Senior OT Network & Cybersecurity Architect

Stem, Inc.; Broomfield (CO); Hybrid; USD 112,000 - 168,000; Full time

Benefits offered by this job

Bonus eligibility

Comprehensive health benefits

401(k) plan

Paid holidays

Flexible time-off

Job summary

Stem, Inc. in Broomfield, CO invites a Staff Network Engineer to own the Layered Cybersecurity Architecture for PowerTrack across grid-connected assets. You will guide design, deployment, and field implementation for secure OT/ICS networks.

You will translate NERC CIP, IEC 62443, and ISO controls into deployable solutions, mentor teams, and support audits. Occasional travel may be required.

Qualifications

• Bachelor’s degree in engineering, computer science, or related field.
• 8+ years of network engineering with OT/ICS experience.
• Strong written and verbal communication skills.
• Mentorship and technical leadership experience.
• Ability to manage multiple high-visibility initiatives.

Responsibilities

• Owns and evolves Layered Cybersecurity Architecture across product lines.
• Lead design, configuration, and troubleshooting of network infrastructure (Palo Alto, Moxa).
• Directs OT Server and IDS capabilities, log correlation, and time-series archiving.
• Lead vendor RFPs and evaluations for OT/IT security capabilities.
• Designs remote access, identity management, patch management and malware protection.

Skills

OT/ICS security

NERC CIP standards

Firewall config (Palo Alto)

SIEM/IDS deployment

Remote access architectures

Identity management

Scripting (Python/PowerShell)

Mentorship & leadership

Vendor RFP leadership

Network design & architecture

Education

Bachelor’s degree in engineering/computer science

Tools

Palo Alto Firewall

Moxa switches

DMZ infrastructure

Job description

Stem, Inc. in Broomfield, CO invites a Staff Network Engineer to own the Layered Cybersecurity Architecture for PowerTrack across grid-connected assets. You will guide design, deployment, and field implementation for secure OT/ICS networks.

You will translate NERC CIP, IEC 62443, and ISO controls into deployable solutions, mentor teams, and support audits. Occasional travel may be required.