CIP Network Engineer (remote)

NRG Energy; Houston (TX); Remote; USD 70,000 - 110,000; Full time

Job summary

Join a forward-thinking company as a Critical Infrastructure Protection Network Analyst, where you'll be at the forefront of maintaining and securing network equipment. This role involves designing secure networks to meet compliance goals, conducting cyber vulnerability assessments, and utilizing advanced tools to enhance network security. You'll work independently and collaboratively in a dynamic environment, ensuring the safety and compliance of critical infrastructure. If you're passionate about cybersecurity and eager to make a significant impact, this opportunity is perfect for you.

Qualifications

• 2 years of experience with next-generation firewalls, preferably Fortinet.
• 5 years of experience in LAN/WAN/Internet networks and services.

Responsibilities

• Design and implement secure networks for NERC CIP compliance.
• Monitor network security and respond to potential breaches.

Skills

Network Design

Cyber Security

Fortinet Firewalls

LAN/WAN Administration

Compliance Management

Analytical Skills

Project Management

Education

Bachelor's Degree in Computer Science or related field

Tools

FortiManager

FortiAnalyzer

FortiSIEM

Job description

As an NRG employee, we encourage you to take charge of your career and development journey. We invite you to explore exciting opportunities across our businesses. You'll find that our dynamic work environment provides variety and challenge. Your growth is key to our ongoing success-take the lead in shaping your career development, goals and future!

Job Summary:

• The Critical Infrastructure Protection (CIP) Network Analyst has responsibility for maintenance, security, and CIP compliance of network equipment at the enterprise level. Scope includes network segmentation and VPN design, executing CIP compliance activities such as patch assessments on network equipment, change control, disaster recovery testing, cyber vulnerability assessments, and logical segmentation analysis.

Essential Duties/Responsibilities:

• Network design and implementation for secure networks relating to NERC CIP compliance and cyber security of the fleet.
• Network segmentation and protection to meet compliance goals.
• Working independently, perform and/or coordinate all site-specific activities, tests and controls for meeting program requirements and ongoing compliance of Fortinet network infrastructure.
• Utilize tools such as FortiManager, FortiAnalyzer, FortiSIEM to monitor and maintain the operation and security of the Fortinet infrastructure.
• Assist in preparation for various audits and act as subject matter expert (SME)
• Lead the maintenance of the CIP network policies and procedures such as change control procedures, back-up, and disaster recovery plans.
• Serve as SME on hardware, software, and control architectures for CIP.
• Utilize best practices and knowledge of internal/external issues to improve or recommend technical or compliance solutions.
• Monitor electronic perimeters for potential breaches/vulnerabilities and act as first responder for any potential incident.
• Provide input for detailed analysis, diagnosis and mitigation based upon findings and deficiencies for operational or compliance issues.
• Through cross training, provide backup activities and response for the CIP team.

Working Conditions:

• Majority of work by telecommuting
• Open office environment, plant or datacenter as needed.
• Some overtime required as special projects arise.
• Travel up to 25% in ERCOT region

Minimum Requirements:

• 2 years of experience operating and maintaining next generation firewalls. (Fortinet preferred)

• 5 years of experience in implementation and administration of LAN/WAN/Internet networks and services.

NOTE: If a candidate does not meet these requirements, Success Factors will automatically disqualify the candidate.

Preferred Qualifications:

• Experience designing, securing, and maintaining networks using Fortinet Firewalls.
• Experience maintaining security applications such as intrusion prevention, antivirus, patch assessment, security incident and event management (SIEM)
• Experience in a CIP Low program development and execution
• Experience with Routing, Switching, Datacenters, VPN, LAN, WAN, Wireless, Network Security, Intrusion Detection, and Anti-Virus.
• Power industry or other industrial experience in an IT/OT environment.

Additional Knowledge, Skills and Abilities:

• Working knowledge of cybersecurity and security tools
• Demonstrated ability to communicate (verbal and written) with all levels of internal and external customers.
• Demonstrated project management skills.
• Demonstrated ability to work independently and as a team member.
• Demonstrated ability to set priorities and to respond to changing demands from multiple sources.
• Ability to exercise discretion and independent judgment in applying established techniques, procedures, or standards.
• Demonstrated analytical and problem-solving skills.
• Ability to work in power plant, data center, or office environment as needed.
• Experience maintaining servers.
• Understanding of Citrix and VMWare

Physical Requirements:

• Occasionally requires lifting as appropriate to perform duties and responsibilities.

Please Note: Salary offered will be commensurate with the successful candidate's education and/or experience and consistent with the job location's market pay rate.

NRG Energy is committed to a drug and alcohol-free workplace. To the extent permitted by law and any applicable collective bargaining agreement, employees are subject to periodic random drug testing, and post-accident and reasonable suspicion drug and alcohol testing. EOE AA M/F/Vet/Disability. Level, Title and/or Salary may be adjusted based on the applicant's experience or skills.

Official description on file with Talent.