Operational Technology Network Enigneer/Consultant

Sword Group; Glasgow; On-site; GBP 60,000 - 90,000; Full time

Job summary

Sword Group is seeking a skilled OT network security engineer to design and implement secure OT network architectures across critical environments in the UK. You will configure firewalls, switches, routers and secure remote access, while developing segmentation between IT, OT and safety-critical zones.

The role involves implementing industrial DMZs, conducting network testing and validation, and producing documentation.

Qualifications

• Hands-on experience with enterprise and industrial networking.
• Experience configuring and managing next-generation firewalls (Palo Alto, Fortinet, Cisco, Check Point).
• Knowledge of NAT, VPNs, IPS/IDS and application-based security controls.
• Experience designing OT network segmentation and industrial DMZs.
• Familiarity with VLANs, routing, TCP/IP, DNS and network services.
• Experience with network monitoring, troubleshooting tools and high-availability architectures.
• Understanding of OT security frameworks (IEC 62443, NIST) is advantageous.

Responsibilities

• Design and implement secure OT network architectures.
• Configure and manage firewalls, switches, routers and secure remote access solutions.
• Develop and implement network segmentation between IT, OT and safety-critical environments.
• Support deployment of industrial DMZs, security zones and conduits.
• Configure VLANs, routing, access controls and network security policies.
• Assist firewall policy design, rule reviews and optimisation.
• Provide technical consultancy on OT network security and resilience.
• Produce network diagrams, firewall rule sets and test plans.

Skills

Industrial networking

Firewall configuration

Network segmentation

NAT/VPNs

Troubleshooting

Networking protocols

Tools

Palo Alto Networks

Fortinet

Cisco

Check Point

Job description

At Sword, we help power, secure and transform the organisations that keep the UK running. Supporting customers across Critical National Infrastructure, energy, public sector and enterprise markets, we combine deep industry expertise with leading technology services spanning managed services, cyber security, cloud, data, AI and digital transformation.

Join Sword and you'll be part of a team solving complex challenges, delivering real-world impact and working alongside talented colleagues who care deeply about quality, collaboration and customer success.

About the Role:

• Design and implement secure OT network architectures. Configure and manage firewalls, switches, routers and secure remote access solutions.
• Develop and implement network segmentation between IT, OT and safety‑critical environments.
• Support deployment of industrial DMZs, security zones and conduits.
• Configure VLANs, routing, access controls and network security policies.
• Support firewall policy design, rule reviews and optimisation.
• Implement secure connectivity for OT applications, servers, engineering workstations and industrial systems.
• Support network migrations, upgrades and infrastructure refresh programmes. Undertake network testing, validation and performance analysis. Support FAT, SAT, commissioning and production go‑live activities.
• Troubleshoot complex network, connectivity and firewall issues.
• Support network hardening, vulnerability remediation and security improvement activities.
• Produce HLDs, LLDs, network diagrams, firewall rule sets, test plans and as‑built documentation.
• Work alongside OT, cyber security, infrastructure, application and engineering teams.
• Provide technical consultancy and guidance to customers on OT network security and resilience.

• Strong hands‑on experience with enterprise and industrial networking. Strong experience configuring and managing next‑generation firewalls.
• Experience with platforms such as Palo Alto Networks, Fortinet, Cisco or Check Point. Strong understanding of firewall policies, NAT, VPNs, IPS/IDS and application‑based security controls.
• Experience designing and implementing OT network segmentation and industrial DMZs. Strong knowledge of VLANs, routing, switching, TCP/IP, DNS and network services.
• Experience with Cisco switching and routing technologies.
• Experience supporting secure remote access and privileged connectivity into OT environments.
• Understanding of industrial protocols. Experience with network monitoring, packet analysis and troubleshooting tools.
• Experience with high availability, redundant networking and resilient network architectures.
• Knowledge of network access control, identity‑based access and zero trust principles.
• Experience with network testing, validation and acceptance activities.
• Experience producing technical network and security documentation.
• Experience within OT, industrial, energy, utilities or CNI environments would be highly desirable.
• Knowledge of IEC 62443, Purdue Model, NCSC CAF, NIST or other OT security frameworks would be advantageous.