IT Infrastructure Engineer

WhiteWater Midstream, LLC.; Austin, Northern (TX, KY); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

401(k) match

Medical insurance

Dental & Vision

Job summary

WhiteWater Midstream, LLC. is seeking an IT Infrastructure Engineer to secure enterprise IT networks and field OT infrastructure powering pipeline operations. You will optimize telemetry communications, strengthen ICS security, and deploy scalable networks in a 24/7 operations environment.

The role requires 5+ years in IT/OT networks, hands-on firewall management, and familiarity with NIST/ISA/IEC security standards. Austin/Houston office location with travel up to 15% in TX/LA is expected.

Qualifications

• 5+ years designing and securing IT/OT networks.
• Proficient in TCP/IP, DNS, DHCP, BGP, OSPF; capable of secure site-to-site VPNs.
• Experience with Purdue Model IEC 62443 guidance and risk assessments.

Responsibilities

• Maintain and optimize enterprise and field data communications across assets.
• Develop and enforce IT/OT cybersecurity standards and procedures.
• Configure, audit and manage firewalls for IT/OT segmentation.
• Monitor network traffic for anomalies and security breaches.
• Lead incident containment and root-cause analysis; rotate on-call duties.

Skills

Routing & VPNs

LAN/WAN design

Firewalls & IDS

Wireless & field comms

Python automation

Education

CISSP or GICSP

CompTIA Network+

Tools

Python

Ansible

Terraform

Puppet

Job description

The IT Infrastructure Engineer oversees and secures the enterprise IT networks and field Operational Technology (OT) infrastructure powering pipeline operations. This role is instrumental in ensuring continuous high availability, optimizing remote telemetry communications, strengthening Industrial Control System (ICS) security baselines, and deploying scalable network architectures and compliance frameworks. This position reports directly to the Technology Manager.

Responsibilities

• Maintain, optimize, and troubleshoot enterprise and field data communications, including cellular, satellite, radio telemetry, SIM management, and static IP assignments across distributed assets.
• Develop, implement, and enforce IT and OT cybersecurity standards, baseline policies, and operational procedures to safeguard critical infrastructure.
• Integrate cybersecurity architecture and security controls into operational capital projects and infrastructure expansions.
• Configure, manage, and routinely audit firewalls to maintain strict network segmentation between IT and OT environments (e.g., Purdue Model / IEC 62443).
• Conduct cybersecurity risk assessments and audits, implementing security controls aligned with industry standards (e.g., NIST SP 800-82, API 1164, ISA/IEC 62443).
• Support and secure industrial automation protocols (Modbus, DNP3, OPC, MQTT, and proprietary drivers) to ensure high availability and data integrity between field PLCs/RTUs, SCADA/DCS systems, and corporate enterprise applications.
• Continuously monitor enterprise and OT network traffic for performance degradation, protocol anomalies, potential security breaches, and unauthorized access attempts.
• Serve as primary contact for IT/OT cybersecurity incidents, performing rapid containment, root-cause analysis, and threat remediation.
• Lead efforts to evaluate and deploy emerging cybersecurity and networking technologies, ensuring alignment with regulatory and industry requirements.
• Works Monday–Friday schedule with extended hours and an on-call rotation (nights, weekends, and holidays) to support continuous 24/7 operations.
• Conduct onsite visits to field and office locations across Texas and Louisiana up to 15% travel.

Requirements

Network & Infrastructure (5+ years of experience)

• Routing, Switching & VPNs: Advanced proficiency in TCP/IP, DNS, DHCP, ARP, BGP, OSPF, and MPLS. Strong experience designing and deploying LAN, WAN, VLAN, and secure site-to-site VPN configurations.
• Hardware & Security Stack: Hands-on experience with routers, switches, firewalls, IDS/IPS, NAC, and load balancers.
• Wireless Technologies: Knowledge of enterprise wireless networking, industrial radio/cellular communications, access point deployment, and wireless security protocols.

Monitoring & Automation

• Network Diagnostics: Expertise in network monitoring and packet analysis tools for real-time troubleshooting.
• Automation & Scripting: Experience using Python, Bash, or infrastructure-as-code tools (Ansible, Puppet, Terraform) for network automation.

Preferred

Operational Technology (OT) & Compliance (3-5 years of experience)

• ICS/SCADA: Demonstrated experience setting up and securing OT environments (DCS, IC, PLCs, field automation).
• Regulatory & Industry Standards: Working knowledge of pipeline and industrial control standards, including DOT, API, and ISA (e.g., ISA/IEC 62443).

Certifications

• CompTIA Network+
• Certified Information Systems Security Professional (CISSP) or equivalent industrial cybersecurity credential (e.g., GICSP)

Benefits

This position is located in Austin, Texas or Houston, TX and is an in-office position.

• Selected candidate is eligible for employer matched 401(k), medical, dental, vision, basic life and AD&D insurances and other benefit offerings.

As set forth in WhiteWater Midstream’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.