Network Engineer, OT

PROENERGY; Houston (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

PROENERGY is looking for a Network Engineer to design and implement network infrastructures for critical industrial environments in Houston, Texas. You will manage multi-site network systems, ensuring compliance with regulations and optimal performance. The role requires at least 7-10 years of experience in network engineering, particularly in industrial settings, along with advanced expertise in Cisco technologies. This position offers opportunities for professional growth in a dynamic and critical infrastructure environment.

Qualifications

• Minimum 7-10 years of progressive experience in network engineering with at least 5 years in OT environments.
• Strong proficiency in industrial protocols including Modbus TCP/RTU and DNP3.
• Expert-level proficiency with Cisco enterprise and industrial networking technologies.

Responsibilities

• Design and implement network architectures for industrial control systems.
• Deploy and manage Cisco SD-WAN solutions for connectivity.
• Architect and implement defense-in-depth security strategies.

Skills

Cisco networking technologies

Network security

Industrial control systems

Project management

Problem-solving skills

Communication skills

Education

Bachelor's degree in Computer Science, IT, Electrical Engineering

Tools

Cisco Catalyst switches

SolarWinds

VMware vSphere

Fortinet FortiGate

Job description

Position: Network Engineer, OT

Reports To: VP IT Operations

Work Location: 6246 McHard Road, Houston, TX 77053

Position Responsibilities

• Design and implement sophisticated network architectures for SCADA, DCS, historian systems, and industrial control networks using Cisco Industrial Ethernet switches and Cisco Catalyst infrastructure
• Engineer and maintain next-generation firewalls (NGFWs) for network segmentation, UTM, application control, and IPS/IDS functionality across IT/OT boundaries
• Deploy and manage Cisco SD-WAN solutions for multi-site connectivity, optimize configurations, and implement advanced routing protocols (OSPF, EIGRP, BGP) for enterprise and industrial networks
• Configure redundant network topologies utilizing protocols such as RSTP, PRP, HSR, and Cisco StackWise for high-availability industrial applications
• Implement Quality of Service (QoS) policies, VLAN architectures, and traffic shaping to prioritize real-time control system communications and support converged IT/OT networks
• Design and maintain enterprise Wi-Fi infrastructure using Wireless LAN Controllers and access point solutions for both corporate and industrial environments
• Manage network infrastructure supporting virtualization platforms (VMware vSphere), cloud connectivity (Azure), and hybrid IT architectures
• Deploy and optimize network monitoring solutions including SolarWinds, Cisco Catalyst Center, and FortiAnalyzer for comprehensive visibility across IT/OT environments
• Architect and implement defense-in-depth security strategies and network access control (NAC) technologies
• Configure and manage firewall security policies, SSL/IPsec VPN tunnels, and secure remote access solutions for critical infrastructure personnel
• Design Electronic Security Perimeters (ESP) compliant with NERC-CIP standards, implementing defense mechanisms including firewalls, unidirectional gateways, and DMZ architecture
• Deploy and maintain intrusion detection/prevention systems (IDS/IPS) using next-gen technologies for continuous threat monitoring
• Implement zero-trust network architectures, micro-segmentation strategies, and least-privilege access controls across IT and OT domains
• Maintain comprehensive compliance with NERC-CIP and related standards for critical infrastructure protection
• Conduct vulnerability assessments, penetration testing coordination, and security hardening of network devices following ISA/IEC 62443 and NIST Cybersecurity Framework guidelines
• Lead incident response activities for network security events, coordinate forensic analysis, and implement corrective action plans
• Configure and optimize industrial protocol communications including Modbus TCP/RTU, DNP3, OPC UA, IEC 61850, and Profinet across control system networks
• Implement protocol gateways, serial-to-Ethernet converters, and ensure proper encapsulation for legacy industrial communications
• Support historian database connectivity, real-time data acquisition systems, and SCADA master-to-RTU communication architectures
• Design redundant communication paths for critical control functions utilizing diverse routing and automatic failover mechanisms
• Troubleshoot deterministic Ethernet configurations, time-sensitive networking (TSN), and precision time protocol (PTP/IEEE 1588) implementations
• Coordinate with controls engineers on PLC/DCS network requirements including Allen-Bradley ControlLogix, GE Mark series, and Siemens S7 platforms
• Integrate OT networks with enterprise IT services including Active Directory, DNS, DHCP, NTP, and Windows Server infrastructure while maintaining proper segmentation
• Configure and manage network infrastructure for Microsoft 365/Azure AD integration, site-to-site VPNs, and cloud service connectivity
• Implement network solutions for audio/visual conferencing systems, IP telephony (VoIP), and unified communications platforms
• Deploy network infrastructure for physical security systems including IP camera networks, access control integration, and building management systems (BMS)
• Manage patch management, firmware updates, and change control processes for network devices across IT and OT environments using ServiceNow or similar ITSM platforms
• Monitor and optimize network performance utilizing advanced analytics, NetFlow/sFlow analysis, and packet capture tools (Wireshark, tcpdump) for troubleshooting
• Implement redundancy and high-availability solutions ensuring 99.99% uptime for critical OT communications and 24/7 operational support capabilities
• Conduct capacity planning, bandwidth analysis, and network lifecycle management to support growing operational and business data requirements
• Design and test disaster recovery/business continuity procedures for network infrastructure, including backup configurations and restoration processes
• Maintain comprehensive network documentation including logical/physical topology diagrams, IP address management (IPAM), and configuration management databases (CMDB)
• Lead network design and implementation for new facility construction, equipment installations, and technology refresh initiatives
• Participate in commissioning activities, factory acceptance testing (FAT), and site acceptance testing (SAT) for control system network infrastructure
• Provide technical leadership for vendor evaluations, RFP development, and technology selection processes for network equipment and services
• Mentor junior engineers and technicians on advanced networking concepts, Cisco/Fortinet technologies, and OT security best practices
• Develop and maintain standards, procedures, and technical documentation including network design templates and troubleshooting guides
• Coordinate with IT Operations teams on service delivery, SLA management, and continuous improvement initiatives across infrastructure domains

