Lead Network Engineer

SUMMARY

The Lead Network Engineer is responsible for serving as the senior technical authority for enterprise and OT network infrastructure, establishing architecture standards, and leading the design and integration of secure, reliable network solutions across utility-scale renewable energy systems. This role drives system reliability, telemetry accuracy, and long-term network modernization while ensuring compliance with NERC CIP, ISO/RTO, and cybersecurity requirements, and providing technical leadership and mentorship to engineering teams.

The Lead Network Engineer is responsible for serving as the senior technical authority for enterprise and OT network infrastructure, establishing architecture standards, and leading the design and integration of secure, reliable network solutions across utility-scale renewable energy systems. This role drives system reliability, telemetry accuracy, and long-term network modernization while ensuring compliance with NERC CIP, ISO/RTO, and cybersecurity requirements, and providing technical leadership and mentorship to engineering teams.

• Design and architect secure, scalable enterprise and operational technology (OT) network infrastructures for new renewable energy sites, including wind, solar, and battery energy storage systems.
• Develop standardized Layer III network architectures, including dynamic routing protocols, inter-VLAN routing, redundancy strategies, and high-availability designs for complex, multi-site environments.
• Evaluate existing network architectures across the fleet, identify design deficiencies, and develop strategic improvement and modernization plans to enhance resiliency, scalability, and security.
• Serve as the technical authority for Cisco and Hirschmann routing and switching platforms, ensuring configurations align with enterprise architecture standards and operational requirements.
• Lead the design and implementation of fleetwide network and security technologies, including identity and access management (SSO), Cisco firewall platforms, and network monitoring/visibility tools to enhance security, standardization, and operational insight across all sites.
• Design, implement, and optimize firewall rule sets and network access control policies across the fleet, ensuring proper segmentation, least-privilege access, and alignment with cybersecurity best practices.
• Ensure all network designs and modifications comply with applicable NERC CIP standards, cybersecurity controls, and industry best practices.
• Conduct architecture reviews for new site integrations, major upgrades, and infrastructure expansions to ensure consistency and long-term sustainability.
• Collaborate with SCADA engineering, cybersecurity, IT, operations, and external vendors to align network infrastructure with telemetry, control system, and enterprise data requirements.
• Develop and maintain enterprise network standards, IP addressing schemes, configuration templates, and documentation frameworks.
• Lead root cause analysis of complex network issues and implement long-term corrective design solutions rather than temporary fixes.
• Develop and enforce enterprise standards, templates, and deployment strategies to support consistent, scalable rollout of network infrastructure and security technologies across the fleet.
• Provide technical guidance and mentorship to network engineers while maintaining architectural governance across all projects.
• Participate in strategic planning initiatives to support long-term network modernization and fleet-wide standardization efforts.
• Adhere to all Terra‑Gen safety policies, procedures, and standards while actively contributing to the continuous improvement of the Terra‑Gen safety culture.
• Promote a strong safety‑first mindset by identifying hazards, following established safe work practices, and supporting operational excellence across all activities.
• Take immediate and appropriate corrective action in response to emergency situations to minimize safety risks, equipment damage, and operational downtime.
• Participate in the department’s on‑call support rotation.
• Ability to travel up to 25% or more if required.