Senior OT Network Engineer

Kforce Inc; Georgetown (KY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical/dental/vision insurance

HSA

FSA

401(k)

Life, disability & ADD insurance

Salaried personnel receive paid time?

Job summary

Kforce Inc. is seeking a Senior OT Network Engineer to join our client’s System Solution team in a hands-on capacity.

The role focuses on designing and deploying secure, resilient industrial networks using Cisco SDA, zero-trust principles, and IDMZ segmentation across Purdue Model layers. The ideal candidate has extensive experience in OT security, networking, and cross-functional collaboration with IT and plant teams.

Qualifications

• Bachelor's degree in STEM with 10+ years in network engineering.
• OT security expertise in manufacturing networks using zero-trust and segmentation.
• Hands-on experience with routing, switching and fabric-based networks in high-availability environments.

Responsibilities

• Lead OT network deployment and lifecycle management.
• Design zero-trust architectures across Purdue Model layers.
• Implement Cisco SDA fabric and IDMZ integration.
• Provide tier-3 troubleshooting and coordinate major cutovers.
• Mentor IT and plant teams on OT network security.

Skills

OT security

Cisco SD-Access

Zero-trust networking

Networking troubleshooting

Leadership & communication

Education

Bachelor's degree in STEM

Tools

Cisco SDA

Job description

Responsibilities

Kforce has a client that is seeking a Senior OT Network Engineer in Georgetown, NY. Summary: Our client is seeking a hands-on Senior OT Network Engineer to join their System Solution team. This onsite role serves as the critical bridge between IT and plant engineering. The successful candidate will design and deploy secure, resilient industrial networks leveraging Cisco SD-Access and micro segmentation strategies to ensure zero unplanned downtime across manufacturing environments.

• OT Infrastructure Delivery: Lead the deployment, modernization, and day-to-day lifecycle management of OT network infrastructure
• Zero-Trust Network Design: Architect secure industrial networks incorporating IDMZ, macro-segmentation, and granular microsegmentation policies across Purdue Model layers
• SD-Access Implementation: Drive the adoption of Cisco SD-Access (SDA) within the OT environment to automate fabric deployment and enforce identity-based access control
• Operational & Escalation Support: Provide tier-3 troubleshooting for complex network incidents and coordinate major cutovers, upgrades, and maintenance windows
• Mentorship & Collaboration: Translate production requirements for IT and plant teams, while mentoring local IT support on OT network and security fundamentals

Technology Scope

• Enterprise LAN/WAN and industrial OT network environments
• Cisco SD-Access (SDA) fabric architectures, DNA Center / Catalyst Center, and Cisco ISE
• Microsegmentation (identity-based policies, host-level security, or software-defined firewalls)
• VLANs, routing, switching, redundancy, and Next-Generation Firewalls (NGFW)
• Industrial wireless networks and high-availability design

Plant-floor, automation, and edge systems utilizing industrial protocols (e.g., EtherNet/IP, Modbus)

Requirements

• Bachelor's degree in a STEM field (or equivalent experience) with 10+ years of progressive network engineering experience
• OT Security Expertise: Proven track record securing manufacturing, industrial, or plant-floor networks using zero-trust frameworks, IDMZ, and segmentation
• Technical Skills: Strong hands-on experience troubleshooting complex routing, switching, and fabric-based network issues in high-availability environments
• Leadership & Communication: Exceptional interpersonal skills with a strong ownership mindset to guide cross-functional technical and non-technical stakeholders
• Preferred Credentials: Active certifications such as CCNP, CCIE, CISSP, or GICSP

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

• Medical/dental/vision insurance
• HSA
• FSA
• 401(k)
• Life, disability & ADD insurance
• Salaried personnel receive paid time off
• Hourly employees are not eligible for paid time off unless required by law
• Hourly employees on a Service Contract Act project are eligible for paid sick leave

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.