution across segmented networks.
  • Administer related services such as DHCP (where applicable) while ensuring OT network stability.
• Windows Server Management:
  • Install, configure, and maintain Windows Server systems that host SCADA server infrastructure, including historians and domain controllers.
  • Apply patches, updates, and security hardening aligned with OT change‑management requirements.
• Authentication & Access Control:
  • Support Active Directory integration for centralized SCADA systems authentication and auditing.
  • Enforce least‑privilege access and secure service account management.
• Disaster Recovery & High Availability:
  • Support design and testing of failover strategies for SCADA networks, servers, and domain controllers. Ensure DNS service continuity across segmented environments.
  • Support backup and recovery processes to ensure system continuity during outages or cyber incidents.
• Monitoring & Troubleshooting:
  Proactively monitor network health, diagnose complex issues, and coordinate incident response across IT and OT teams.
• OT Network Support:
  • Maintain firewall rules, router configurations, and switch port settings for OT network segments. Follow architectures defined by senior engineering and OT cybersecurity staff.
  • Validate network segmentation between Purdue Model levels, including the IT/OT demilitarized zone (DMZ).
  • Coordinate with OT cybersecurity staff on industrial protocol traffic monitoring (Modbus, DNP3) and anomaly investigation.
• Documentation & Compliance:
  Maintain current network diagrams, configuration baselines, and change logs. Support AWIA risk assessment contributions and other regulatory compliance documentation as applicable.
• Operational Requirements:
  Participate in on‑call rotation for 24/7 SCADA system support. Travel to field sites, including pump stations and treatment plants. Perform maintenance within OT change‑management windows, which may fall on nights, weekends, or planned outage periods.

• Education:
  
  Bachelor’s degree in computer science, network engineering, Information Systems, Cybersecurity, or a related field.
• 3–5 years of network engineering experience in an industrial, utility, or critical infrastructure environment.
• Hands‑on experience administering Windows Server, Active Directory, and DNS in production OT or critical infrastructure environments.
• Exposure to OT, SCADA, or industrial control system environments preferred but not required.
• Networking Expertise:
  Strong knowledge of TCP/IP, VLANs, VPNs, and routing protocols (BGP, OSPF).…