OT Networking Engineer

Infosys; Bengaluru; On-site; INR 3,200,000 - 5,200,000; Full time

Job summary

Infosys in Bengaluru is seeking a senior Network Engineer with 9–15 years of experience, including 3+ years in OT/Industrial environments. You will design IT/OT network architectures, configure VLANs, ACLs, OSPF/BGP, QoS, and deploy firewalls. Strong vendor experience with Cisco/Juniper/Aruba/HPE devices and OT security frameworks is required.

The role focuses on secure remote access, industrial protocol support, and monitoring of SCADA/IIoT networks in a defense-in-depth environment.

Qualifications

• 9–15 years of experience in network engineering with 3+ years in OT/industrial settings.
• Strong hands-on expertise in L2/L3 networking, routing, switching, VLANs, ACLs, STP, OSPF/BGP, and QoS.
• Experience with Cisco/Juniper/Aruba/HPE networking solutions and OT security frameworks such as IEC 62443.

Responsibilities

• Design and support IT/OT network architectures following Purdue Model.
• Configure VLANs, ACLs, VRFs, OSPF, BGP, NAT, QoS, and DMZs.
• Deploy and manage firewalls (Palo Alto, Fortinet, Cisco) and secure remote access solutions.
• Monitor and troubleshoot OT/industrial networks and security controls.

Skills

Network engineering

IT/OT integration

L2/L3 networking

Routing & Switching

VLANs/ACLs

OSPF/BGP

Firewalls

Industrial protocols

OPC UA/Profinet

OT security (IEC 62443/NIST)

ICS/SCADA knowledge

Tools

Cisco devices

Juniper devices

Aruba devices

HPE networking

Fortinet/Palo Alto

Wireshark

SolarWinds

PRTG

Zabbix

Nozomi/Claroty

Job description

9 to 15 years of experience in Network Engineering, including 3+ years in OT/Industrial environments such as Manufacturing, Utilities, Pharma, Energy, or Oil & Gas. Strong expertise in L2/L3 networking, Routing & Switching, VLANs, ACLs, STP, HSRP/VRRP, OSPF, BGP, and QoS. Hands-on experience with Cisco, Juniper, Aruba, or HPE networking solutions and Palo Alto, Fortinet, or Cisco firewalls. Experience with network services and tools including DHCP, DNS, NTP, IPAM, Syslog, and Wireshark. Good understanding of ICS/SCADA architectures, Purdue Model, OT DMZ design, Historian connectivity, and industrial networking concepts. Working knowledge of industrial protocols such as Modbus TCP, OPC UA, Profinet, EtherNet/IP, and DNP3. Familiarity with OT cybersecurity frameworks and controls including IEC 62443, NIST CSF, IDS/IPS, NAC, SIEM, and vulnerability management.

Design and support IT/OT network architectures following the Purdue Model and defense-in-depth principles. Configure and manage VLANs, ACLs, VRFs, OSPF, BGP, NAT, QoS, DMZs, and network segmentation. Deploy and administer Palo Alto, Fortinet, and Cisco firewalls. Support connectivity for SCADA, PLC, RTU, HMI, Historian, and IIoT systems. Implement secure remote access solutions using VPNs, Jump Servers, and Zero Trust models. Monitor and troubleshoot network performance using SolarWinds, PRTG, Zabbix, Wireshark, Nozomi, and Claroty. Secure industrial protocols including Modbus TCP, OPC UA, Profinet, EtherNet/IP, DNP3, and BACnet.

Strong stakeholder management and communication skills. Ability to bridge IT and OT requirements effectively. Excellent troubleshooting, documentation, and problem-solving capabilities.