OT Network & Security Engineer

Vulcan Elements; North Carolina; On-site; USD 120,000 - 180,000; Full time

Job summary

Vulcan Elements is expanding a 1 million square foot facility and seeks an OT Network & Security Engineer to design and secure the OT backbone. You will produce the network design basis, author IEC 62443 documents, and write security requirements into every OEM package while coordinating with IT and site operations.

This role demands deep expertise in industrial networking and OT security, with strong ownership and collaboration across engineering, controls, and facilities teams in a high-impact

Qualifications

• 7+ years in industrial networking and OT security.
• Design and defend segmentation, switching, routing, and firewall policy for industrial Ethernet.
• Write requirements for vendors and auditors, and defend security decisions.
• U.S. Person due to access to export-controlled information.

Responsibilities

• Produce OT network architecture for a large facility.
• Freeze IDF locations, pathways, and enclosure requirements in drawings.
• Author and maintain IEC 62443 zone-and-conduit register and firewall targets.
• Write network/security requirements into equipment packages and verify at FAT.
• Design and operate the remote access architecture for OT and OEM support.
• Coordinate IT: DMZ, WAN, identity, and CMMC/CUI evidence with the government partnership.
• Select and onboard an OT detection-and-response provider and scope risk assessments.

Skills

Industrial networking

OT security

Network design

IEC 62443

Firewall policy

Remote access

CMMC

Education

Bachelor’s or Master’s in Engineering

Tools

Claroty

Dragos

Nozomi

Rockwell

Job description

Vulcan Elements is manufacturing American rare-earth permanent magnets for a secure, resilient future. With a focus on national security and economic resiliency, we serve critical industries such as defense, aerospace, and automotive powering a high-technology future. Vulcan Elements is building a team of ambitious professionals committed to Mission Focus, Technical Excellence, and Transparency.

As the OT Network & Security Engineer you will design and secure the operational technology backbone for a massive 1 million square foot manufacturing facility expansion. You will produce the OT network design basis for the new facility, author the IEC 62443 zone-and-conduit architecture and write security requirements into every OEM equipment contractor develop them in parallel. This is a high-impact, high-ownership role requiring genuine depth in both industrial networking and OTsecurity.

Responsibilities

• Produce the OT network architecture for a large-format industrial facility: MDF/IDF distribution, fiber backbone topology, switching and routing design, IP schema, and resilience strategy.
• Freeze IDF locations, pathways, and enclosure requirements into construction drawings on the construction schedule’s
• Author andmaintainthe IEC 62443 zone-and-conduit register,the living document that is thefirewallpolicy.Set security-level targets per zone.
• Write network and security requirements into allequipment packages ahead of Factory AcceptanceTests, andverify them at acceptance alongsideControls Engineers.
• Design andoperatethe remote access architecture forinternal OT network access andOEM support connectivity, with per-vendor approval and session control.
• Coordinate the enterprise boundary with IT: DMZ services, WAN demarcation, identity architecture, and CMMC/CUI compliance evidence for the U.S. government partnership.
• Select and onboard the managed OT detection-and-response provider ahead of first energization; scope the independent IEC 62443 risk assessment and penetration test; own patch-versus-compensating-control decisions with the area controls engineers.

Deliverables You Will Develop, Review, or Support

• OT network design basis, MDF/IDF standards, IP schema, and fiber/cablingspecifications with acceptance criteria.
• Zone-and-conduit register, security-level targets,firewallpolicy set, and the secure remote access design.
• OEM network/security requirement specifications, FAT verification records, CMMC/CUI evidence packages, and the OT incident-response plan.
• Switch andfirewallconfiguration standards under change control, asset inventory, and themanaged detection andservice integration.

Responsibilities and tasks outlined are not exhaustive and may change asdeterminedby the needs of the business.

Qualifications

• Bachelor’s orMaster’s degree in Engineering, Computer Science, or a related field with7+ years spanning industrial networking and OT security, or equivalent demonstrated depth in both— genuine capability on each side, not one with awareness of the other.
• Ability to design and defend segmentation, switching, routing, andfirewallpolicy for industrial Ethernet environments, and to reason about control-traffic behavior (EtherNet/IP or comparable) when making design trade-offs.
• Ability to apply zone/conduitthinking and risk-based security levels to a real plant-asset inventory, monitoring, secure remote access, and patch/compensating-control judgment under production constraints.
• Ability to take a network design through construction: fiber topologies, IDF and enclosure planning, and working productively with construction and cabling contractors.
• Ability to write requirements vendors can build to and auditors can verify, and to defend security decisions to both operations and compliance audiences.

Must be a U.S. Person due to required access to U.S. export-controlled information or facilities.

Preferred Skills

• FormalIEC 62443 project experience (zone/conduit registers, security-level assessments) or NERC CIP program work that translates directly to it.
• Greenfield or major-expansion industrial network design, including construction-phase coordination.
• Field or professional-services background with an OT security platform or consultancy (Claroty, Dragos, Nozomi class, or an OT security practice).
• Defense industrial base, government-partnered, or otherwise compliance-driven manufacturing environments (CMMC, NIST 800-171/82).
• Experience selecting or managing a managed OT detection-and-response service.
• GICSP, ISA/IEC 62443 certificates, CISSP, CCNP, or equivalent credentials.
• Industrial wireless design and site RF survey experience.
• Familiarity with Rockwell/EtherNet/IP-centric plant architectures and industrial DMZ patterns.
• Experience in regulated industries such as Defense, Aerospace, or Automotive.

Physical and Environmental Requirements

The position requires regular presence on the production floor and the ability to navigate all areas of the facility. Candidates must be able to climb stairs, stand and walk for extended periods, and work in environments that may be hot, humid, or noisy. The role also requires the use of personal protective equipment, including respirators, and adherence to all applicable safety policies, procedures, and regulatory requirements. Employees must be able to complete required fit testing, wear appropriate PPE for the duration of assigned tasks, and respond safely to changing conditions within the production environment.