OT Network System Administrator

University of Colorado System; Allenspark (CO); On-site; USD 71,000 - 80,000; Full time

Job summary

University of Colorado Boulder seeks an OT Network Infrastructure Administrator to own the technical administration of OT network infrastructure, including design, configuration, documentation, and monitoring to support campus facilities and critical systems.

Responsibilities include coordinating firewall changes, maintaining network diagrams, and ensuring reliability across OT, ICS, and facilities technologies. Excellent collaboration with IT, vendors, and system owners is required.

Qualifications

• Bachelor’s degree in computer science or a closely related field and 1 year IT/OT experience with focus in security administration.

Responsibilities

• Design, configure, administer, document, monitor, and support OT network infrastructure and connectivity.
• Draft firewall policy requirements, network access requirements, connectivity requests, and technical implementation plans based on operational and security requirements.
• Coordinate implementation of approved network and firewall changes with I&R IT, OIT Networking, OIT Security, vendors, contractors, and system owners.
• Monitor network performance, capacity, availability, and lifecycle status; recommend improvements for reliability and supportability.
• Support connectivity requirements for building automation, utility metering, lighting controls, access control systems, security systems, and other OT technologies.

Skills

Networking

Firewall configuration

Subnetting

VLANs

Troubleshooting

Analytical skills

Communication skills

Education

Bachelor’s degree in computer science or closely related field

Tools

Cisco

Juniper

Dell switches

VMware

Microsoft Hyper-V

Windows Server

Unix/Linux

vSAN

Job description

Job Summary

The Infrastructure and Resilience Information Technology (I&RIT) department at CU Boulder encourages applications for an OTNetwork System Administrator! This work unit designs, configures,implements, administers, maintains, secures, and renews theinfrastructure and technology platforms supporting departmentaloperations and Boulder campus infrastructure. The work unit isresponsible for servers, virtualization platforms, networks,firewalls, storage, backup services, and related infrastructuresupporting Information Technology (IT), Operational Technology(OT), and Industrial Control Systems (ICS). System Administrationconsults and collaborates with users, service owners, campuspartners, vendors, and other I&R IT work units to identifyappropriate solutions, maintain reliable and secure services,manage technology lifecycles, and support organizational continuityand resilience. CU is an Equal Opportunity Employer and complies with allapplicable federal, state, and local laws governingnondiscrimination in employment. We are committed to creating aworkplace where all individuals are treated with respect anddignity, and we encourage individuals from all backgrounds toapply, including protected veterans and individuals withdisabilities.

Who We Are

The I&R Office areas of responsibility include long-rangecapital planning, architecture, design and construction, theoperation and maintenance of all campus facilities and utilities,transportation services, workplace accident prevention and thecreation of a safe working environment for campus employees,environmental health and safety, campus logistics, and effortsaround sustainability and resiliency. Beyond creating a safe and secure environment, the department isembarking on several projects that are key to the strategic visionof the campus including: crafting a clear and comprehensiveframework and methodology for campus master planning, developingstrategies and tactics to improve campus sustainability andresiliency, and dynamically working within the campus and with ourcommunity partners to positively impact humanity.

What Your Key Responsibilities Will Be

OT Network Infrastructure Administration

Purpose: Own the technical administration and operation ofOT network infrastructure.

• Design, configure, administer, document, monitor, and supportOT network infrastructure and connectivity.
• Administer subnets, network segmentation, IP addressing, VLANs,switch connectivity, data jacks, network ports, and related networkservices supporting OT and facilities technologies.
• Develop, document, and maintain network architecture diagrams,connectivity documentation, addressing information, and operationalrecords.
• Draft firewall policy requirements, network accessrequirements, connectivity requests, and technical implementationplans based on operational and security requirements.
• Coordinate implementation of approved network and firewallchanges with I&R IT, OIT Networking, OIT Security, vendors,contractors, and system owners.
• Monitor network performance, capacity, availability, andlifecycle status, and recommend improvements to improve operationalreliability and supportability.
• Support connectivity requirements for building automation,utility metering, lighting controls, access control systems,security systems, and other OT technologies.

OT Infrastructure Diagnostics and TechnicalCoordination

Purpose: Provide the diagnostic, troubleshooting, andcoordination capability that currently requires significantinvolvement from senior staff.

• Investigate and resolve complex OT connectivity andcommunications issues involving field devices, servers,applications, vendors, network infrastructure, and operationalsystems.
• Determine whether failures originate at the device, network,firewall, server, application, vendor, or operational-processlayer.
• Collect, validate, interpret, and document troubleshootingevidence to support technical analysis and decision-making.
• Coordinate investigations involving operational staff,facility-system owners, vendors, contractors, OIT, consultants, andI&R IT technical staff.
• Identify missing information, unsupported assumptions,documentation gaps, ownership issues, and recurring technicalproblems.
• Develop technical recommendations and proposed correctiveactions based on available evidence.
• Support root-cause analysis efforts and operational problemresolution.
• Improve troubleshooting processes, evidence collectionpractices, escalation quality, and diagnostic procedures.

