Network Engineer, Industrial Protocols

Divcon Controls; United States; Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Growth opportunities

Health insurance

401k match

Disability coverage

Flexible PTO

Field-based benefits

Job summary

Divcon Controls in Dallas, TX, seeks a Network Engineer of Industrial Protocols to secure converged IT/OT networks for ICS, SCADA, and BMS environments. You will design secure networks and protect real‑time performance of critical systems.

The role requires hands‑on security for BACnet, Modbus, DNP3, OPC UA, MQTT, and EtherNet/IP, plus experience with firewalls, IDS/IPS, SIEM, and Purdue ISA‑95 framework. Occasional travel to job sites is expected.

Qualifications

• Bachelor’s degree or equivalent experience in CS/Networking/Cybersecurity.
• 5+ years in network engineering with 3+ years in OT cybersecurity.
• Hands-on with industrial protocols: BACnet, Modbus, DNP3, OPC UA, MQTT, EtherNet/IP.
• Experience with IEC 62443 security standards in OT environments.
• Proficiency with Wireshark, Nmap, NetFlow/sFlow, Zeek/Bro.

Responsibilities

• Design, implement, and maintain secure network architectures for converged IT/OT environments.
• Configure and manage switches, routers, firewalls, VPNs, IDS/IPS.
• Develop and enforce IEC 62443 policies for industrial environments.
• Perform vulnerability assessments, pen testing on ICS/SCADA networks.
• Monitor traffic with SIEM/OT threat detection platforms.
• Maintain secure channels for BACnet/IP, Modbus TCP, DNP3, OPC UA, MQTT, EtherNet/IP.
• Collaborate with controls engineers and integrators on deployments.
• Lead incident response for network security events affecting industrial systems.
• Document topologies, procedures, and SOPs for IT/OT infrastructure.
• Stay current on emerging cyber threats to critical infrastructure.

Skills

Cybersecurity in OT

Industrial network engineering

Industrial protocols

BACnet

Modbus

DNP3

OPC UA

MQTT

EtherNet/IP

Purdue ISA-95

Firewalls

IDS/IPS

NAC

Wireshark

Nmap

Zeek/Bro

Education

Bachelor’s degree in Computer Science, Network Engineering, Cybersecurity, or related field

Tools

Palo Alto

Fortinet

Cisco ASA

Job description

About Us:

Headquartered in Dallas, Texas, Divcon delivers fully integrated automation solutions nationwide that optimize performance, energy efficiency, and reliability across HVAC, lighting, power monitoring, and mission-critical systems. Leveraging advanced technologies - including Allen-Bradley PLCs, Ignition SCADA, and Delta DDC systems - we combine deep technical expertise with field-tested execution to deliver precise, scalable, and high-performance solutions.

About the role:

The Network Engineer of Industrial Protocols brings a deep expertise in cybersecurity and industrial communication protocols to Divcon field operations. This role sits at the critical intersection of IT and OT (Operational Technology), ensuring the security, reliability, and performance of network infrastructure that supports industrial control systems, SCADA environments, building management systems, and mission-critical operations.

The ideal candidate brings hands‑on experience securing converged IT/OT networks, implementing defense‑in‑depth strategies for industrial environments, and working with protocols such as BACnet, Modbus, DNP3, OPC UA, and EtherNet/IP. You will play a key role in designing secure network architectures that protect critical infrastructure while maintaining the real‑time performance these systems demand.

