OT Network Engineer — Secure Industrial Connectivity

Sword Group; Glasgow; On-site; GBP 60,000 - 95,000; Full time

Benefits offered by this job

Career development

Flexible working

Pension & private health

Job summary

Sword Group is seeking an OT Network Engineer / Consultant to design, implement and deliver secure, resilient industrial networks across OT environments. You will configure firewalls, switches, routers, DMZs and secure remote access, collaborating with clients and vendors to solve complex network challenges.

Opportunities for international travel are available. Candidates should have hands-on experience in enterprise/industrial networking, OT security principles, and familiarity with platforms

Qualifications

• Strong hands-on experience with enterprise and industrial networking.
• Strong knowledge of TCP/IP, VLANs, routing, switching, DNS and network services.
• Experience configuring and managing next-generation firewalls.
• Experience with platforms such as Palo Alto Networks, Fortinet, Cisco or Check Point.
• Strong understanding of firewall policies, NAT, VPNs, IPS/IDS and application-based security controls.
• Experience designing and implementing OT network segmentation and industrial DMZs.
• Experience with Cisco switching and routing technologies.
• Experience supporting secure remote access into OT environments.
• Understanding of industrial protocols and OT network architectures.
• Experience with network monitoring, packet analysis and troubleshooting tools.
• Experience with high availability, redundant networking and resilient network architectures.
• Experience with network device hardening and vulnerability remediation.
• Experience supporting network integration, testing, validation and commissioning activities.
• Experience producing technical network designs, diagrams, security documentation and test procedures.
• Strong technical troubleshooting and problem-solving skills.
• Confidence working directly with clients, vendors and technical stakeholders.
• Experience within OT / IC S, industrial, energy, utilities or Critical National Infrastructure environments.
• Knowledge of OT security principles and frameworks such as IEC 62443, Purdue Model, NCSC CAF or NIST
• Networking certifications such as CCNA or CCNP would be advantageous

Responsibilities

• Design and implement secure OT and industrial network architectures.
• Configure and manage firewalls, switches, routers and secure remote access solutions.
• Design and implement network segmentation across IT, OT and safety-critical environments.
• Support the deployment of industrial DMZs, security zones and conduits.
• Configure VLANs, routing, access controls and network security policies.
• Support firewall policy design, rule reviews and optimisation.
• Implement secure connectivity for OT applications, servers, engineering workstations and industrial systems.
• Support vendor and third-party network integration.
• Support network migrations, upgrades and infrastructure refresh programmes.
• Undertake network testing, validation and performance analysis.
• Support FAT, SAT, commissioning and production go-live activities.
• Troubleshoot complex network, connectivity and firewall issues.
• Support network hardening, vulnerability remediation and security improvement activities.
• Produce HLDs, LLDs, network diagrams, firewall rule sets, test plans and as-built documentation.
• Work alongside OT, cyber security, infrastructure, application and engineering teams.
• Provide technical consultancy and guidance to clients on OT network security and resilience

Skills

Hands-on networking

TCP/IP

VLANs

Routing

Switching

DNS

Firewalls

OT network security

Industrial DMZs

Remote access

Vulnerability remediation

Vendor liaison

Client-facing

Tools

Palo Alto Networks

Fortinet

Cisco

Check Point

Cisco switching & routing

Networking certifications (CCNA/CCNP)

Job description

Sword Group is seeking an OT Network Engineer / Consultant to design, implement and deliver secure, resilient industrial networks across OT environments. You will configure firewalls, switches, routers, DMZs and secure remote access, collaborating with clients and vendors to solve complex network challenges.

Opportunities for international travel are available. Candidates should have hands-on experience in enterprise/industrial networking, OT security principles, and familiarity with platforms