System Administration and Infrastructure Support

Purpose: Maintain broad SysAdmin capability and contributeto work-unit resilience.

• Provide administration and operational support forvirtualization platforms, servers, directory services, storageplatforms, monitoring systems, enterprise applications, and relatedinfrastructure.
• Assist with maintenance, upgrades, lifecycle replacements,troubleshooting, and implementation of supported infrastructuresystems.
• Participate in cross-training and operational backup coveragefor shared System Administration responsibilities.
• Develop and maintain technical procedures, supportdocumentation, and operational records.
• Collaborate with other System Administration staff to improvereliability, documentation, and supportability of sharedservices.

OT Infrastructure Projects and Implementation

Purpose: Ensure networking and OT infrastructurerequirements are incorporated into projects.

• Participate in capital projects, operational projects, systemupgrades, and infrastructure initiatives involvingnetwork-connected OT systems.
• Review OT networking requirements including VLANs, subnets,firewall requirements, data jacks, network ports, and connectivityneeds.
• Coordinate with project managers, system owners, consultants,contractors, vendors, OIT, and I&R IT staff.
• Assist with implementation planning, testing, validation,cutover activities, operational turnover, and documentation.
• Identify technical risks, unsupported designs, operationalconcerns, and lifecycle implications.

Professional Development, Documentation, and KnowledgeSharing

Purpose: Build durable organizational capability rather thanindividual expertise.

• Maintain and expand technical knowledge related to networking,OT systems, IC S technologies, infrastructure, cybersecurity,diagnostics, and troubleshooting.
• Participate in professional development activities, trainingevents, certifications, technical communities, and industrylearning opportunities.
• Share knowledge through documentation, cross-training,mentoring, and collaborative problem-solving.
• Develop standards, procedures, troubleshooting guides, andother documentation improving operational consistency andcapability.
• Find opportunities to reduce organizational dependency onindividual experts through improved documentation, knowledgetransfer, and operational practices.

Be Statements

Be daring. Be resourceful. Be Boulder.

What You Should Know

• We are unable to offer visa sponsorship at this time.
• This is a primarily in-person position. Limited hybrid work maybe available after onboarding, but is not guaranteed. This role has an anticipated work schedule of Monday - Friday during regularbusiness hours. This position will be expected to respond toemergencies and minimal after hours work as needed.

What We Can Offer

The salary range for this role is $70,900 - $79,700 annually, withthe potential for a future base pay increase of 5% based onexceptional performance.

Benefits

At the University of Colorado Boulder, we arecommitted to supporting the holistic health and well-being of our employees. Our comprehensive benefits package includes medical, dental, and retirement plans; generous paid time off; tuitionassistance for you and your dependents; and an ECO Pass for localtransit. As one of Boulder County’s largest employers, CU Boulder offers an inspiring academic community and access to world-classoutdoor recreation. In fact, CU Boulder has been named one of Forbes' America's BestLarge Employers , ranking #4 among large employers in Coloradoand #28 among universities nationwide. Explore additional perks andprograms through the CU Advantage program.

What We Require

• Bachelor’s degree in computer science or a closely relatedfield, and 1 year of experience in an IT/OT driven field with afocus in security administration using current technologies, plus 1year of recent experience as a Windows System Administrator andNetwork Administrator.
• Additional work experience in IT/OT may be substituted on ayear-for-year basis for the degree.

What You Will Need

• Networking – VLANs, Firewalls, Switches, Subnets,Troubleshooting, etc.
• Demonstrated strong analytical and decision-making skills withthe ability to work both independently and in a teamenvironment.
• Excellent written and oral communication skills.
• Ability to learn, interpret, and follow complex policies andprocedures.
• Demonstrated ability to identify and implement solutions thataddress multi-faceted requirements.
• Ability to anticipate system issues and resolve proactively orescalate appropriately.

What We Would Like You to Have

Formal training, certifications, or demonstrated work experience in3 or more of the following areas:

• Experience managing Operational Technology.
• Network Administration (Cisco, Juniper, or Dellpreferred).
• Windows Administration.
• Unix/Linux Administration.
• VMware Enterprise or Microsoft Hyper-V.
• Storage Area Networks / vSAN.
• Endpoint Hardening / IT Security.
• Database Administration (SQL or Oracle preferred).
• Experience supporting facilities, building systems, orindustrial control systems.

We may request references at a later time.