OT Network Architect

MAIN PURPOSE

A OT (Operational Technology) Network Engineer is responsible for designing, maintaining and troubleshooting industrial network environments. Their focus is on networks that control physical processes, such as those found in manufacturing, energy, and critical infrastructure.

KEY RESPONSIBILITIES

Network Design & Implementation

Designing and deploying OT networks that integrate with IT environments while ensuring minimal downtime. Configuring switches, routers, Fortigate firewalls, and supporting industrial protocols (e.g., Modbus, PROFINET, DNP3). Implementing segmentation strategies like vdom & vlan segregation for non-chemicals and full segregation for our chemical plants.

Security & Compliance

Enforcing cybersecurity best practices to protect against threats like ransomware and unauthorized access.

Applying security policies in line with frameworks like NIST, IEC 62443, or NERC CIP.

Monitoring network activity for anomalies and vulnerabilities.

Support OT security incident response activities

Monitoring & Troubleshooting

Using tools such as SolarWinds, Splunk, or SCADA systems to monitor network health.

Diagnosing and resolving connectivity issues, latency problems, and device failures.

Performing root cause analysis and documenting resolutions.

Remote Support & Maintenance

Leverage remote access solutions (Netskope, VPNs, jump hosts, or bastion servers) for secure remote troubleshooting. Updating firmware, patches, and configurations without disrupting operations. Supporting industrial devices like PLCs, RTUs, and HMIs.

Collaboration & Documentation

Working with plant engineers, IT teams, and security teams to align network strategies.

Documenting network diagrams, change logs, and security policies.

Conducting training sessions to educate on best practices for network security and troubleshooting.

Innovation

Stay abreast of industry trends and emerging technologies in OT security to drive innovation and continuous improvement

COMPLEXITY OF THE JOB

Cross-Functional Work

IT & OT Convergence –

Multi-Disciplinary Collaboration – Requires coordination with:

Operations & Plant Engineers (to ensure network changes don’t disrupt production).

Cybersecurity Teams (to enforce security policies in critical infrastructure).

Compliance & Risk Teams (to meet industry-specific regulatory requirements like NERC CIP, IEC 62443).

Vendor & Supplier Coordination – Works with vendors providing industrial switches, firewalls, and SCADA/ICS solutions.

Direct Influence

Enforces security and network policies that impact production environments.

Implements changes that directly affect plant operations, requiring careful coordination.

Trains OT personnel on network best practices.

Indirect Influence

Advises leadership on OT network security strategy and risk mitigation.

Works with IT teams to ensure compliance with enterprise security policies.

Supports vendors and contractors in aligning with network architecture standards.

EDUCATION, EXPERIENCE & LANGUAGE

o Academic Level: Bachelor’s degree in Computer Science, Information Technology, or a related field

o Language(s) and level of proficiency: English (fluent) and Spanish

· Knowledge/Experience:

Technical Knowledge

Network Infrastructure & Protocols

routers, switches, firewalls, load balancers, and network monitoring tools

network protocols

network segmentation strategies

Fortigate firewalls

VPN technologies

Industrial Networking & OT Security

industrial network protocols

ICS architecture

OT-specific hardware

Deployment & Automation

deploying, configuring, and testing network equipment

automation tools and scripting

Management & communication Skills

o Experience in managing relationships with MSP, vendors and suppliers.

o Ability to communicate effectively with internal stakeholders (e.g., OT operations, finance, senior management).

o Excellent verbal and written communication skills, with the ability to effectively communicate complex technical concepts to non-technical stakeholders.

o Ability to present technical information in a clear and concise manner to senior management and other stakeholders.

Relevant Experience

o Minimum of 10 years of experience in network operations management, with at least 5 years in a leadership role overseeing global network operations.

o Extensive experience working with and managing relationships with managed service partners.

o Relevant certifications such as CCNP, CCIE, or equivalent are highly desirable.

o ITIL certification is a plus.

o Familiarity with documentation, training, and support processes necessary for a smooth handover.