Network Engineer, OT
Share
Job Location:
Houston, MS - USA
Monthly Salary:
Not Disclosed
Posted on:
20 hours ago
Vacancies:
1 Vacancy
Job Summary
Network Engineer OT
About PROENERGY
PROENERGY is a global and vertically integrated energy transition platform. Focused exclusively on fast-start dispatchable power our company supports both energy security and renewable growth with complete turbine services project development equipment manufacturing turnkey generation facilities operations and maintenance.
Our Footprint
We are primed for the Energy Transition with permanent service locations in Missouri Texas and Argentina. Our world-class Missouri headquarters is purpose-built to meet peaking-power needs. It sits on 90 acres in Sedalia and features more than 900000 sq. ft of facilities and equipment including the only independent Level-IV aeroderivative depot in North America and a hydrogen-ready string-test facility that enables full-speed full-load testing. Our Houston Texas office is a strategic satellite positioned near our own peaking-power installations.
Our Philosophy
We take care of our people and strive to make a positive difference for the world. We offer competitive pay excellent benefits that include Medical Dental Vision and Life/Disability Insurance at minimal cost to the employee 10 paid holidays paid time off and a 401K plan. If you are looking for a rewarding career and possess the specialized knowledge and quality-oriented problem-solving skills we encourage you to apply today.
Position Summary
The Network Engineer OT is a senior technical professional responsible for architecting implementing and maintaining enterprise-grade network infrastructure supporting both operational technology (OT) environments and IT systems across critical power generation facilities. This advanced role requires deep expertise in industrial control systems networking cybersecurity architecture and enterprise IT integration. The position demands proficiency in Cisco and Fortinet technologies NERC-CIP compliance frameworks and the ability to bridge IT/OT convergence challenges while maintaining the highest levels of system availability and security for mission-critical energy infrastructure.
Reports To: Supervisor Network Engineering
Work Location: 6246 McHard Road Houston TX 77053
Position Responsibilities
- Design and implement sophisticated network architectures for SCADA DCS historian systems and industrial control networks using Cisco Industrial Ethernet switches and Cisco Catalyst infrastructure
- Engineer and maintain next-generation firewalls (NGFWs) for network segmentation UTM application control and IPS/IDS functionality across IT/OT boundaries
- Deploy and manage Cisco SD-WAN solutions for multi-site connectivity optimize configurations and implement advanced routing protocols (OSPF EIGRP BGP) for enterprise and industrial networks
- Configure redundant network topologies utilizing protocols such as RSTP PRP HSR and Cisco StackWise for high-availability industrial applications
- Implement Quality of Service (QoS) policies VLAN architectures and traffic shaping to prioritize real-time control system communications and support converged IT/OT networks
- Design and maintain enterprise Wi-Fi infrastructure using Wireless LAN Controllers and access point solutions for both corporate and industrial environments
- Manage network infrastructure supporting virtualization platforms (VMware vSphere) cloud connectivity (Azure) and hybrid IT architectures
- Deploy and optimize network monitoring solutions including SolarWinds Cisco Catalyst Center and FortiAnalyzer for comprehensive visibility across IT/OT environments
- Architect and implement defense-in-depth security strategies and network access control (NAC) technologies
- Configure and manage Firewall security policies SSL/IPsec VPN tunnels and secure remote access solutions for critical infrastructure personnel
- Design Electronic Security Perimeters (ESP) compliant with NERC-CIP standards implementing defense mechanisms including firewalls unidirectional gateways and DMZ architecture
- Deploy and maintain intrusion detection/prevention systems (IDS/IPS) using next-gen technologies for continuous threat monitoring
- Implement zero-trust network architectures micro-segmentation strategies and least-privilege access controls across IT and OT domains
- Maintain comprehensive compliance with NERC-CIP and related standards for critical infrastructure protection
- Conduct vulnerability assessments penetration testing coordination and security hardening of network devices following ISA/IEC 62443 and NIST Cybersecurity Framework guidelines
- Lead incident response activities for network security events coordinate forensic analysis and implement corrective action plans
- Configure and optimize industrial protocol communications including Modbus TCP/RTU DNP3 OPC UA IEC 61850 and Profinet across control system networks
- Implement protocol gateways serial-to-Ethernet converters and ensure proper encapsulation for legacy industrial communications
- Support historian database connectivity real-time data acquisition systems and SCADA master-to-RTU communication architectures
- Design redundant communication paths for critical control functions utilizing diverse routing and automatic failover mechanisms
- Troubleshoot deterministic Ethernet configurations time-sensitive networking (TSN) and precision time protocol (PTP/IEEE 1588) implementations
