Senior Network and Cybersecurity Engineer

FuelCell Energy, Inc.; Danbury (CT); Hybrid; USD 113,000 - 126,000; Full time

Benefits offered by this job

Medical, dental, vision

Company-paid life/disability insurance

401(k) plan

Employee stock purchase plan

Generous paid leave

Job summary

FuelCell Energy seeks a Senior Network and Cybersecurity Engineer to own the company network and security across corporate offices, manufacturing facilities, Microsoft Azure, and OT environments. Hybrid work in Danbury, CT with a defined onsite and remote schedule.

You will lead network design, Azure security, and infrastructure operations, serving as a senior escalation point and driving security initiatives from planning through delivery. Strong Azure and OT security expertise required.

Qualifications

• Bachelor's degree in information technology, cybersecurity, computer science, engineering, or related field.
• 5+ years of progressive experience in network engineering and cybersecurity.
• 3+ years designing, securing, and operating Microsoft Azure in a production enterprise environment.
• Expertise in LAN, WAN, wireless, routing, switching, firewalls, VPNs, and secure network segmentation.
• Azure networking and security including virtual networks, hybrid connectivity, and native controls.
• Hands-on troubleshooting across network, cloud, and security layers.

Responsibilities

• Own design, implementation, and support of the company network infrastructure (LAN, WAN, wireless, firewalls, VPN, Azure).
• Develop and maintain a network roadmap for reliable, secure, scalable connectivity across all facilities.
• Act as senior escalation point for complex network, connectivity, and security issues.
• Design and secure Azure networking and hybrid connectivity using Zero Trust and least-privilege principles.
• Implement and improve security controls across Azure and network with identity, monitoring, threat detection.
• Support secure segmentation and remote access between IT and OT environments; lead infrastructure and security projects.
• Manage patching and vulnerability remediation for network and security infrastructure; support incident response, DR, audits including SOX.
• Maintain documentation and change control across IT, OT, and cybersecurity teams.

Skills

5+ years

Azure security

Strong communication

Problem solving

Documentation

Education

Bachelor's Degree (IT/cybersecurity/CS/engineering)

Tools

Microsoft Azure networking

Entra ID

Defender for Cloud

Microsoft Sentinel

IEC 62443

Purdue Model

NIST CSF

CIS Controls

PowerShell

Python

Bicep

Terraform

SOX

ZTNA

Microsoft Defender for IoT

Claroty

Nozomi Networks

Dragos

Job description

FuelCell Energy's Global Infrastructure team is seeking a Senior Network and Cybersecurity Engineer to help own the company network and its security across corporate offices, manufacturing facilities, Microsoft Azure, and OT environments. This is a hybrid role based in Danbury, CT with a defined onsite and remote schedule.

Role Focus

In this position, you will be responsible for network engineering, Azure security and hybrid connectivity, and infrastructure operations. You will serve as a senior technical escalation point for complex network, connectivity, and security issues, while leading infrastructure and security initiatives from planning through delivery.

Key Responsibilities

• Own the design, implementation, and support of the company network infrastructure, including LAN, WAN, wireless, firewalls, VPN, and connectivity to Azure.
• Develop and maintain a network roadmap that supports reliable, secure, and scalable connectivity across all company facilities.
• Act as the senior escalation point for complex network, connectivity, and security issues.
• Design and secure Azure networking and hybrid connectivity, applying Zero Trust and least-privilege principles.
• Implement and continuously improve security controls across Azure and the network, partnering with the cybersecurity team on identity, monitoring, and threat detection.
• Support secure segmentation and remote access between IT and OT environments to help protect the availability and safety of production systems.
• Lead infrastructure and security projects from planning through delivery.
• Manage patching and vulnerability remediation for network and security infrastructure, and support incident response, disaster recovery, and audit activities including SOX.
• Maintain clear documentation and change control, and share knowledge across IT, OT, and cybersecurity teams.

