Copy of Network Engineer, Industrial Protocols

divcon; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, and Vision Insurance

401K with Employer Match

Disability Coverage

Flexible PTO

Field-Based Benefits

Job summary

Divcon, based in Dallas, TX, is seeking a Network Engineer of Industrial Protocols to secure IT/OT convergence and protect SCADA, BMS, and mission-critical systems across client sites nationwide.

You will design and maintain secure network architectures, implement IEC 62443-aligned policies, perform vulnerability assessments, and lead incident response for industrial environments, while collaborating with controls engineers and field teams. Travel up to 75% may be required.

Qualifications

• Bachelor’s degree or equivalent experience in a technical field.
• 5+ years in network engineering with at least 3 years focused on cybersecurity in OT environments.
• Strong knowledge of industrial protocols: BACnet, Modbus, DNP3, OPC UA, MQTT, EtherNet/IP.

Responsibilities

• Design, implement, and maintain secure network architectures for converged IT/OT environments, including segmentation, firewalling, and zero-trust strategies.
• Configure and manage network infrastructure including switches, routers, firewalls, VPNs, and IDS/IPS.
• Develop and enforce cybersecurity policies aligned with IEC 62443, NIST CSF, and CIS Controls for industrial environments.
• Perform network vulnerability assessments, penetration testing, and risk analysis specific to ICS/SCADA networks.
• Monitor network traffic for anomalous behavior using SIEM tools and OT-specific threat detection platforms.
• Implement and maintain secure communication channels for industrial protocols (BACnet/IP, Modbus TCP, DNP3, OPC UA, MQTT, EtherNet/IP).
• Collaborate with controls engineers, facilities teams, and third-party integrators to ensure secure deployments.
• Lead incident response efforts for network security events, including forensic analysis and remediation.
• Document network topologies, security procedures, and SOPs for IT/OT infrastructure.
• Stay current on emerging cyber threats targeting industrial environments.

Skills

Cybersecurity in OT

Industrial protocols knowledge

TCP/IP & VLANs

Network monitoring

Travel readiness

Education

Bachelor’s degree in Computer Science, Network Engineering, Cybersecurity

Related technical field or equivalent experience

Tools

Palo Alto

Fortinet

Cisco ASA

IDS/IPS

NAC

SIEM

Job description

About Us

Headquartered in Dallas, Texas,

About Us

Headquartered in Dallas, Texas, Divcon delivers fully integrated automation solutions nationwide that optimize performance, energy efficiency, and reliability across HVAC, lighting, power monitoring, and mission-critical systems. Leveraging advanced technologies - including Allen-Bradley PLCs, Ignition SCADA, and Delta DDC systems - we combine deep technical expertise with field-tested execution to deliver precise, scalable, and high-performance solutions.

About The Role

The Network Engineer of Industrial Protocolsbrings a deep expertise in cybersecurity and industrial communication protocols to Divcon field operations. This role sits at the critical intersection of IT and OT (Operational Technology), ensuring the security, reliability, and performance of network infrastructure that supports industrial control systems, SCADA environments, building management systems, and mission-critical operations.

The ideal candidate brings hands-on experience securing converged IT/OT networks, implementing defense-in-depth strategies for industrial environments, and working with protocols such as BACnet, Modbus, DNP3, OPC UA, and EtherNet/IP. You will play a key role in designing secure network architectures that protect critical infrastructure while maintaining the real-time performance these systems demand.

