OT Infrastructure Engineer I

Enchanted Rock; Houston (TX); On-site; USD 65,000 - 85,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

Job summary

Enchanted Rock is seeking an OT Infrastructure Engineer I to support and secure our operational technology backbone across remote and active production facilities. You will deploy, test, maintain, and troubleshoot field networks, industrial firewalls, switches, and cellular telemetry devices in close collaboration with our MCC and engineering teams.

You will work on high-availability communications, network security boundaries, and precise documentation while growing in IT/OT networking within a

Qualifications

• 0–2 years in an IT/OT networking environment.
• Strong working knowledge of IPv4 addressing, subnetting (VLSM/CIDR), DHCP, DNS, NAT/PAT, and OSI/TCP-IP reference models.
• Practical understanding of Site-to-Site IPSec VPN configurations and ACL syntax on routers/firewalls.
• Familiarity with Wireshark or similar packet capture tools for troubleshooting.
• Comfort terminating Ethernet cabling and working in industrial/substation environments.
• Ability to communicate technical issues clearly under pressure and collaborate with remote teams.

Responsibilities

• Rack, cable, configure, and commission edge routers, switches, firewalls, and telemetry devices during site test/turn-up.
• Implement and maintain ACLs, firewall rules, and security zones to protect OT assets.
• Deploy IPSec Site-to-Site VPNs between field locations, data centers, and cloud platforms; manage cellular gateways and SIM activations.
• Perform packet-level diagnostic analysis to isolate connectivity issues and routing problems.
• Collaborate with MCC and commissioning engineers during site cutovers to verify telemetry and SCADA/OT communications.
• Maintain accurate IP address tables, port mappings, and site network topology diagrams.

Skills

IPv4 addressing

Subnetting

DHCP/DNS/NAT

ACLs & firewall rules

IPSec VPN

Wireshark

Industrial networks

Change control

Education

Associate or Bachelor’s in Network Engineering

Tools

Cradlepoint cellular modems

Sierra Wireless devices

Digi routers

Industrial protocols (Modbus/DNP3/SCADA)

Job description

Description

We are ERock!

ERock (NYSE:EROC) is a leader and innovator of Electrical Resiliency-As-A Service. Our advanced dual-purpose microgrids protect companies, critical infrastructure, and communities from unexpected power outages, ensuring business continuity and civic durability.

ERock’s dual-purpose microgrids use natural gas and renewable natural gas (RNG) to drive the nation’s most dependable microgrids — all while producing significantly lower to zero carbon emissions than traditional diesel backup generators. Powered by GraniteEcosystem™, our revolutionary software system, Enchanted Rock solutions provide 24/7/365 monitoring, optimization, and forecasts to enable worry-free, reliable power for businesses. The Enchanted Rock solution brings together patented technologies, advanced dual-purpose microgrid designs and integrated end-to-end services. The Power is On and we keep it on.

Role Overview:

We are seeking a motivated, technically grounded OT Infrastructure Engineer I to support and secure our operational technology infrastructure across remote and active production facilities. In this role, you will be on the front lines deploying, testing, maintaining, and troubleshooting field networks, industrial firewalls, switches, and cellular telemetry devices. You will partner closely with our Microgrid Control Center (MCC), field commissioning teams, and engineering groups to ensure high-availability communications and robust network security boundaries across all field sites.

Key Responsibilities:

• Rack, cable, configure, and commission edge routers, switches, industrial firewalls, and third-party telemetry devices during new site test and turn-up phases.
• Implement and maintain Access Control Lists (ACLs), firewall rules, and security zones to protect critical operational assets while isolating OT traffic from enterprise networks.
• Deploy and support IPSec Site-to-Site VPN tunnels between industrial field locations, data centers, and cloud platforms; configure cellular gateways and manage SIM card activations with carriers.
• Perform hands-on packet-level diagnostic analysis (using Wireshark, tcpdump, or CLI packet capture tools) to isolate connectivity drops, latency, routing anomalies, and protocol failures.
• Microgrid Control Center & Commissioning Collaboration. Work directly with the MCC and commissioning engineers during site cutovers to validate end-to-end telemetry, verify SCADA/OT communications, and confirm network visibility.
• Maintain precise IP address allocation tables, port mapping records, standard operating procedures, and site network topology diagrams.

Basic (Required) Qualifications:

• Associate or Bachelor’s degree in Network Engineering, Cybersecurity, Computer Information Systems, or equivalent technical certifications/hands-on experience (0–2 years in an IT/OT networking environment).
• Strong working knowledge of IPv4 addressing, subnetting (VLSM/CIDR), DHCP, DNS, NAT/PAT, and OSI/TCP-IP reference models.
• Practical understanding of Site-to-Site IPSec VPN configurations and Access Control List (ACL) syntax on routers and firewalls.
• Familiarity with packet sniffers (such as Wireshark) to capture, filter, and inspect network traffic during troubleshooting.
• Comfort terminating Ethernet cabling, tracing physical connections, mounting field hardware, and working in industrial or substation/microgrid environments.
• Ability to communicate technical issues clearly under pressure, follow change control procedures, and collaborate effectively with remote teams.

Preferred Qualifications:

• Active foundational networking or security certifications (e.g., CompTIA Network+, Security+, Cisco CCNA, Fortinet FCIT/FCA, or Palo Alto PCCET).
• Hands-on exposure to industrial protocols or environments (e.g., Modbus, DNP3, OPC-UA, SCADA systems).
• Experience working with cellular modems (Cradlepoint, Sierra Wireless, Digi) and APN/SIM provisioning.

Machines & Equipment:

• Use of stepladders and standard PPE required.
• Use of a personal vehicle required.
• Attention to detail; is thorough when performing work and conscientious.
• Lifting Ability: Occasionally needs to lift 50 lbs. Repetitively
• Ability to follow safety procedures and guidelines.
• Must be able to be on your feet (standing, walking) for multiple 8+ hours per day.

Benefits:

• Medical, Dental, Vision, and Prescription Drug Insurance
• Company-Paid Life Insurance
• Disability Insurance
• Paid Family Leave
• Flexible Spending Account (FSA)
• Wellness Programs and Incentives
• 401(k) Retirement Plan & Company Match
• Paid Time Off – Sick & Vacation Time
• Paid Holidays

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

ERock is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

At ERock, we embrace diversity, including all the unique characteristics that make us human: race, age, sexual orientation, gender identity, religion, disability, and education — to name a few. We understand and recognize that diverse backgrounds and perspectives strengthen our teams and our business. The foundation of our diversity efforts is closely tied to our core values specifically our value of “The Team” which includes “Mutual Respect, Openness, and Honesty.”