Hybrid OT Network Engineer Cybersecurity Architect

Stem Inc; Broomfield (CO); Hybrid; USD 112,000 - 168,000; Full time

Benefits offered by this job

Bonus or commission

Health benefits from day one

401k plan

12 holidays per year

Flexible paid time off

Job summary

Stem, Inc. is seeking a Staff Network Engineer to govern the network security architecture for PowerTrack OT/IT environments. The role focuses on Layered Cybersecurity, adherence to CIP and ISO 27001, and hands-on firewall/IDS configurations across grid-connected assets.

You will lead vendor assessments, design remote access models, and mentor engineers while collaborating with Compliance and Product teams. Hybrid work in Broomfield, CO is offered.

Qualifications

• 8+ years of network engineering experience in OT/ICS or industrial networks.
• Deep knowledge of NERC CIP standards and compliance audits.
• Experience with SIEM and IDS in OT/ICS environments.
• Strong written and verbal communication; leadership ability.

Responsibilities

• Own and evolve Layered Cybersecurity Architecture across product lines.
• Design, configure, and troubleshoot network infrastructure including firewalls and DMZ.
• Lead OT server/IDS capabilities deployment and log pipelines.
• Lead vendor RFPs and evaluations for OT/IT security.
• Guide remote access, domain identity management, and patching to CIP.
• Mentor team members and provide architecture review.
• Drive standardization and audit support.

Skills

Network engineering

OT security

NERC CIP

ISO 27001

Palo Alto

Scripting

RFP leadership

Education

Bachelor’s degree in engineering or related field

Tools

Palo Alto Firewall

Moxa switches

SIEM

IDS/INSM

Synology NAS

SQL/Time-series DB

Job description

Stem, Inc. is seeking a Staff Network Engineer to govern the network security architecture for PowerTrack OT/IT environments. The role focuses on Layered Cybersecurity, adherence to CIP and ISO 27001, and hands-on firewall/IDS configurations across grid-connected assets.

You will lead vendor assessments, design remote access models, and mentor engineers while collaborating with Compliance and Product teams. Hybrid work in Broomfield, CO is offered.