OT Network Architect

About the position

When you join our team as a OT Network Architect, you will design, implement, and secure Operational Technology (OT) networks for industrial environments. This role requires strong collaboration with IT, engineering, and operations teams to ensure secure, reliable, and high-performing OT network infrastructures.

Responsibilities

• Design and implement OT network architectures aligned with industry best practices, NIST, IEC 62443, and business objectives.
• Develop Network Architecture Design Documents and maintain Network & Hardware Standards.
• Establish Network & Hardware Design Principles for scalability, performance, and security.
• Define Network and Hardware Redundancy & Failover Strategies to ensure high availability.
• Create Network and Hardware Data Flow Diagrams for system interactions.
• Develop network segmentation strategies, ensuring separation between IT and OT environments while maintaining secure connectivity.
• Assess and mitigate cybersecurity risks by implementing access controls, anomaly detection, and monitoring solutions.
• Configure and optimize firewalls, routers, switches, VLANs, industrial DMZs, and VPNs for secure communication.
• Develop and enforce network policies, security standards, and compliance guidelines specific to OT environments.
• Conduct Network Traffic Analysis Reports to identify and address performance bottlenecks.
• Perform Evaluation of Site Loading to assess network scalability and capacity planning.
• Monitor network health and maintain Lifecycle Operations & Maintenance (LOM) and Level of Service (LOS) Reports.
• Support disaster recovery and business continuity planning for OT networks.
• Conduct Network and Hardware Vendor Evaluations and recommend solutions based on performance and security requirements.
• Develop and maintain an Inventory of network and hardware assets to support lifecycle management.
• Work with vendors and system integrators to ensure seamless deployment of network solutions.
• Develop and deliver a Network and Hardware Training Plan for OT personnel and engineers.
• Maintain up-to-date network documentation, topology diagrams, and security policies.

Requirements

• Bachelor's degree in Computer Science, Network Engineering, Cybersecurity, or a related field.
• 10+ years of experience in network architecture, industrial networking, or OT cybersecurity.
• Strong knowledge of OT/ICS protocols such as Modbus, DNP3, OPC-UA, PROFINET, and BACnet.
• Experience designing and securing SCADA, DCS, PLC, and IIoT environments.
• Hands-on experience with Cisco, Palo Alto, Fortinet, or equivalent networking/security devices.
• Expertise in firewall configuration, network segmentation, and zero-trust security principles.
• Familiarity with NIST CSF, IEC 62443, ISA/IEC 99 cybersecurity frameworks.
• Proficiency in VPNs, VLANs, IDS/IPS, NAC, and secure remote access solutions.
• Experience in oil & gas, utilities, manufacturing, or critical infrastructure industries.
• Background in network traffic analysis, intrusion detection/prevention.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills to collaborate with cross-functional teams.

Benefits

• Group Benefit Programs (Employee Medical, Dental, Vision Plans)
• Short Term Disability Insurance
• Long Term Disability Insurance
• Life and AD&D Insurance
• Additional (Employee Paid) Life Insurance
• HSA Medical Plan with Employer Match
• Supplemental Insurance (Accident, Hospital & Critical Illness)
• 401(k) Matching Plan
• Participation in our Employee Share Purchase Plan (ESPP)
• Paid Vacation
• Employee Assistance Program