Key Responsibilities:

• Design, implement, and maintain secure network architectures for converged IT/OT environments, including segmentation, firewalling, and zero‑trust strategies.
• Configure and manage network infrastructure including switches, routers, firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS).
• Develop and enforce cybersecurity policies aligned with IEC 62443, NIST Cybersecurity Framework, and CIS Controls for industrial environments.
• Perform network vulnerability assessments, penetration testing, and risk analysis specific to industrial control system (ICS) and SCADA networks.
• Monitor network traffic for anomalous behavior using SIEM tools and OT‑specific threat detection platforms.
• Implement and maintain secure communication channels for industrial protocols (BACnet/IP, Modbus TCP, DNP3, OPC UA, MQTT, EtherNet/IP).
• Collaborate with controls engineers, facilities teams, and third‑party integrators to ensure secure system deployments and commissioning.
• Lead incident response efforts for network security events affecting industrial systems, including forensic analysis and remediation.
• Document network topologies, security procedures, and standard operating procedures (SOPs) for IT/OT infrastructure.
• Stay current on emerging cyber threats targeting industrial environments and critical infrastructure sectors.

Qualifications:

• Education: Bachelor’s degree in Computer Science, Network Engineering, Cybersecurity, or a related technical field (or equivalent experience).
• Experience: 5+ years in network engineering with at least 3 years focused on cybersecurity in industrial or OT environments.
• Strong working knowledge of industrial protocols: BACnet, Modbus (RTU/TCP), DNP3, OPC UA, MQTT, EtherNet/IP, PROFINET.
• Hands‑on experience with network security tools: firewalls (Palo Alto, Fortinet, Cisco ASA), IDS/IPS, NAC, SIEM platforms.
• Deep understanding of the Purdue Model / ISA‑95 reference architecture for industrial network segmentation.
• Experience implementing IEC 62443 security standards in operational technology environments.
• Proficiency with network monitoring and analysis tools (Wireshark, Nmap, NetFlow/sFlow, Zeek/Bro).
• Solid foundation in TCP/IP, VLANs, routing protocols (OSPF, BGP), VPN technologies, and 802.1X.

Preferred Qualifications

• Industry certifications such as CISSP, GICSP (Global Industrial Cyber Security Professional), CCNP Security, CEH, or CompTIA CASP+.
• Experience with SCADA systems, building management systems (BMS), or energy management platforms.
• Familiarity with cloud‑based OT monitoring solutions and secure remote access architectures.
• Knowledge of NERC CIP, NIST SP 800‑82, or other critical infrastructure protection frameworks.
• Experience with network automation and scripting (Python, Ansible, Terraform).
• Background in data center infrastructure, electrical power monitoring systems (EPMS), or mission‑critical facilities.
• Familiarity with Ignition SCADA platform or similar industrial software environments.

Physical Requirements:

• Requires frequent travel to job sites as needed, up to 75% with an average of 50%
• Ability to stand, walk, and move throughout job sites for extended periods
• Ability to climb ladders, stairs and lifts as required
• Ability to bend, kneel, crouch, and work in tight or confined spaces
• Ability to lift, carry, and maneuver equipment and materials up to 50 pounds
• Manual dexterity to handle tools, wiring, and small components
• Ability to work at heights and in varying indoor and outdoor conditions
• Visual keenness to read schematics, labels, and digital displays
• Ability to hear and respond to alarms, equipment sounds, and verbal instructions
• Capability to safely operate hand and power tools

Benefits & Total Rewards:

• Opportunities for Growth
• Hands‑on trainingandcareeradvancementin an explodingdata‑centerindustry.
• Medical, Dental, and Vision Insurance
• Wecover100% ofindividualmedicalpremiumsandhelp offset the cost of family coverage.
• 401Kwith Employer Match
• Eligible after 90 days, with company matching to help youinvest in your future.
• Disability Coverage
• Bothshort- and long‑term disability insuranceprovidedatnocostto our employees.
• FlexiblePTO
• Taketime off when you need it, noaccruing time necessary.
• Field-Based Employee Benefits
• For eligible field‑based roles that require travel, Divcon covers all business travel expenses and provides a per diem, phone allowance, tools, and PPE at no cost. Eligible employees also receive paid training and additional reimbursable business expenses.

Divcon does not accept unsolicited resumes from agencies. Agencies musthave a signed agreement in place prior to submitting any candidate. Unsolicited resumes will be considered the property of Divcon, and no fees will be paid.