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Electrical Engineering, or related technical discipline
• Minimum 7-10 years of progressive experience in network engineering with at least 5 years focused on industrial/OT environments
• Demonstrated experience in power generation, oil & gas, manufacturing, or other critical infrastructure industries
• Proven track record of managing complex, multi-site network infrastructure projects from design through implementation
• Exceptional analytical and troubleshooting abilities for complex network issues in time-critical operational environments
• Outstanding written and verbal communication skills with ability to translate technical concepts for diverse audiences including operations personnel and executive leadership
• Strong project management capabilities with experience coordinating cross-functional teams and managing multiple concurrent initiatives
• Demonstrated customer service orientation with focus on supporting 24/7 critical operations
• Meticulous attention to detail for configuration management, documentation standards, and regulatory compliance
• Ability to work independently, prioritize competing demands, and make sound technical decisions under pressure
• Expert-level proficiency with Cisco enterprise and industrial networking technologies including Catalyst switches, Nexus data center switches, ISR/ASR routers, and Industrial Ethernet (IE-4000/IE-5000) platforms
• Advanced expertise in Fortinet FortiGate firewalls, FortiManager central management, FortiAnalyzer logging/reporting, and Security Fabric integration
• Deep understanding of Cisco IOS/IOS-XE command-line interface, configuration management, and troubleshooting methodologies
• Comprehensive knowledge of routing protocols (OSPF, EIGRP, BGP), switching technologies (STP/RSTP/MST), and VLAN design principles
• Advanced experience with SCADA networks, DCS infrastructure, and industrial control system communications architecture
• Strong proficiency in industrial protocols including Modbus TCP/RTU, DNP3, OPC UA, and Ethernet/IP
• In-depth understanding of NERC-CIP Critical Infrastructure Protection standards, particularly CIP-005, CIP-007, and Electronic Security Perimeter requirements
• Working knowledge of PLC/PAC technologies including Allen-Bradley ControlLogix, Rockwell Automation FactoryTalk, and Siemens SIMATIC platforms
• Experience with network security technologies including VPN (IPsec/SSL), NAC, 802.1X authentication, and identity management solutions
• Proficiency with network monitoring and management tools such as SolarWinds, Cisco Prime Infrastructure, PRTG, or equivalent platforms
• Understanding of IT infrastructure including Windows Server environments, Active Directory, virtualization (VMware/Hyper-V), and cloud networking concepts
• Travel up to 35%
• US work authorization is a precondition of employment. The company will not consider candidates who require sponsorship for a work-authorized visa.
• Successful candidate will need to satisfactorily complete pre-employment drug screen and background

