Senior Network Architect - OT/IT Security & NERC CIP

Pattern Energy; Houston (TX); On-site; USD 111,000 - 139,000; Full time

Benefits offered by this job

Bonus program

Medical, dental, vision

Paid time off & holidays

401(k) retirement plan

Employee referral bonuses

Job summary

Pattern Energy is seeking a Network Architect to design, implement, and maintain secure, scalable network infrastructure across IT and OT environments, including firewalls (Palo Alto, Fortigate), SD-WAN, and dynamic routing. You will lead NERC CIP compliance and oversee segmentation, ESP design, and audit evidence across substations and generation sites.

The role emphasizes reliability, security, and collaboration with OT and compliance stakeholders, with a strong focus on change management and

Qualifications

• Bachelor’s degree in computer science, Network Engineering, or a related technical field, or equivalent work experience.
• 8-10 years of progressive experience designing and supporting enterprise network and security infrastructure.
• Deep expertise in Palo Alto and Fortigate firewall platforms (including Panorama and Fortimanager), SD-WAN, BGP, OSPF, NAT design, and network segmentation.
• Direct experience with NERC CIP compliance and OT/ICS/SCADA network environments is preferred.
• Certifications such as PCNSE, Fortinet NSE, or CCNP are a plus.

Responsibilities

• Design, deploy, and maintain enterprise firewall architecture across Palo Alto and Fortigate platforms, including policy standardization and rule-base optimization.
• Architect and manage SD-WAN fabric across corporate and OT sites, including transport selection, path steering policies, and failover design.
• Design and maintain dynamic routing (BGP/OSPF) across the WAN, data center, and OT environments to ensure resilient, redundant connectivity.
• Own network segmentation strategy (VLANs, zones, micro-segmentation) separating IT, OT, and DMZ environments per Purdue Model best practices.
• Lead NERC CIP compliance efforts for network infrastructure, including ESP design, access controls, and audit evidence support.
• Design and support OT network infrastructure connecting SCADA, substations, and generation sites, ensuring reliability and security.
• Serve as escalation point for complex network, firewall, and routing incidents; lead root-cause analysis.
• Maintain network architecture documentation, standards, and disaster recovery/failover runbooks.

Skills

Palo Alto firewall

Fortigate firewall

SD-WAN

BGP

OSPF

NAT design

Network segmentation

NERC CIP compliance

OT/ICS/SCADA networks

CCNP

PCNSE

Fortinet NSE

Education

Bachelor’s degree or equivalent

Tools

Palo Alto Panorama

Fortimanager

Job description

Pattern Energy is seeking a Network Architect to design, implement, and maintain secure, scalable network infrastructure across IT and OT environments, including firewalls (Palo Alto, Fortigate), SD-WAN, and dynamic routing. You will lead NERC CIP compliance and oversee segmentation, ESP design, and audit evidence across substations and generation sites.

The role emphasizes reliability, security, and collaboration with OT and compliance stakeholders, with a strong focus on change management and