Senior OT Cybersecurity & Network Engineer - Hybrid

Ziggurat Automation Inc.; Sacramento (CA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Ziggurat Automation Inc. in Sacramento is seeking a Senior Engineer for Integration & Controls to advance OT network hardening and protection-system communications. You will influence PRP dual-star networks, IEC 62443 zone/conduit design, RBAC, and policy-based allow-listing across OT devices.

Lead design and implementation of network hardening baselines, collaborate with Nozomi/Claroty for monitoring, and ensure standards alignment with NIST SP 800-82 and IEEE 1686 across RTACs and relays.

Qualifications

• 7+ years OT network engineering or ICS cybersecurity.
• Industrial Ethernet design: VLAN/VRF, QoS, switch configuration.
• IEC 62443 zone/conduit model implementation.
• OT network hardening: RBAC, allow-listing, unused protocol disabling.
• Network protocol analysis: Wireshark for GOOSE, DNP3, Modbus, SNMP.
• Understanding PRP/HSR per IEC 62439-3.

Responsibilities

• Design PRP dual-star network architecture for protection traffic.
• Design IEC 62443 zone/conduit architecture with VLAN segmentation.
• Implement OT network hardening including RBAC and allow-listing.
• Align cybersecurity standards (IEC 62443, NERC CIP, NIST SP 800-82, IEEE 1686).
• Integrate network monitoring with Nozomi/Claroty for OT visibility.
• Establish logging/forensics architecture with SIEM or dual historian.

Skills

OT network engineering

Cybersecurity for ICS

Network protocol analysis

Technical documentation

Field deployment coordination

Education

Bachelor's degree in Electrical Engineering or related field

Tools

Wireshark

Nozomi Networks

Claroty

AcSELerator RTAC

Job description

Ziggurat Automation Inc. in Sacramento is seeking a Senior Engineer for Integration & Controls to advance OT network hardening and protection-system communications. You will influence PRP dual-star networks, IEC 62443 zone/conduit design, RBAC, and policy-based allow-listing across OT devices.

Lead design and implementation of network hardening baselines, collaborate with Nozomi/Claroty for monitoring, and ensure standards alignment with NIST SP 800-82 and IEEE 1686 across RTACs and relays.