Position summary
The network & cybersecurity engineer is responsible for designing, securing, and maintaining the organization’s converged IT/OT network infrastructure across datacenters, corporate environments, and industrial sites. The role ensures high-availability operations for critical systems such as SCADA, DCS, RTUs, PLCs, historians, and enterprise platforms, while maintaining compliance with cybersecurity and governance frameworks (ISO 27001, NIST, IEC 62443). This position collaborates closely with operations, IT, OT, and cybersecurity teams to implement robust network architectures, enforce security policies, and support digital transformation initiatives.
Key responsibilities
-
Network architecture & operations (IT & OT)
Design, implement, and maintain IP-based networks across corporate, datacenter, and industrial environments.
Manage Layer 2/Layer 3 switching, VLAN segmentation, routing (OSPF/BGP), and network resiliency protocols (STP/RSTP/VRRP).
Support and optimize distributed networks across multiple sites, including WAN/MPLS/SD-WAN.
Implement and maintain datacenter routing and switching architectures.
Maintain virtualization infrastructure (VMware/Hyper-V and Nutanix).
Administer DNS/DHCP, NTP, and network core services.
-
Cybersecurity architecture & defense
Implement and manage enterprise and industrial firewalls (Palo Alto, Fortinet, Cisco, industrial DMZ firewalls).
Maintain SIEM systems (Azure Sentinel, QRadar, Splunk, etc.) including rule tuning, log ingestion, alerts, and threat detection.
Conduct vulnerability assessments, patching cycles, and hardening of devices (network, servers, OT).
Implement Zero Trust and defense-in-depth strategies.
Monitor for unauthorized changes, anomalous traffic, and cybersecurity events.
-
OT network & SCADA security
Support and secure industrial control systems including SCADA, RTUs, PLCs, DCS, historians, OPC/OPC-UA servers.
Implement segmentation and demilitarized zones (IDMZ), enforcing IEC 62443 network zones & conduits.
Protect industrial protocols (Modbus, DNP3, IEC 61850, PROFINET, BACnet, HART, etc.).
Support secure remote access for vendors, OEMs, and contractors via PAM/MFA.
Ensure availability of critical OT communications and telemetry.
-
Compliance, governance & ISO 27001
Maintain alignment with ISO 27001:2022, NIST CSF, IEC 62443, and SOC principles.
Support internal and external audits with evidence collection and documentation.
Contribute to risk registers, change request processes, and security exceptions.
Develop and update cybersecurity policies, SOPs, and configuration baselines.
-
Change management & documentation
Participate in ITIL-aligned service management (incident, problem, change, release).
Maintain accurate documentation: network diagrams, asset inventory, configs, runbooks.
Prepare and implement change controls for network and security modifications.
Conduct impact assessments and root cause analysis for service interruptions.
-
Infrastructure support & troubleshooting
Troubleshoot network, firewall, VPN, and cybersecurity issues end-to-end.
Support high-availability environments (HA firewalls, redundant links, clustered servers).
Perform configuration backups, change diffs, and system restore testing.
Provide level 3 technical support for critical incidents.
Required qualifications & certifications
Technical certifications
- CCNA (mandatory)
- CCNP (preferred/mandatory depending on role level)
- CISSP (strongly preferred or in progress)
- IEC 62443 certifications (preferred)
- Additional beneficial certifications: Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Microsoft AZ-500 or SC-200, VMware VCP, CompTIA Security+/CySA+
Education
Bachelor’s degree in computer engineering, IT, cybersecurity, or related fields.
Experience requirements
- 5–12+ years of experience in IT/Network engineering, cybersecurity, or OT/SCADA systems.
- Hands-on experience with distributed sites, datacenter networks, and industrial operations.
- Experience securing OT environments in oil & gas, energy, utilities, manufacturing, or industrial plants.
- Proven ability to configure and manage enterprise firewalls and SIEM tools.
- Experience with network monitoring tools (SolarWinds, PRTG, Zabbix, Nagios, etc.).
- Deep knowledge of TCP/IP stack, routing protocols, network segmentation, NAC.
- Strong experience with virtualization and backup systems.
Key skills & competencies
- Strong analytical and troubleshooting skills in hybrid IT/OT environments.
- Ability to translate field issues into network or cybersecurity root causes.
- Strong documentation and communication abilities.
- High attention to detail with strong security-first mentality.
- Ability to work under pressure in production and critical site environments.
- Team-oriented with cross-functional collaboration across engineering, OT, and IT.
Optional/preferred skills
- Knowledge of Azure, Microsoft 365 security stack, conditional access, identity governance.
- Familiarity with SASE/SD-WAN, NAC (Cisco ISE or FortiNAC).
- Experience with configuration automation (Ansible, Python scripting).
- Familiarity with DR/BCP planning and resilient architecture.
- Experience conducting cybersecurity awareness sessions for staff.