Network Design Engineer

Elite Technical - Independence, MO

Full-time

Independence, MO

About the position

We are seeking a Network Design Engineer with specialized knowledge in Operational Technology (OT) Network Design, particularly within manufacturing and energy-related environments. The selected candidate will join our client's technical team and work closely with a government contractor in Independence, MO, to develop comprehensive design package deliverables that align with project objectives. The role involves leveraging existing state documentation to create an architecture that supports the process control environment, ensuring that system resources and entities have the appropriate access rights defined by a common security policy or model. The project will apply best practices in systems and security engineering to decompose OT systems and produce a summary network segmentation in the form of a Purdue Model, Network Map, or Network Diagram deliverable for the client. This will involve conducting interviews, discussions, collaborations, and review sessions with client stakeholders to ensure that all requirements are met and that the design is robust and secure. Key security infrastructure considerations for this project include centralized logging, patch management, vulnerability management, configuration management, authentication and authorization, asset management, asset discovery, multifactor access for administration, and Security Information and Event Management (SIEM). While this position is primarily remote, there will be a need for onsite meetings at the client site in Independence, Missouri, with travel expected to be 1-2 times a month initially, tapering off as the project progresses.

Responsibilities

• Develop design package deliverables to meet project objectives.
• Create an architecture that supports the process control environment based on current state documentation.
• Apply best practices in systems and security engineering to decompose OT systems.
• Produce summary network segmentation deliverables such as Purdue Model, Network Map, or Network Diagram.
• Conduct interviews, discussions, and collaboration sessions with client stakeholders.
• Implement security infrastructure considerations including centralized logging, patch management, and vulnerability management.

Requirements

• Knowledge and hands-on experience with network topology and administrative commands in an industrial control environment.
• Experience working with OT or ICS equipment and processes, preferably in manufacturing or other industrial sectors.
• Experience applying industrial control systems (ICS) standards such as NIST SP 800-82, IEC 62443, or similar industry standards.
• Extensive experience with Visio, including cross-referencing ICS inventory of equipment, devices, systems, and applications.

Nice-to-haves

• Network design experience, particularly in design and documentation using Purdue Model and/or network diagrams.
• Experience with OT network segmentation.
• Experience managing, cataloging, or inventorying OT assets and systems.
• Familiarity with products such as Cisco, Allen Bradley, Fortinet, Schneider Electric, National Instruments, Phoenix Contact, Juniper Networks, and Lantronix.
• Experience in an industrial control environment and familiarity with safety processes and protocols.
• Familiarity with Industry 4.0.