OT Infrastructure Engineer I

ERock; Houston (TX); On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

Medical, Dental, Vision, and Prescript

Company-Paid Life Insurance

Disability Insurance

Paid Family Leave

Flexible Spending Account (FSA)

Wellness Programs and Incentives

401(k) Retirement Plan & Company Match

Paid Time Off – Sick & Vacation Time

Paid Holidays

Job summary

ERock, a leader in Electrical Resiliency‑As‑A‑Service, seeks an OT Infrastructure Engineer I to secure and support our field networks and industrial firewalls across remote production sites. You will deploy, test, maintain, and troubleshoot edge devices, configure VPNs, ACLs, and monitor telemetry with MCC.

This role blends hands‑on hardware work with strict change control and collaboration with remote teams.

Qualifications

• 0–2 years IT/OT networking experience in industrial environments.
• Strong knowledge of IPv4, subnetting, DHCP, DNS, NAT/PAT.
• Familiarity with IPSec VPNs and ACL syntax on routers/firewalls.
• Experience with Wireshark for troubleshooting.
• Comfort with fieldwork and industrial hardware.
• Clear communication under pressure and change control processes.

Responsibilities

• Rack, cable, configure edge routers, switches, firewalls during site tests.
• Implement ACLs and firewall rules to separate OT from enterprise networks.
• Deploy IPSec Site-to-Site VPNs between locations and cloud.
• Perform packet-level diagnostics with Wireshark to identify issues.
• Collaborate with MCC and engineers during site cutovers for telemetry validation.
• Maintain IP address tables, port mappings, and network diagrams.

Skills

IPv4 addressing

Subnetting

DHCP

DNS

NAT/PAT

IPSec VPN

ACL configuration

Wireshark

Ethernet cabling

Education

Associate or Bachelor’s degree in Network Engineering or related

Tools

Cradlepoint

Sierra Wireless

Digi

Job description

We are ERock!

ERock (NYSE:EROC) is a leader and innovator of Electrical Resiliency-As-A-Service. Our advanced dual-purpose microgrids protect companies, critical infrastructure, and communities from unexpected power outages, ensuring business continuity and civic durability.

Job Type

Full-time

Description

We are ERock! ERock (NYSE:EROC) is a leader and innovator of Electrical Resiliency-As-A-Service. Our advanced dual-purpose microgrids protect companies, critical infrastructure, and communities from unexpected power outages, ensuring business continuity and civic durability. ERock’s dual-purpose microgrids use natural gas and renewable natural gas (RNG) to drive the nation’s most dependable microgrids — all while producing significantly lower to zero carbon emissions than traditional diesel backup generators. Powered by GraniteEcosystem™, our revolutionary software system, Enchanted Rock solutions provide 24/7/365 monitoring, optimization, and forecasts to enable worry‑free, reliable power for businesses. The Enchanted Rock solution brings together patented technologies, advanced dual‑purpose microgrid designs and integrated end‑to‑end services. The Power is On and we keep it on.

Role Overview

We are seeking a motivated, technically grounded OT Infrastructure Engineer I to support and secure our operational technology infrastructure across remote and active production facilities. In this role, you will be on the front lines deploying, testing, maintaining, and troubleshooting field networks, industrial firewalls, switches, and cellular telemetry devices. You will partner closely with our Microgrid Control Center (MCC), field commissioning teams, and engineering groups to ensure high‑availability communications and robust network security boundaries across all field sites.

Key Responsibilities

• Rack, cable, configure, and commission edge routers, switches, industrial firewalls, and third‑party telemetry devices during new site test and turn‑up phases.
• Implement and maintain Access Control Lists (ACLs), firewall rules, and security zones to protect critical operational assets while isolating OT traffic from enterprise networks.
• Deploy and support IPSec Site‑to‑Site VPN tunnels between industrial field locations, data centers, and cloud platforms; configure cellular gateways and manage SIM card activations with carriers.
• Perform hands‑on packet‑level diagnostic analysis (using Wireshark, tcpdump, or CLI packet capture tools) to isolate connectivity drops, latency, routing anomalies, and protocol failures.
• Microgrid Control Center & Commissioning Collaboration. Work directly with the MCC and commissioning engineers during site cutovers to validate end‑to‑end telemetry, verify SCADA/OT communications, and confirm network visibility.
• Maintain precise IP address allocation tables, port mapping records, standard operating procedures, and site network topology diagrams.

Requirements

Basic (Required) Qualifications

• Associate or Bachelor’s degree in Network Engineering, Cybersecurity, Computer Information Systems, or equivalent technical certifications/hands‑on experience (0–2 years in an IT/OT networking environment).
• Strong working knowledge of IPv4 addressing, subnetting (VLSM/CIDR), DHCP, DNS, NAT/PAT, and OSI/TCP‑IP reference models.
• Practical understanding of Site‑to‑Site IPSec VPN configurations and Access Control List (ACL) syntax on routers and firewalls.
• Familiarity with packet sniffers (such as Wireshark) to capture, filter, and inspect network traffic during troubleshooting.
• Comfort terminating Ethernet cabling, tracing physical connections, mounting field hardware, and working in industrial or substation/microgrid environments.
• Ability to communicate technical issues clearly under pressure, follow change control procedures, and collaborate effectively with remote teams.

Preferred Qualifications

• Active foundational networking or security certifications (e.g., CompTIA Network+, Security+, Cisco CCNA, Fortinet FCIT/FCA, or Palo Alto PCCET).
• Hands‑on exposure to industrial protocols or environments (e.g., Modbus, DNP3, OPC‑UA, SCADA systems).
• Experience working with cellular modems (Cradlepoint, Sierra Wireless, Digi) and APN/SIM provisioning.

Machines & Equipment

• Use of stepladders and standard PPE required.
• Use of a personal vehicle required.
• Attention to detail; is thorough when performing work and conscientious.
• Lifting Ability: Occasionally needs to lift 50 lbs. Repetitively
• Ability to follow safety procedures and guidelines.
• Must be able to be on your feet (standing, walking) for multiple 8+ hours per day.

Benefits

• Medical, Dental, Vision, and Prescription Drug Insurance
• Company‑Paid Life Insurance
• Disability Insurance
• Paid Family Leave
• Flexible Spending Account (FSA)
• Wellness Programs and Incentives
• 401(k) Retirement Plan & Company Match
• Paid Time Off – Sick & Vacation Time
• Paid Holidays

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

ERock is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

At ERock, we embrace diversity, including all the unique characteristics that make us human: race, age, sexual orientation, gender identity, religion, disability, and education — to name a few. We understand and recognize that diverse backgrounds and perspectives strengthen our teams and our business. The foundation of our diversity efforts is closely tied to our core values specifically our value of “The Team” which includes “Mutual Respect, Openness, and Honesty.”