Cybersecurity Engineer - Inside Plant

GTA; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

GTA is seeking a Cybersecurity Engineer to secure our central office and facility-based network infrastructure, spanning OT and IT environments. You will assess, harden, monitor, and remediate security risk while partnering with network engineering, systems administration, and IT Security to uphold carrier-grade security without sacrificing availability.

The role involves designing network segmentation, coordinating vulnerability remediation, and guiding engineers toward secure practices across

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field; equivalent work experience will be considered.
• 3+ years of experience in cybersecurity or network security roles, ideally including exposure to telecom/ OT environments
• Working knowledge of network segmentation, firewalls and access control design for OT/IT environments
• Experience with vulnerability assessment and patch/remediation coordination in high-uptime networks
• Familiarity with virtualization and storage security (VMware/Proxmox, SAN) and Linux/Windows server hardening

Responsibilities

• Assess and harden security posture of inside plant network equipment and IT systems (EMS/NMS, OSS, servers, VM hosts, SAN)
• Perform vulnerability assessments and coordinate remediation while balancing security and availability
• Design and maintain network segmentation and access controls isolating OT from IT networks
• Monitor for security events, incidents, and unauthorized access; respond as needed
• Audit privileged access to network element management systems and virtualization/storage infrastructure
• Collaborate with IT Security on security tooling (SIEM, endpoint protection) adapted for OT constraints
• Support secure configurations for Proxmox/VMware, SAN storage, and Linux/Windows servers
• Participate in incident response and regulatory security efforts (CPNI, FCC)
• Document security architecture and risk assessments for inside plant systems
• Provide security guidance and training to ISP technicians and engineers
• Be available for on-call security incident response

Job description

Who we are looking for:

GTA is seeking a Cybersecurity Engineer to secure the technology environment supporting our central office and facility-based network infrastructure. This role spans both operational technology (OT) — switching, transmission, and network element equipment — and the IT systems that manage and connect to it, including EMS/NMS platforms, OSS tools, servers, and virtualized infrastructure (VM hosts and SANs) within central offices and equipment facilities. You'll work within the Inside Plant organization to assess, harden, monitor, and remediate security risk across this mixed OT/IT environment, partnering with network engineering, systems administration, and corporate IT Security to ensure ISP infrastructure meets carrier-grade security standards without compromising network availability. The ideal candidate pairs deep security judgment with a real respect for the operational realities of a live telecom network.

Here is what the role looks like:
As a Cybersecurity Engineer at GTA, you'll be the security conscience of our inside plant — hunting vulnerabilities, designing defenses, and responding when it matters most. You'll segment and isolate critical network systems, harden the virtualization and storage layers beneath them, and guide the engineers and technicians around you toward more secure practices. If you're energized by high-stakes infrastructure and want your security work to protect an entire island's connection, this is your chance to make a real impact. Essential job functions include:

• Assess and harden the security posture of inside plant network equipment (switching, transmission) and the IT systems that manage them (EMS/NMS, OSS platforms, servers, VM hosts, SANs) within central offices and equipment facilities
• Perform vulnerability assessments and coordinate remediation/patching for ISP network equipment and supporting IT systems, balancing security requirements against network availability and change-control constraints
• Design and maintain network segmentation, access controls, and firewall/ACL policies isolating OT network elements from general IT/corporate networks
• Monitor central office network and IT systems for security events, anomalies, and unauthorized access; investigate and respond to incidents affecting ISP infrastructure
• Manage and audit privileged access to network element management systems, EMS/NMS platforms, and virtualization/storage infrastructure supporting ISP operations
• Partner with corporate IT Security on enterprise security tooling (SIEM, endpoint protection, vulnerability scanning) extended into the ISP environment, adapting policies for OT-specific constraints
• Support secure configuration and hardening standards for Proxmox/VMware virtualization hosts, SAN storage, and Linux/Windows servers supporting network element functions
• Participate in incident response for security events affecting network equipment or ISP-supporting IT systems, including coordination with the Director, Network Operations — Inside Plant and corporate IT Security
• Support compliance efforts related to CPNI, FCC, and other regulatory security requirements as they apply to network infrastructure
• Conduct security reviews of new equipment, software, and vendor solutions prior to deployment within central office environments
• Maintain documentation of security architecture, access controls, and risk assessments specific to inside plant systems
• Provide security guidance and training to ISP technicians and engineers on secure operating practices for network equipment and supporting systems
• On-call availability required for security incidents affecting network equipment or ISP-supporting systems
  
• Performs other related duties and special projects assigned to support evolving business priorities
  

Preferred Qualifications:

• Direct experience securing OT or network element environments in a telecom, utility, or critical infrastructure setting
• Certifications such as CISSP, GICSP, Security+, or equivalent OT/IT security credentials
• Familiarity with CPNI, FCC, or other telecom-specific regulatory security requirements
• Experience with Proxmox, VMware, and Veeam-based infrastructure security considerations
• Scripting/automation ability (Python, Bash, PowerShell) for security tooling and assessments
  

Here’s what you need to have:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field; equivalent work experience will be considered.
• 3+ years of experience in cybersecurity or network security roles, ideally including exposure to telecom, OT, or industrial network environments
• Working knowledge of network segmentation, firewalls, and access control design in environments combining OT and IT systems
• Experience with vulnerability assessment and patch/remediation coordination in environments where uptime is critical
• Familiarity with virtualization and storage security (VMware and/or Proxmox, SAN environments) and Linux/Windows server hardening
• Understanding of telecom network element concepts (switching, transmission, EMS/NMS) sufficient to assess associated security risk
• Experience with security monitoring tools (SIEM, IDS/IPS, endpoint protection) and incident response processes
• Strong communication skills to work across network engineering, systems administration, and corporate IT Security teams
  
• Must successfully pass a background check and drug screening

Our Customers Matter. Build Trust Through Respect. Be Accountable. Learning is Growth. Lead with Care. Win Together.Be a Game Changer.

Teleguam Holdings LLC dba GTA is an Equal Opportunity Employer

Teleguam Holdings LLC, dba GTA is an Equal Opportunityemployer dedicated to building an inclusive and diverse workforce as we see this is critical to the success of our company. Having diverse perspectives, experiences, and skills within our teams allows us to learn from each other and grow as individuals, which leads to better work and outcomes. Through our actions, our goal is to create long term impactful change throughout the company and our island community.However you identify or whatever background you come from,we welcome you to be a part of this change. We ask that you apply to a role that excites you and where you can bring your authentic, best self to work. Keep in mind that all aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs, without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Read more about our commitment to these principles in the Department of Labor's EEO notices and Guam Department of Labor notices.

Other applicable federal employment laws include Family Medical Leave Act (FMLA) and Uniform Services employment and Reemployment Act (USERRA).

Accommodations for Applicants with Disabilities

Teleguam Holdings LLC, dba GTA has always worked to provide qualified applicants and employees who are disabled veterans or individuals with disabilities with needed reasonable accommodations in accordance with the ADA. If you have difficulty using our online system due to a disability and need an accommodation, please email us at [e-mail] or call us at [phone].