CIP Network Engineer

NRG Energy - Houston, TX

Full-time

Remote - Houston, TX

Utilities

About the position

As a Critical Infrastructure Protection (CIP) Network Engineer at NRG, you will play a vital role in ensuring the security and compliance of network equipment at the enterprise level. This position involves a comprehensive range of responsibilities, including network segmentation and VPN design, as well as executing CIP compliance activities such as patch assessments, change control, disaster recovery testing, cyber vulnerability assessments, and logical segmentation analysis. Your expertise will be crucial in maintaining the integrity and security of our network infrastructure, which is essential for the operational success of our organization. In this role, you will be responsible for the design and implementation of secure networks that align with NERC CIP compliance and cybersecurity requirements. You will work independently to perform and coordinate site-specific activities, tests, and controls to ensure ongoing compliance of the Fortinet network infrastructure. Utilizing tools such as FortiManager, FortiAnalyzer, and FortiSIEM, you will monitor and maintain the operation and security of our systems. Additionally, you will assist in preparing for various audits and act as a subject matter expert (SME) in the field. Your responsibilities will also include leading the maintenance of CIP network policies and procedures, such as change control procedures and disaster recovery plans. You will monitor electronic perimeters for potential breaches and act as the first responder for any incidents. Your analytical skills will be put to use as you provide detailed analysis, diagnosis, and mitigation strategies for operational or compliance issues. Through cross-training, you will also provide backup support for the CIP team as needed.

Responsibilities

• Network design and implementation for secure networks relating to NERC CIP compliance and cyber security of the fleet.
• Network segmentation and protection to meet compliance goals.
• Perform and/or coordinate all site-specific activities, tests and controls for meeting program requirements and ongoing compliance of Fortinet network infrastructure.
• Utilize tools such as FortiManager, FortiAnalyzer, FortiSIEM to monitor and maintain the operation and security of the Fortinet infrastructure.
• Assist in preparation for various audits and act as subject matter expert (SME).
• Lead the maintenance of the CIP network policies and procedures such as change control procedures, back-up, and disaster recovery plans.
• Serve as SME on hardware, software, and control architectures for CIP.
• Utilize best practices and knowledge of internal/external issues to improve or recommend technical or compliance solutions.
• Monitor electronic perimeters for potential breaches/vulnerabilities and act as first responder for any potential incident.
• Provide input for detailed analysis, diagnosis and mitigation based upon findings and deficiencies for operational or compliance issues.
• Provide backup activities and response for the CIP team through cross training.

Requirements

• 2 years of experience operating and maintaining next generation firewalls (Fortinet preferred).
• 5 years of experience in implementation and administration of LAN/WAN/Internet networks and services.

Nice-to-haves

• Experience designing, securing, and maintaining networks using Fortinet Firewalls.
• Experience maintaining security applications such as intrusion prevention, antivirus, patch assessment, security incident and event management (SIEM).
• Experience in a CIP Low program development and execution.
• Experience with Routing, Switching, Datacenters, VPN, LAN, WAN, Wireless, Network Security, Intrusion Detection, and Anti-Virus.
• Power industry or other industrial experience in an IT/OT environment.

Benefits

• Competitive salary based on experience and education.
• Opportunities for career development and growth within the company.
• Dynamic work environment with variety and challenge.