- Coordinate with controls engineers on PLC/DCS network requirements including Allen-Bradley ControlLogix GE Mark series and Siemens S7 platforms
- Integrate OT networks with enterprise IT services including Active Directory DNS DHCP NTP and Windows Server infrastructure while maintaining proper segmentation
- Configure and manage network infrastructure for Microsoft 365/Azure AD integration site-to-site VPNs and cloud service connectivity
- Implement network solutions for audio/visual conferencing systems IP telephony (VoIP) and unified communications platforms
- Deploy network infrastructure for physical security systems including IP camera networks access control integration and building management systems (BMS)
- Manage patch management firmware updates and change control processes for network devices across IT and OT environments using ServiceNow or similar ITSM platforms
- Monitor and optimize network performance utilizing advanced analytics NetFlow/sFlow analysis and packet capture tools (Wireshark tcpdump) for troubleshooting
- Implement redundancy and high-availability solutions ensuring 99.99% uptime for critical OT communications and 24/7 operational support capabilities
- Conduct capacity planning bandwidth analysis and network lifecycle management to support growing operational and business data requirements
- Design and test disaster recovery/business continuity procedures for network infrastructure including backup configurations and restoration processes
- Maintain comprehensive network documentation including logical/physical topology diagrams IP address management (IPAM) and configuration management databases (CMDB)
- Lead network design and implementation for new facility construction equipment installations and technology refresh initiatives
- Participate in commissioning activities factory acceptance testing (FAT) and site acceptance testing (SAT) for control system network infrastructure
- Provide technical leadership for vendor evaluations RFP development and technology selection processes for network equipment and services
- Mentor junior engineers and technicians on advanced networking concepts Cisco/Fortinet technologies and OT security best practices
- Develop and maintain standards procedures and technical documentation including network design templates and troubleshooting guides
- Coordinate with IT Operations teams on service delivery SLA management and continuous improvement initiatives across infrastructure domains
Required Qualifications
- Bachelors degree in Computer Science Information Technology Electrical Engineering or related technical discipline
- Minimum 7-10 years of progressive experience in network engineering with at least 5 years focused on industrial/OT environments
- Demonstrated experience in power generation oil & gas manufacturing or other critical infrastructure industries
- Proven track record of managing complex multi-site network infrastructure projects from design through implementation.
- Exceptional analytical and troubleshooting abilities for complex network issues in time-critical operational environments
- Outstanding written and verbal communication skills with ability to translate technical concepts for diverse audiences including operations personnel and executive leadership
- Strong project management capabilities with experience coordinating cross-functional teams and managing multiple concurrent initiatives
- Demonstrated customer service orientation with focus on supporting 24/7 critical operations
- Meticulous attention to detail for configuration management documentation standards and regulatory compliance
- Ability to work independently prioritize competing demands and make sound technical decisions under pressure
- Expert-level proficiency with Cisco enterprise and industrial networking technologies including Catalyst switches Nexus data center switches ISR/ASR routers and Industrial Ethernet (IE-4000/IE-5000) platforms
- Advanced expertise in Fortinet FortiGate firewalls FortiManager central management FortiAnalyzer logging/reporting and Security Fabric integration
- Deep understanding of Cisco IOS/IOS-XE command-line interface configuration management and troubleshooting methodologies
- Comprehensive knowledge of routing protocols (OSPF EIGRP BGP) switching technologies (STP/RSTP/MST) and VLAN design principles
- Advanced experience with SCADA networks DCS infrastructure and industrial control system communications architecture
- Strong proficiency in industrial protocols including Modbus TCP/RTU DNP3 OPC UA and Ethernet/IP
- In-depth understanding of NERC-CIP Critical Infrastructure Protection standards particularly CIP-005 CIP-007 and Electronic Security Perimeter requirements
- Working knowledge of PLC/PAC technologies including Allen-Bradley ControlLogix Rockwell Automation FactoryTalk and Siemens SIMATIC platforms
- Experience with network security technologies including VPN (IPsec/SSL) NAC 802.1X authentication and identity management solutions
- Proficiency with network monitoring and management tools such as SolarWinds Cisco Prime Infrastructure PRTG or equivalent platforms
- Understanding of IT infrastructure including Windows Server environments Active Directory virtualization (VMware/Hyper-V) and cloud networking concepts
- Travel up to 35%
- US work authorization is a precondition of employment. The company will not consider candidates who require sponsorship for a work-authorized visa.
