OT Networking Engineer

Infosys; Bengaluru; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

Infosys is seeking an experienced Network Engineer in Bengaluru to design and support IT/OT network architectures aligned with the Purdue Model and defense-in-depth principles.

You will configure VLANs, ACLs, OSPF/BGP, QoS, NAT, and firewalls (Palo Alto/Fortinet/Cisco) to enable SCADA, PLC, RTU, HMI, Historian and IIoT connectivity. Strong knowledge of industrial protocols and OT security is required.

Qualifications

• 9–15 years of experience in Network Engineering with 3+ years in OT/Industrial environments.
• Strong expertise in L2/L3 networking, routing & switching, VLANs, ACLs, STP, HSRP/VRRP, OSPF, BGP, and QoS.
• Hands-on experience with Cisco, Juniper, Aruba, or HPE networking solutions and Palo Alto, Fortinet, or Cisco firewalls.
• Experience with network services and tools such as DHCP, DNS, NTP, IPAM, Syslog, and Wireshark.
• Understanding of OT/ICS architectures, Purdue Model, OT DMZ design, and industrial protocols.

Responsibilities

• Design and support IT/OT network architectures following the Purdue Model and defense-in-depth principles.
• Configure and manage VLANs, ACLs, VRFs, OSPF, BGP, NAT, QoS, DMZs, and network segmentation.
• Deploy and administer Palo Alto, Fortinet, and Cisco firewalls; support connectivity for SCADA, PLC, RTU, HMI, Historian and IIoT systems.
• Implement secure remote access solutions using VPNs, Jump Servers, and Zero Trust models.
• Monitor and troubleshoot network performance with tools like SolarWinds, PRTG, Zabbix, Wireshark, and Nozomi.

Skills

L2/L3 networking

Routing & Switching

VLANs

ACLs

OSPF/BGP

QoS

Firewalls

Industrial OT

Industrial protocols

Wireshark

SolarWinds

Tools

Cisco equipment

Juniper devices

Aruba devices

HPE networking

Palo Alto firewall

Fortinet firewall

Job description

9 to 15 years of experience in Network Engineering, including 3+ years in OT/Industrial environments such as Manufacturing, Utilities, Pharma, Energy, or Oil & Gas. Strong expertise in L2/L3 networking, Routing & Switching, VLANs, ACLs, STP, HSRP/VRRP, OSPF, BGP, and QoS. Hands-on experience with Cisco, Juniper, Aruba, or HPE networking solutions and Palo Alto, Fortinet, or Cisco firewalls. Experience with network services and tools including DHCP, DNS, NTP, IPAM, Syslog, and Wireshark. Good understanding of IC S/SCADA architectures, Purdue Model, OT DMZ design, Historian connectivity, and industrial networking concepts. Working knowledge of industrial protocols such as Modbus TCP, OPC UA, Profinet, EtherNet/IP, and DNP3. Familiarity with OT cybersecurity frameworks and controls including IEC 62443, NIST CSF, IDS/IPS, NAC, SIEM, and vulnerability management.

Design and support IT/OT network architectures following the Purdue Model and defense-in-depth principles. Configure and manage VLANs, ACLs, VRFs, OSPF, BGP, NAT, QoS, DMZs, and network segmentation. Deploy and administer Palo Alto, Fortinet, and Cisco firewalls. Support connectivity for SCADA, PLC, RTU, HMI, Historian, and IIoT systems. Implement secure remote access solutions using VPNs, Jump Servers, and Zero Trust models. Monitor and troubleshoot network performance using SolarWinds, PRTG, Zabbix, Wireshark, Nozomi, and Claroty. Secure industrial protocols including Modbus TCP, OPC UA, Profinet, EtherNet/IP, DNP3, and BACnet.

Strong stakeholder management and communication skills. Ability to bridge IT and OT requirements effectively. Excellent troubleshooting, documentation, and problem-solving capabilities.