Responsibilities :
Design and support IT/OT network architectures following the Purdue Model and defense-in-depth principles. Configure and manage VLANs, ACLs, VRFs, OSPF, BGP, NAT, QoS, DMZs, and network segmentation. Deploy and administer Palo Alto, Fortinet, and Cisco firewalls. Support connectivity for SCADA, PLC, RTU, HMI, Historian, and IIoT systems. Implement secure remote access solutions using VPNs, Jump Servers, and Zero Trust models. Monitor and troubleshoot network performance using SolarWinds, PRTG, Zabbix, Wireshark, Nozomi, and Claroty. Secure industrial protocols including Modbus TCP, OPC UA, Profinet, EtherNet/IP, DNP3, and BACnet.
Additional Responsibilities:
Strong stakeholder management and communication skills. Ability to bridge IT and OT requirements effectively. Excellent troubleshooting, documentation, and problem-solving capabilities.
Technical and Professional Requirements:
9 to 15 years of experience in Network Engineering, including 3+ years in OT/Industrial environments such as Manufacturing, Utilities, Pharma, Energy, or Oil & Gas. Strong expertise in L2/L3 networking, Routing & Switching, VLANs, ACLs, STP, HSRP/VRRP, OSPF, BGP, and QoS. Hands-on experience with Cisco, Juniper, Aruba, or HPE networking solutions and Palo Alto, Fortinet, or Cisco firewalls. Experience with network services and tools including DHCP, DNS, NTP, IPAM, Syslog, and Wireshark. Good understanding of ICS/SCADA architectures, Purdue Model, OT DMZ design, Historian connectivity, and industrial networking concepts. Working knowledge of industrial protocols such as Modbus TCP, OPC UA, Profinet, EtherNet/IP, and DNP3. Familiarity with OT cybersecurity frameworks and controls including IEC 62443, NIST CSF, IDS/IPS, NAC, SIEM, and vulnerability management.