Required Qualifications

• Bachelor’s Degree in information technology, cybersecurity, computer science, engineering, or a related discipline.
• Extensive experience may be considered in lieu of a degree.
• 5+ years of progressive experience in network engineering and cybersecurity.
• 3+ years of hands-on experience designing, securing, and operating Microsoft Azure in a production enterprise environment (required).
• Expertise in network engineering across LAN, WAN, wireless, including routing and switching, next-generation firewalls, VPNs, and secure network segmentation.
• Expertise in Microsoft Azure networking and security, including virtual networks, hybrid connectivity, and native network security controls.
• Hands-on troubleshooting across network, cloud, and security layers.
• Working knowledge of Microsoft security tools including Entra ID, Defender for Cloud, and Microsoft Sentinel.
• Working knowledge of OT/ICS network security concepts such as IEC 62443 and the Purdue Model.
• Working knowledge of security frameworks such as NIST CSF and CIS Controls.
• Strong communication skills, including clear documentation and the ability to explain technical concepts to non-technical stakeholders.
• Strong problem-solving skills and a record of delivering complex technical projects.

Technologies and Tools

Microsoft Azure, Zero Trust, Entra ID, Defender for Cloud, Microsoft Sentinel, IEC 62443, Purdue Model, NIST CSF, CIS Controls, PowerShell, Python, Bicep, Terraform, SOX, ZTNA, Microsoft Defender for IoT, Claroty, Nozomi Networks, Dragos.

Hybrid Schedule and Location

• Hybrid role based in Danbury, CT.
• Onsite requirement: three days per week onsite and two days per week remote, with the schedule changing during the first 90 days (four days onsite and one day remote during the first 90 days).
• Onsite presence is required to collaborate with cross-functional teams and support operational systems.
• Required to work onsite at the Torrington facility one day every two weeks or as needed.

Working Conditions and Physical Requirements

• General work performed in office, manufacturing, and warehouse environments using a computer and standard office equipment.
• During the first 90 days: 4 days in the office and 1 day working from home; thereafter: 3 days in the office and 2 days working from home.
• Occasional after-hours, weekend, or on-call work may be required for maintenance windows, OT production schedules, and security incidents.
• Ability to lift, carry, or move equipment weighing up to 25-35 lbs.
• Ability to bend, crouch, or reach to access equipment and workspace areas.
• Ability to wear required PPE as designated based on the work location.
• Ability to walk or stand for short periods while performing onsite support.
• Ability to sit for extended periods while working on a computer or performing monitoring tasks.

Compensation

USD 113,000 - 126,000 per yearly.

Additional Qualifications (Plus)

• Relevant certifications such as Microsoft AZ-500 or AZ-700, CCNP, CISSP, or GICSP.

Preferred Background

• Experience in manufacturing, energy, utility, or other industrial environments, including exposure to OT networks.
• Familiarity with Infrastructure as Code (e.g., Bicep or Terraform) and scripting (e.g., PowerShell or Python).
• Familiarity with OT security monitoring platforms (e.g., Microsoft Defender for IoT, Claroty, Nozomi Networks, or Dragos).
• Exposure to Zero Trust Network Access (ZTNA) platforms and SOX or other compliance audits.

Benefits

• Medical, dental, vision
• Company-paid life/disability insurance
• 401(k) plan
• Employee stock purchase plan
• Generous paid leave
• Comprehensive benefits including medical, dental, vision, company-paid life/disability insurance, 401(k) plan, employee stock purchase plan, and generous paid leave

Employment Requirements

• Successful completion of a drug screen
• Criminal background check
• Employment and education verification

Equal Opportunity Employer

FuelCell Energy is an equal-opportunity employer committed to an inclusive and safe work environment. FuelCell Energy, Inc. is also committed to ensuring its application process provides equal employment opportunity to all U.S. job seekers, including individuals with disabilities.