Network Engineer

The IT/OT Network Engineer designs, implements, and supports secure, highly available network infrastructure across enterprise (IT) and operational technology (OT) environments. This role owns day-to-day network operations, availability monitoring, incident response, and lifecycle management for network platforms and services supporting corporate offices, data centers, and plant/field operations. The ideal candidate takes pride in building reliable networks, follows disciplined operational practices, and collaborates effectively across IT, OT, and cybersecurity teams.

• Engineer and operate IT/OT networks:
  Design, implement, and support routed/switched networks, segmentation, and access control aligned to Purdue model principles; ensure availability, performance, and maintainability.
• Fortinet and Cisco platform support:
  Administer and troubleshoot Fortinet and Cisco firewalls, switches, routers, VPNs, and remote access solutions in production environments; support upgrades, patching, and lifecycle management.
• Wireless and campus networking:
  Support Fortinet wireless networks (highly desired), including secure SSID design, segmentation, and operational troubleshooting; contribute to campus network standards and deployment practices.
• Monitoring and incident response:
  Operate network monitoring/alerting and observability tooling; lead or participate in incident response (triage, containment, restoration), and drive follow-up actions including root cause analysis.
• Service management execution:
  Perform structured ITSM practices (incident, change, and problem management); create/update runbooks, standards, and network documentation; participate in CAB processes and change implementation with validation and rollback plans.
• Network services and foundational infrastructure:
  Support network services such as proxies, DNS/DHCP/IPAM (DDI), NTP, logging/telemetry, and related operational dependencies.
• Centralized Fortinet operations tooling:
  Use Forti Manager and Forti Analyzer for policy workflows, configuration management, logging, visibility, and reporting.
• Cloud networking:
  Support and integrate cloud networking components, especially Azure and AWS (VNets/VPCs, routing, security controls, hybrid connectivity patterns).
• OT/SCADA collaboration and compliance support:
  Partner with OT/SCADA stakeholders to meet operational uptime requirements; support cybersecurity and compliance objectives including NERC CIP-aligned requirements where applicable.
• Travel and site support:
  Provide deployment and operational support at plants/remote sites as needed (20% travel expected).

• 5+ years of network engineering experience in production enterprise environments; OT experience strongly preferred.
• Hands-on experience with Fortinet and Cisco (configuration, troubleshooting, upgrades, operational support).
• Experience with network availability monitoring/alerting and operational troubleshooting in a 24x7 environment.
• Experience with structured cabling projects including CAT6, CAT6A, single, and multi-mode fiber optics.
• Demonstrated experience in IT service management practices:
• Incident response and escalation
• Change management (documentation, CAB readiness, execution, rollback planning)
• Problem management (RCA and corrective/preventative actions)
• Strong knowledge of routing, switching, segmentation (VLANs/VRFs), firewall policy, NAT, VPNs, and secure remote access.
• Ability to participate in on-call rotation and scheduled after-hours maintenance/patching.
• Strong documentation, communication, and cross-team coordination skills.

• Highly desired:
  Experience with Fortinet wireless networks (design, deployment, troubleshooting).
• Experience Forti Manager and Forti Analyzer (policy management, logging, reporting).
• Experience with OT networks, SCADA systems, and applying the Purdue model.
• Experience supporting networks for industrial operations.
• Familiarity with NERC CIP requirements and audit/support activities.
• Experience with DDI platforms (DNS/DHCP/IPAM), proxies, and related network services.
• Experience with Azure and AWS cloud networking and hybrid connectivity.
• Experience with Ubiquiti/Unifi switching and/or wireless.
• Certifications (preferred): CCNA/CCNP, Fortinet NSE, or comparable credentials.

• On-call rotation with after-hours support expectations.
• Occasional overnight maintenance windows for patching and network changes.
• Travel up to 20% to plants/remote locations.