OT Networking Engineer

Design and support IT/OT network architectures following the Purdue Model and defense-in-depth principles.
Configure and manage VLANs, ACLs, VRFs, OSPF, BGP, NAT, QoS, DMZs, and network segmentation.
Deploy and administer Palo Alto, Fortinet, and Cisco firewalls.
Support connectivity for SCADA, PLC, RTU, HMI, Historian, and IIoT systems.
Implement secure remote access solutions using VPNs, Jump Servers, and Zero Trust models.
Monitor and troubleshoot network performance using SolarWinds, PRTG, Zabbix, Wireshark, Nozomi, and Claroty.
Secure industrial protocols including Modbus TCP, OPC UA, Profinet, EtherNet/IP, DNP3, and BACnet.

Strong stakeholder management and communication skills.
Ability to bridge IT and OT requirements effectively.
Excellent troubleshooting, documentation, and problem-solving capabilities.

9 to 15 years of experience in Network Engineering, including 3+ years in OT/Industrial environments such as Manufacturing, Utilities, Pharma, Energy, or Oil & Gas.
Strong expertise in L2/L3 networking, Routing & Switching, VLANs, ACLs, STP, HSRP/VRRP, OSPF, BGP, and QoS.
Hands-on experience with Cisco, Juniper, Aruba, or HPE networking solutions and Palo Alto, Fortinet, or Cisco firewalls.
Experience with network services and tools including DHCP, DNS, NTP, IPAM, Syslog, and Wireshark.
Good understanding of ICS/SCADA architectures, Purdue Model, OT DMZ design, Historian connectivity, and industrial networking concepts.
Working knowledge of industrial protocols such as Modbus TCP, OPC UA, Profinet, EtherNet/IP, and DNP3.
Familiarity with OT cybersecurity frameworks and controls including IEC 62443, NIST CSF, IDS/IPS, NAC, SIEM, and vulnerability management.

We are seeking an experienced IT/OT Networking Engineer with expertise in industrial networking, OT cybersecurity, ICS/SCADA systems, and network security. The role involves designing, securing, and supporting converged IT/OT networks across manufacturing, utilities, energy, and industrial environments while ensuring reliability, compliance, and seamless connectivity.