Sr. OT Network Engineer

Kforce Inc; Princeton (IN); On-site; USD 110,000 - 160,000; Full time

Job summary

Kforce Inc. seeks a hands-on Senior OT Network Engineer to join the System Solution team in Princeton, IN. This onsite role bridges IT and plant engineering, designing secure industrial networks and deploying SDA with microsegmentation to prevent downtime.

The role requires 10+ years of progressive network experience, OT security expertise, and strong leadership to guide cross-functional teams. NCCP/CCIE is a plus, with a focus on resilience and high-availability networks.

Qualifications

• Bachelor's degree in a STEM field or equivalent experience.
• 10+ years of progressive network engineering experience.
• OT security expertise with zero-trust, IDMZ and segmentation.

Responsibilities

• Lead deployment and lifecycle management of OT network infrastructure.
• Architect secure industrial networks with microsegmentation.
• Drive Cisco SDA adoption and identity-based access control.
• Provide tier-3 troubleshooting and coordinate major cutovers.
• Mentor IT and plant teams on OT network and security fundamentals.

Skills

Zero-trust design

Cisco SDA

Industrial OT networks

IDMZ & segmentation

Network engineering

Education

Bachelor's in STEM

Tools

Cisco SDA

DNA Center

Catalyst Center / ISE

Job description

Responsibilities

Kforce's client is seeking a hands-on Senior OT Network Engineer to join their System Solution team in Princeton, IN. This onsite role serves as the critical bridge between IT and plant engineering. The successful candidate will design and deploy secure, resilient industrial networks leveraging Cisco SD-Access and microsegmentation strategies; to ensure zero unplanned downtime across manufacturing environments. Essential Functions:

• OT Infrastructure Delivery: Lead the deployment, modernization, and day-to-day lifecycle management of OT network infrastructure
• Zero-Trust Network Design: Architect secure industrial networks incorporating IDMZ, macro-segmentation, and granular microsegmentation policies across Purdue Model layers
• SD-Access Implementation: Drive the adoption of Cisco SD-Access (SDA) within the OT environment to automate fabric deployment and enforce identity-based access control
• Operational & Escalation Support: Provide tier-3 troubleshooting for complex network incidents and coordinate major cutovers, upgrades, and maintenance windows
• Mentorship & Collaboration: Translate production requirements for IT and plant teams, while mentoring local IT support on OT network and security fundamentals

Technology Scope

• Enterprise LAN/WAN and industrial OT network environments
• Cisco SD-Access (SDA) fabric architectures, DNA Center/Catalyst Center, and Cisco ISE
• Microsegmentation (identity-based policies, host-level security, or software-defined firewalls)
• VLANs, routing, switching, redundancy, and Next-Generation Firewalls (NGFW)
• Industrial wireless networks and high-availability design
• Plant-floor, automation, and edge systems utilizing industrial protocols (e.g., EtherNet/IP, Modbus)

Requirements

• Bachelor's degree in a STEM field (or equivalent experience) with 10+ years of progressive network engineering experience
• Preferred Credentials: Active certifications such as CCNP, CCIE, CISSP, or GICSP
• OT Security Expertise: Proven track record securing manufacturing, industrial, or plant-floor networks using zero-trust frameworks, IDMZ, and segmentation
• Technical Skills: Strong hands-on experience troubleshooting complex routing, switching, and fabric-based network issues in high-availability environments
• Leadership & Communication: Exceptional interpersonal skills with a strong ownership mindset to guide cross-functional technical and non-technical stakeholders

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.