Senior OT Network Engineer

Kforce Inc; Liberty (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Kforce is seeking a hands-on Senior OT Network Engineer in Liberty, NC to join their System Solution team. This onsite role bridges IT and plant engineering, designing secure industrial networks using Cisco SDA and microsegmentation to prevent unplanned downtime across manufacturing environments.

You will lead OT infrastructure deployment, implement zero-trust designs, and mentor IT staff on OT security. The role requires proven expertise in SDA, IDMZ, macro- and micro-segmentation, and

Qualifications

• Bachelor's degree in a STEM field or equivalent experience.
• 10+ years of progressive network engineering experience.
• OT security expertise with zero-trust, IDMZ, and segmentation.
• Strong hands-on experience troubleshooting routing, switching, and fabric-based issues in high-availability environments.
• Active certifications such as CCNP, CCIE, CISSP, or GICSP.

Responsibilities

• OT Infrastructure Delivery: Lead deployment, modernization, and lifecycle management of OT network infrastructure.
• Zero-Trust Network Design: Architect secure industrial networks with IDMZ, macro-segmentation, and granular microsegmentation across Purdue Model layers.
• SD-Access Implementation: Drive adoption of Cisco SD-Access within OT environment to automate fabric deployment and enforce identity-based access.
• Operational & Escalation Support: Provide tier-3 troubleshooting for complex network incidents and coordinate major cutovers, upgrades, and maintenance windows.
• Mentorship & Collaboration: Translate production requirements for IT and plant teams, while mentoring local IT support on OT network and security fundamentals.
• Enterprise LAN/WAN and industrial OT network environments.
• Cisco SD-Access (SDA) fabric architectures, DNA Center/Catalyst Center, and Cisco ISE.
• Microsegmentation (identity-based policies, host-level security, or software-defined firewalls).
• VLANs, routing, switching, redundancy, and Next-Generation Firewalls (NGFW).
• Industrial wireless networks and high-availability design.

Skills

OT Security

Fabric troubleshooting

Leadership

Communication

Education

Bachelor's degree in STEM

10+ years in network engineering

Tools

Cisco SDA

DNA Center

Catalyst Center

Cisco ISE

Job description

Responsibilities

Kforce has a client that is seeking a Senior OT Network Engineer in Liberty, NC. Summary: Our client is seeking a hands-on Senior OT Network Engineer to join their System Solution team. This onsite role serves as the critical bridge between IT and plant engineering. The successful candidate will design and deploy secure, resilient industrial networks leveraging Cisco SD-Access and micro segmentation strategies to ensure zero unplanned downtime across manufacturing environments. Essential Functions:

• OT Infrastructure Delivery: Lead the deployment, modernization, and day-to-day lifecycle management of OT network infrastructure
• Zero-Trust Network Design: Architect secure industrial networks incorporating IDMZ, macro-segmentation, and granular microsegmentation policies across Purdue Model layers
• SD-Access Implementation: Drive the adoption of Cisco SD-Access (SDA) within the OT environment to automate fabric deployment and enforce identity-based access control
• Operational & Escalation Support: Provide tier-3 troubleshooting for complex network incidents and coordinate major cutovers, upgrades, and maintenance windows
• Mentorship & Collaboration: Translate production requirements for IT and plant teams, while mentoring local IT support on OT network and security fundamentals
• Enterprise LAN/WAN and industrial OT network environments
• Cisco SD-Access (SDA) fabric architectures, DNA Center/Catalyst Center, and Cisco ISE
• Microsegmentation (identity-based policies, host-level security, or software-defined firewalls)
• VLANs, routing, switching, redundancy, and Next-Generation Firewalls (NGFW)
• Industrial wireless networks and high-availability design

Responsibilities

Kforce has a client that is seeking a Senior OT Network Engineer in Liberty, NC. Summary: Our client is seeking a hands-on Senior OT Network Engineer to join their System Solution team. This onsite role serves as the critical bridge between IT and plant engineering. The successful candidate will design and deploy secure, resilient industrial networks leveraging Cisco SD-Access and micro segmentation strategies to ensure zero unplanned downtime across manufacturing environments. Essential Functions:

• OT Infrastructure Delivery: Lead the deployment, modernization, and day-to-day lifecycle management of OT network infrastructure
• Zero-Trust Network Design: Architect secure industrial networks incorporating IDMZ, macro-segmentation, and granular microsegmentation policies across Purdue Model layers
• SD-Access Implementation: Drive the adoption of Cisco SD-Access (SDA) within the OT environment to automate fabric deployment and enforce identity-based access control
• Operational & Escalation Support: Provide tier-3 troubleshooting for complex network incidents and coordinate major cutovers, upgrades, and maintenance windows
• Mentorship & Collaboration: Translate production requirements for IT and plant teams, while mentoring local IT support on OT network and security fundamentals
• Enterprise LAN/WAN and industrial OT network environments
• Cisco SD-Access (SDA) fabric architectures, DNA Center/Catalyst Center, and Cisco ISE
• Microsegmentation (identity-based policies, host-level security, or software-defined firewalls)
• VLANs, routing, switching, redundancy, and Next-Generation Firewalls (NGFW)
• Industrial wireless networks and high-availability design

Technology Scope

• Enterprise LAN/WAN and industrial OT network environments
• Cisco SD-Access (SDA) fabric architectures, DNA Center/Catalyst Center, and Cisco ISE
• Microsegmentation (identity-based policies, host-level security, or software-defined firewalls)
• VLANs, routing, switching, redundancy, and Next-Generation Firewalls (NGFW)
• Industrial wireless networks and high-availability design

Plant-floor, automation, and edge systems utilizing industrial protocols (e.g., EtherNet/IP, Modbus)

Requirements

• Bachelor's degree in a STEM field (or equivalent experience) with 10+ years of progressive network engineering experience
• OT Security Expertise: Proven track record securing manufacturing, industrial, or plant-floor networks using zero-trust frameworks, IDMZ, and segmentation
• Technical Skills: Strong hands‑on experience troubleshooting complex routing, switching, and fabric-based network issues in high-availability environments
• Leadership & Communication: Exceptional interpersonal skills with a strong ownership mindset to guide cross-functional technical and non-technical stakeholders
• Preferred Credentials: Active certifications such as CCNP, CCIE, CISSP, or GICSP

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.