Senior OT Network Engineer - Hybrid & Security Focus

SB Energy; Phoenix (AZ); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Health, Dental & Vision

401(k) with company match

Paid time off + holidays

Parental leave

Life insurance

Hybrid office setup benefits

Device purchase support

Job summary

SB Energy seeks a Senior Network Engineer to design, implement, and sustain the OT network for power plants, data centers, and remote operations. You will develop end-to-end network architectures, ensure robust security, and lead design reviews and handoffs across EPC/OEM teams.

You will leverage Azure networking, firewall policy expertise, and virtualization platforms to support reliability, uptime, and cybersecurity compliance in a dynamic energy infrastructure environment.

Qualifications

• Bachelor’s degree or equivalent education and experience.
• 5+ years of experience managing computer networks in the OT energy sector (solar, battery storage, gas generation) and data center.
• 5+ years of experience with Microsoft Azure networking, site-to-site connectivity, virtual networks, VPN gateways, cloud firewalls, and hybrid monitoring.
• Experience with Palo Alto Networks/Cisco routers, firewalls, and switches, Dell Servers, Hyper-V, VMware, Kubernetes, Docker.
• Current networking or security certifications such as CCNP/CCNA, PCNSE/PCNSA, GICSP, GRID, CISSP, or Security+.
• Familiarity with the NIST Cybersecurity Framework, NIST SP 800-82, ISA/IEC 62443, and NERC CIP applicability and compliance processes.
• Datacenter knowledge in Electric Power Management System (EPMS) and Building Management Systems (BMS) is a plus.
• Broad experience across new solar technologies, energy storage, or application of artificial intelligence / machine learning to renewable energy.
• Demonstrated strong engineering, design, and communication skills, and an ability to work in a dynamic team environment to think outside the box and solve traditional problems in new ways.
• Self-starter with the ability to prioritize efforts and drive towards completion.
• Strong verbal, written, interpersonal and communication skills.
• The position requires up to 10% domestic travel.

Responsibilities

• Own the end-to-end OT network architecture from development and detailed design through construction, commissioning, operations, upgrades, and asset handover.
• Design resilient, segmented powerplant and substation networks, including LAN/WAN, VLANs and VRFs, routing and switching, firewalls and DMZs, redundant paths, fiber and telecom circuits, wireless or cellular links, and secure cloud or remote operations connectivity.
• Find solutions for telecom/fiber to remote sites utilizing wireless or satellite backup communications.
• Create and maintain high- and low-level designs, network topology diagrams, IP address and VLAN plans, port/protocol matrices, firewall rule bases, equipment standards, bills of material, fiber schedules, test plans, and as-built records.
• Lead equipment selection, configuration standards, capacity planning, procurement support, factory/site acceptance testing, commissioning, failover testing, and operational handoff.
• Review EPC, OEM, integrator, and subcontractor designs and configurations; resolve technical gaps and verify that installations meet reliability, cybersecurity, schedule, budget, and supportability requirements.
• Embed defense-in-depth into OT network designs and operating practices, using risk-based principles aligned with company policy, NIST guidance for OT security, ISA/IEC 62443, and applicable NERC CIP requirements.
• Implement and govern security zones and conduits, firewall and access-control policies, industrial DMZs, allowlisted communications, least-privilege access, and documented separation between enterprise IT, site OT, vendor, and external networks.
• Secure interactive and vendor remote access through approved VPNs, multi-factor authentication, jump hosts or privileged access controls, time-bounded access, session accountability, and rapid revocation.
• Integrate network devices with centralized monitoring and security tooling, including health and performance monitoring, syslog/SIEM, time synchronization, configuration management, and OT-aware detection or network visibility platforms.
• Assess third-party equipment, connections, and support models for cybersecurity risk before deployment, and ensure vendors follow approved remote-access, change-control, and incident-notification requirements.
• Review network firmware updates and determine risk, impacts and implement updates.
• Report project progress updates to key stakeholders.

Skills

OT networking

Azure networking

Security policies

Networking design

Education

Bachelor’s degree or equivalent

CCNP/CCNA

PCNSE/PCNSA

CISSP

Tools

Palo Alto Networks

Cisco routers & switches

Dell Servers

Hyper-V

VMware

Kubernetes

Docker

Job description

SB Energy seeks a Senior Network Engineer to design, implement, and sustain the OT network for power plants, data centers, and remote operations. You will develop end-to-end network architectures, ensure robust security, and lead design reviews and handoffs across EPC/OEM teams.

You will leverage Azure networking, firewall policy expertise, and virtualization platforms to support reliability, uptime, and cybersecurity compliance in a dynamic energy infrastructure environment.