Key Responsibilities

• Design, implement, and maintain secure network architectures for converged IT/OT environments, including segmentation, firewalling, and zero-trust strategies.
• Configure and manage network infrastructure including switches, routers, firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS).
• Develop and enforce cybersecurity policies aligned with IEC 62443, NIST Cybersecurity Framework, and CIS Controls for industrial environments.
• Perform network vulnerability assessments, penetration testing, and risk analysis specific to industrial control system (ICS) and SCADA networks.
• Monitor network traffic for anomalous behavior using SIEM tools and OT-specific threat detection platforms.
• Implement and maintain secure communication channels for industrial protocols (BACnet/IP, Modbus TCP, DNP3, OPC UA, MQTT, EtherNet/IP).
• Collaborate with controls engineers, facilities teams, and third-party integrators to ensure secure system deployments and commissioning.
• Lead incident response efforts for network security events affecting industrial systems, including forensic analysis and remediation.
• Document network topologies, security procedures, and standard operating procedures (SOPs) for IT/OT infrastructure.
• Stay current on emerging cyber threats targeting industrial environments and critical infrastructure sectors.

Qualifications

• Education: Bachelor’s degree in Computer Science, Network Engineering, Cybersecurity, or a related technical field (or equivalent experience).
• Experience: 5+ years in network engineering with at least 3 years focused on cybersecurity in industrial or OT environments.
• Strong working knowledge of industrial protocols: BACnet, Modbus (RTU/TCP), DNP3, OPC UA, MQTT, EtherNet/IP, PROFINET.
• Hands-on experience with network security tools: firewalls (Palo Alto, Fortinet, Cisco ASA), IDS/IPS, NAC, SIEM platforms.
• Deep understanding of the Purdue Model / ISA-95 reference architecture for industrial network segmentation.
• Experience implementing IEC 62443 security standards in operational technology environments.
• Proficiency with network monitoring and analysis tools (Wireshark, Nmap, NetFlow/sFlow, Zeek/Bro).
• Solid foundation in TCP/IP, VLANs, routing protocols (OSPF, BGP), VPN technologies, and 802.1X.

Preferred Qualifications

• Industry certifications such as CISSP, GICSP (Global Industrial Cyber Security Professional), CCNP Security, CEH, or CompTIA CASP+.
• Experience with SCADA systems, building management systems (BMS), or energy management platforms.
• Familiarity with cloud-based OT monitoring solutions and secure remote access architectures.
• Knowledge of NERC CIP, NIST SP 800-82, or other critical infrastructure protection frameworks.
• Experience with network automation and scripting (Python, Ansible, Terraform).
• Background in data center infrastructure, electrical power monitoring systems (EPMS), or mission-critical facilities.
• Familiarity with Ignition SCADA platform or similar industrial software environments.

Physical Requirements

• Requires frequent travel to job sites as needed, up to 75% with an average of 50%
• Ability to stand, walk, and move throughout job sites for extended periods
• Ability to climb ladders, stairs and lifts as required
• Ability to bend, kneel, crouch, and work in tight or confined spaces
• Ability to lift, carry, and maneuver equipment and materials up to 50 pounds
• Manual dexterity to handle tools, wiring, and small components
• Ability to work at heights and in varying indoor and outdoor conditions
• Visual keenness to read schematics, labels, and digital displays
• Ability to hear and respond to alarms, equipment sounds, and verbal instructions
• Capability to safely operate hand and power tools

Benefits & Total Rewards

• Opportunities for Growth

Hands-on training and career advancement in an exploding data-center industry.

• Medical, Dental, and Vision Insurance

We cover 100% of individual medical premiums and help offset the cost of family coverage.

• 401K with Employer Match

Eligible after 90 days, with company matching to help you invest in your future.

• Disability Coverage

Both short- and long-term disability insurance provided at no cost to our employees.

• Flexible PTO

Take time off when you need it, no accruing time necessary.

• Field-Based Employee Benefits

For eligible field-based roles that require travel, Divcon covers all business travel expenses and provides a per diem, phone allowance, tools, and PPE at no cost. Eligible employees also receive paid training and additional reimbursable business expenses.

Divcon does not accept unsolicited resumes from agencies. Agencies must have a signed agreement in place prior to submitting any candidate. Unsolicited resumes will be considered the property of Divcon, and no fees will be paid.