IT OT Network Engineer

Position Summary

The Operational Technology (OT) Network Engineer is responsible for designing, implementing, maintaining, and securing the network infrastructure that supports Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), Distributed Control Systems (DCS), remote field operations, and critical infrastructure. This position serves as the bridge between Information Technology (IT) and Operational Technology (OT), ensuring reliable communications, secure access, and high availability across both on-premises and cloud environments.

The ideal candidate is a hands-on engineer with strong networking, firewall, and industrial cybersecurity experience who understands that OT environments require careful planning, minimal downtime, and a security-first mindset. This role requires the ability to work independently, collaborate with vendors and internal teams, and document complex environments to support long-term operational success.

Key Responsibilities

Remote Network & Telecommunications Management

• Assist with the specification, deployment, configuration, and ongoing maintenance of network and telecommunications hardware at remote field sites.
• Troubleshoot VPN tunnels, WAN connectivity, and remote communications issues between field locations and corporate infrastructure.
• Coordinate directly with Internet Service Providers (ISPs), telecommunications vendors, and local contractors to resolve communication issues.
• Participate in network planning, onboarding, and commissioning activities for new customer sites and remote facilities.
• Assess, map, and document existing remote OT networks, including legacy and undocumented environments utilizing hardware from multiple vendors.
• Develop and maintain accurate network diagrams and documentation to improve operational visibility and reduce reliance on institutional knowledge.

Third-Party Vendor & Firewall Management

• Serve as the primary technical liaison between the organization and third-party firewall support providers.
• Manage support tickets, coordinate troubleshooting activities, and ensure timely resolution of network and security issues.
• Assist with firewall configuration reviews, policy changes, firmware updates, and ongoing security improvements.

Access Control & OT Cybersecurity

• Administer and audit user access for technicians, operators, engineers, contractors, and customers.
• Manage role-based access control (RBAC), authentication, and security policies across OT systems.
• Ensure all network and security decisions align with Critical Infrastructure Protection (CIP) principles, NERC CIP requirements, defense-in-depth strategies, and proper network segmentation.
• Support vulnerability remediation efforts while minimizing operational impact to production systems.

Azure Cloud & Hybrid Infrastructure

• Assist with the administration, maintenance, and optimization of the organization's Microsoft Azure environment.
• Support the migration from traditional infrastructure to a hybrid cloud architecture.
• Collaborate with leadership and technical staff to leverage Azure services that improve operational efficiency, customer services, and internal workflows.
• Participate in implementing secure connectivity between cloud and on-premises OT environments.

Data Management, Research & Development, and Documentation

• Configure and maintain databases supporting historical operational data, network configuration information, and asset inventories.
• Develop comprehensive documentation for OT infrastructure, remote sites, and communication networks.
• Build and maintain an organized inventory and indexing system for remote facilities and network assets.
• Design, implement, and support a dedicated Research & Development (R&D) network segment for testing new technologies and validating system changes prior to production deployment.
• Establish documentation standards that promote consistency, knowledge sharing, and long-term maintainability.

Network Engineering & Operations

• Design, configure, and maintain Layer 2 and Layer 3 industrial networks.
• Configure switches, routers, firewalls, VPN concentrators, wireless infrastructure, and industrial networking equipment.
• Support industrial communication protocols including:
• EtherNet/IP
• Modbus TCP/IP
• PROFINET
• OPC UA
• DNP3
• Implement network segmentation, redundancy, and high-availability architectures appropriate for industrial environments.
• Monitor network health and proactively identify potential reliability or security issues.
• Other duties as assigned.