Desired Qualifications

• Experience with Cisco technologies, architecture, deployment, and management
• Experience with Fortinet technologies, architecture, deployment, and management
• Familiarity with network automation and scripting using Python, Ansible, or similar tools for infrastructure-as-code implementations
• Experience with time-sensitive networking (TSN), deterministic Ethernet, and precision time protocol (PTP/IEEE 1588)
• Knowledge of wireless industrial networks including WirelessHART, ISA100.11a, and private LTE/5G for industrial applications
• Understanding of fiber optic technologies including single-mode/multi-mode design, DWDM, and outside plant (OSP) installations
• Experience with software-defined networking (SDN), network function virtualization (NFV), and intent-based networking concepts
• Specific experience in gas turbine power generation facilities, aeroderivative turbine controls, or combined cycle plant operations
• Knowledge of asset performance management (APM) platforms, condition monitoring systems, and predictive maintenance analytics
• Understanding of integration between OT and enterprise systems including ERP (SAP/Oracle), CMMS (Maximo/SAP PM), and document management systems
• Experience with cloud networking architectures including Azure Virtual Networks, AWS VPC, and hybrid cloud connectivity
• Familiarity with ITIL framework, ServiceNow ITSM platform, and IT service management best practices
• Knowledge of emergency response procedures, business continuity planning, and crisis management for critical infrastructure

Certifications

• Required: Cisco CCNP Enterprise or CCNP Security certification (current and active)
• Fortinet NSE 4 FortiGate Network Security certification (minimum required)
• ISA/IEC 62443 Cybersecurity Certificate demonstrating industrial security expertise
• CompTIA Security+ or equivalent baseline cybersecurity certification

Preferred Certifications

• Cisco CCIE Enterprise Infrastructure or CCIE Security (highly valued)
• Fortinet NSE 7 Enterprise Firewall or NSE 8 certification
• Cisco CCNA Industrial or equivalent industrial networking certification
• NERC-CIP certification for critical infrastructure protection
• GIAC Industrial Control Systems Professional (GICSP) or similar OT security certification
• Industrial automation vendor certifications (Rockwell Automation, Schneider Electric, GE Digital, Siemens)
• CISSP, CISM, or other advanced security certifications

Working Conditions

• Ability to work in industrial power generation facilities, control rooms, and data center environments
• Regular exposure to industrial hazards requiring strict safety protocols, PPE requirements, and confined space entry procedures
• Ability to work safely around high-voltage electrical equipment, rotating machinery, and hazardous energy sources
• Work in varying environmental conditions including temperature extremes, noise, and outdoor installations
• Standard business hours with significant on-call responsibilities for 24/7 critical system support
• Availability for emergency response during power generation incidents, control system failures, or cybersecurity events
• Extensive travel to multiple facility locations across North America (30-35% travel requirement)
• Regular participation in planned maintenance outages requiring evening, weekend, and holiday work schedules
• Physical capability to install and maintain network equipment in challenging locations including elevated platforms, cable trays, and equipment rooms
• Ability to lift and carry network equipment up to 50 pounds, climb ladders, and work in physically demanding positions
• Successful completion of background checks, drug screening, and security clearances required for critical infrastructure access

Equal Opportunity employer statement: It is PROENERGY’s policy to provide equal opportunity in employment to all its employees and applicants for employment without regard to race, color, religion, sex, pregnancy, age, disability, national origin, marital status, ancestry, medical condition, military status, or any other characteristic protected by State or Federal law.