Senior OT/SCADA Network Architect

ON.energy; Georgia; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Annual bonus

401(k) match

Medical Insurance

Paid time off

Job summary

ON.energy is hiring a Senior OT/SCADA Network Architect to lead the OT network design for AI data center UPS projects. You will adapt a base design template per site and deliver comprehensive design packages, including diagrams, IP/VLAN schedules, and security considerations.

Responsibilities include refining the template, supporting reviews, and ensuring robust segmentation, VPN connectivity, DMZ patterns, and secure remote access. Travel to sites is required as needed.

Qualifications

• 8+ years in network engineering and architecture.
• 5+ years designing OT, ICS, or SCADA networks.
• Experience designing heavily segmented, multi-zone networks.
• Site-to-site IPsec VPN design and troubleshooting.
• IT/OT separation and dataflow design knowledge.
• Industrial protocols (Modbus, DNP3, IEC 61850, IEC 60870-5-104, OPC UA) familiarity.
• Firewall design on major platforms.
• IEC 62443 familiarity.
• Strong documentation and drawing skills.

Responsibilities

• Architect the OT network and refine base design templates.
• Produce design packages (L1/L2/L3 diagrams, IP/VLAN schedules, configs).
• Design multi-zone networks with segmentation, QoS, and time sync.
• Design site-to-site VPN connectivity into the cloud and secure remote access.
• Support design reviews and commissioning with test plans and as-builts.
• Define IT/OT separation, dataflows, DMZ/gateway patterns, and data transfer.

Skills

OT/SCADA networks

Networking architecture

Site-to-site VPN design

IT/OT separation

Industrial protocols

Firewall design

IEC 62443

Documentation

Tools

Palo Alto

Fortinet

Cisco FTD/ASA

Job description

ON.energy is hiring a Senior OT/SCADA Network Architect to lead the OT network design for AI data center UPS projects. You will adapt a base design template per site and deliver comprehensive design packages, including diagrams, IP/VLAN schedules, and security considerations.

Responsibilities include refining the template, supporting reviews, and ensuring robust segmentation, VPN connectivity, DMZ patterns, and secure remote access. Travel to sites is required as needed.