Senior Network Engineer I

EVERLINE TECH OPS LLC; Houston (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

EverLine is seeking a Senior Network Engineer I to design and deliver secure IT/OT networks across multiple sites in Texas and beyond. You will act as technical lead, resolve complex problems, and contribute to reference architectures, working under the Director of OT.

The role requires 8–11 years of progressive network engineering experience, CCNP or equivalent, and strong knowledge of NERC CIP. You will mentor junior engineers, document designs, and support after-hours incidents.

Qualifications

• Bachelor’s degree in engineering, computer science, or related field.
• 8–11 years of progressive network engineering / administration experience, including substantial hands-on OT networking.
• CCNP certification; CCIE or OT/ICS security certification in progress or preferred.
• Strong knowledge of OT networking protocols and industrial cybersecurity practices.

Responsibilities

• Serve as technical lead on complex, multi-site network builds and upgrades.
• Design LAN/WAN/OT architectures with IT/OT segmentation per Purdue reference model.
• Review vulnerability reports and direct remediation across engagements.
• Mentor Network Engineer III and below; maintain authoritative technical documentation.

Skills

OT networking

NERC CIP

CCNP

Mentorship

Technical leadership

Education

Bachelor of Science in Engineering, Computer Science, or related field

Tools

FortiGate

Palo Alto

Cisco

Checkpoint

VPNs

Job description

About EverLineEverLine is a technical services platform for critical infrastructure, offering integrated regulatory, remote operation, and security solutions. Headquartered in Houston, Texas, with offices in Denver, Bakersfield, and El Paso, EverLine partners with more than 200 operators nationwide to deliver energy safely, reliably, and securely. Its technical stack combines three complementary service lines, Advise, Connect, and Secure, delivering increased safety and reliability at meaningful savings versus in-house or multi-vendor sourcing.EverLine has maintained a TRIR of 0.0 and zero OSHA recordables over the past three years, and puts safety and security at the forefront of every action taken on behalf of customers.About Security & ResilienceEverLine Security & Resilience is comprised of industry-leading experts who have advised and supported critical-infrastructure operators in advisory, integration, and operations for more than 30 years, across energy including oil, gas, and pipelines, utilities, manufacturing, federal government, and military and defense. The practice operates a U.S.-based Security Operations Center providing continuous, automation-driven monitoring and detection with analyst-led triage and intelligence-driven threat hunting, purpose-built for cyber-physical systems. EverLine Security & Resilience is a licensed investigative firm and security consultancy in the State of Texas.Position SummaryThe Senior Network Engineer I is an expert individual contributor and technical lead responsible for the design and delivery of complex, secure IT and Operational Technology (OT) network solutions across EverLine's internal and customer environments. Working under the direction of the Director of OT and in partnership with the Network Lead, the Senior Network Engineer I serves as the technical lead on complex, multi-site or multi-workstream network projects, resolves ambiguous and undefined technical problems, and contributes to EverLine's network design standards and reference architectures. This role provides technical mentorship to Network Engineer III and below and serves as a primary technical authority for NERC CIP network design within scoped engagements. Typically requires 8-11 years of progressive network engineering experience, including substantial hands-on OT experience.Major Duties and ResponsibilitiesNetwork Architecture & DeliveryServe as technical lead on complex, multi-site or multi-workstream network builds and upgrades, owning the technical solution from design through implementation.Design LAN/WLAN/WAN and OT network architectures, including segmentation between IT and OT zones consistent with the Purdue reference model and defense-in-depth principles.Resolve ambiguous, high-complexity performance, routing, and connectivity issues through advanced root-cause analysis across OT environments.Design resilient field-site connectivity architectures for remote and unmanned RTU/PLC sites, including cellular and satellite failover and industrial firewall/router platforms.Contribute to and refine EverLine's network design standards, hardening baselines, and reference architectures.OT / ICS & Industrial NetworkingArchitect and validate connectivity for SCADA and industrial platforms (e.g., ClearSCADA/GeoSCADA, Kepware, Ignition) and associated data links (OPC UA, MQTT).Serve as a subject-matter resource for industrial networking protocols (Modbus, DNP3, OPC-DA/UA, IEC 61850) and their secure implementation.Guide telemetry and remote-connectivity design for field devices (RTUs, PLCs, gateways) across electric utility and oil & gas operations.Security & ComplianceDesign and review network security controls, including next-generation and industrial firewalls (e.g., FortiGate, Palo Alto, Cisco, Checkpoint), VPNs, and access control architectures.Act as primary technical point for NERC CIP network requirements within scoped engagements, including electronic security perimeters (CIP-005) and system security management (CIP-007), in coordination with management and compliance stakeholders.Review vulnerability reports, prioritize findings, and direct remediation across engagements.Lead forensics and remedial action on complex cybersecurity incidents; drive continuous improvement of the organization's cybersecurity posture.Leadership & DocumentationProvide technical mentorship to Network Engineer III and below; review and approve designs, configurations, and change requests.Own the technical relationship on assigned accounts / engagements and participate in scoping and estimation.Establish and maintain authoritative technical documentation, including reference network diagrams, design records, and runbooks.Provide senior-level after-hours and on-call escalation support for critical operating situations.Knowledge, Skills, Abilities, and Other Personal CharacteristicsBachelor of Science in Engineering, Computer Science, or a related field, or an equivalent combination of education and hands-on experience.8-11 years of progressive network engineering / administration experience, including substantial hands-on OT networking.Professional certification such as CCNP required; CCIE or an advanced OT/ICS security certification (e.g., GICSP, CISSP, CISM, CISA, etc) in progress or strongly preferred.Expert troubleshooting and design capabilities across relevant OT infrastructure and architectures.Strong working knowledge NERC CIP and/or TSA Security Directive requirements and program-level compliance delivery.Deep understanding of network operating systems, routing and switching, and network security.Proficiency with access control models and industrial protocols (Modbus, DNP3, OPC UA, IEC 61850).Experience with network diagnostic, monitoring, and analysis tools.Strong knowledge, background, or experience within critical infrastructure industries (Energy, Oil & Gas, Power utilities, Pipelines, Water utilities, AI/Data Centers, Manufacturing).Program or multi-project management experience.Strong communication skills, including the ability to convey complex technical information to technical and executive audiences.Demonstrated ability to mentor engineers and lead technical delivery.Able to learn and apply new technical information quickly; customer-service oriented.Strong organization and dependable time-management skills; able to lead multiple concurrent efforts.Able to be responsive to critical operating situations.Preferred SkillsSolution-orientedUnselfish collaborationIntellectual curiosityDedicated to continuous improvement.GritWork EnvironmentThe employee will work in an office environment, utilizing standard office and computing equipment. At times, the employee may be required to visit an operational location that requires following safety and PPE, such as FR clothing, hard hat, and boots. Less than 30% travel. Standard work hours with after-hours support / on-call for crisis support on a set schedule.The employee is required to be present in the EverLine Ellington or Cypresswood office full-time for an initial onboarding period, after which the employee may shift to a hybrid schedule (e.g., 2 days onsite in Houston (Ellington or Cypresswood), 3 days working remotely) in accordance with EverLine policy.If working remotely, the employee will be required to support video teleconferencing when applicable, as well as attend teleconference meetings originating in other time zones, which may occur outside normal working hours. The employee will interface with remote employees, requiring reliance on email and phone communications, as well as the ability to maintain productivity while working autonomously.Employment is contingent upon a successful background check and drug screen.Equal Opportunity Employer; E-Verify EmployerThis document describes the current position. It is not an employment contract. Our Company reserves the right to modify position duties or position descriptions at its discretion.