- Successful candidate will need to satisfactorily complete pre-employment drug screen and background
Desired Qualifications
- Experience with Cisco technologies architecture deployment and management
- Experience with Fortinet technologies architecture deployment and management
- Familiarity with network automation and scripting using Python Ansible or similar tools for infrastructure-as-code implementations
- Experience with time-sensitive networking (TSN) deterministic Ethernet and precision time protocol (PTP/IEEE 1588)
- Knowledge of wireless industrial networks including WirelessHART ISA100.11a and private LTE/5G for industrial applications
- Understanding of fiber optic technologies including single-mode/multi-mode design DWDM and outside plant (OSP) installations
- Experience with software-defined networking (SDN) network function virtualization (NFV) and intent-based networking concepts
- Specific experience in gas turbine power generation facilities aeroderivative turbine controls or combined cycle plant operations
- Knowledge of asset performance management (APM) platforms condition monitoring systems and predictive maintenance analytics
- Understanding of integration between OT and enterprise systems including ERP (SAP/Oracle) CMMS (Maximo/SAP PM) and document management systems
- Experience with cloud networking architectures including Azure Virtual Networks AWS VPC and hybrid cloud connectivity
- Familiarity with ITIL framework ServiceNow ITSM platform and IT service management best practices
- Knowledge of emergency response procedures business continuity planning and crisis management for critical infrastructure
Certifications
- Cisco CCNP Enterprise or CCNP Security certification (current and active)
- Fortinet NSE 4 FortiGate Network Security certification (minimum required)
- ISA/IEC 62443 Cybersecurity Certificate demonstrating industrial security expertise
- CompTIA Security or equivalent baseline cybersecurity certification
Preferred
- Cisco CCIE Enterprise Infrastructure or CCIE Security (highly valued)
- Fortinet NSE 7 Enterprise Firewall or NSE 8 certification
- Cisco CCNA Industrial or equivalent industrial networking certification
- NERC-CIP certification for critical infrastructure protection
- GIAC Industrial Control Systems Professional (GICSP) or similar OT security certification
- Industrial automation vendor certifications (Rockwell Automation Schneider Electric GE Digital Siemens)
- CISSP CISM or other advanced security certifications
Working Conditions
- Ability to work in industrial power generation facilities control rooms and data center environments
- Regular exposure to industrial hazards requiring strict compliance with safety protocols PPE requirements and confined space entry procedures
- Ability to work safely around high-voltage electrical equipment rotating machinery and hazardous energy sources
- Work in varying environmental conditions including temperature extremes noise and outdoor installations
- Standard business hours with significant on-call responsibilities for 24/7 critical system support
- Availability for emergency response during power generation incidents control system failures or cybersecurity events
- Extensive travel to multiple facility locations across North America (30-35% travel requirement)
- Regular participation in planned maintenance outages requiring evening weekend and holiday work schedules
- Physical capability to install and maintain network equipment in challenging locations including elevated platforms cable trays and equipment rooms
- Ability to lift and carry network equipment up to 50 pounds climb ladders and work in physically demanding positions
- Successful completion of background checks drug screening and security clearances required for critical infrastructure access
It is PROENERGYs policy to provide equal opportunity in employment to all its employees and applicants for employment without regard to race color religion sex pregnancy age disability national origin marital status ancestry medical condition military status or any other characteristic protected by State or Federal law.
Required Experience:
IC
Key Skills
- Load Balancing
- Routing Protocols
- Network Administration
- Network Engineering
- BGP
- LAN
- Computer Networking
- IPsec
- OSPF
- Cisco ASA
- Juniper
- MPLS
About Company
PROENERGY was founded in 2002 by President and CEO Jeff Canon. PROENERGY completed construction on its corporate office in Sedalia, Missouri in 2006. Since that time our campus has undergone multiple expansions, currently sitting on 90-acres and featuring 900,000 square feet of ...
