Network Engineer, Sr.
- Compensation
- Not disclosed
- Location
- Oak Ridge, TN, United States
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Full time
- Experience
- 3+ years
- Category
- Network engineering
- Posted
Skills
Must have
- 5–10+ years in network engineering/architecture, including 3+ years supporting OT/ICS in critical infrastructure
- Bachelor Degree in related field
- Experience with: – SCADA, historians, PLC/DCS systems – Industrial protocols such as Modbus, DNP3, EtherNet/IP, OPC‑UA, Profinet – NIST 800‑82, NIST 800‑53/171, and related frameworks – Industrial net
- Experience in energy, utilities, nuclear, national labs, or similarly high‑security sectors
- Strong collaboration with Controls, Facilities, Cybersecurity, and mission support partners
Full description
Network Engineer / Network Architect (OT / ICS – DOE Energy Sector)Make an Impact in America’s Energy Future
Are you passionate about building secure, resilient networks that keep critical infrastructure running safely and reliably? Do you thrive in environments where precision, safety, and mission-driven engineering truly matter? If so, we want you on our team.
We’re looking for a talented Network Engineer / Network Architect to help modernize and secure Operational Technology (OT) and Industrial Control System (ICS) environments that support some of the nation’s most critical energy-sector operations. This is a chance to work at the crossroads of advanced engineering, cybersecurity, and national mission support—directly contributing to safe, efficient operations across nuclear, high‑voltage, and facility‑scale systems.
What You’ll DoDesign the OT Networks That Power Critical Operations
- Architect secure, segmented OT/ICS networks using the Purdue Model (Levels 0–3)
- Develop high‑availability, deterministic designs supporting SCADA, PLCs, DCS, historians, and real‑time automation
- Implement secure vendor/remote access pathways aligned to cybersecurity frameworks
- Build zoning, conduits, DMZs, and trusted data‑flow architectures for mission operations
- Design and support industrial protocol environments (Modbus, DNP3, EtherNet/IP, OPC‑UA, Profinet, IEC 61850, BACnet)
Engineer, Deploy, and Operate OT Infrastructure
- Configure and maintain industrial‑grade switches, routers, firewalls, and ruggedized hardware
- Support facility systems such as building automation, utilities, power systems, and nuclear/experimental equipment
- Maintain diagrams, inventories, IP schemas, and documentation aligned with cybersecurity and configuration controls
Advance OT Cybersecurity & DOE Compliance
- Apply NIST 800‑82, NIST 800‑53/171, and ISA/IEC 62443 security controls
- Support DOE readiness activities, audits, and assessment documentation
- Collaborate with Cybersecurity teams on firewall policies, monitoring, logging, and threat detection
- Support vulnerability management while maintaining operational uptime in sensitive environments
Automate, Monitor & Sustain Critical Systems
- Build automation workflows (Ansible/Python) where safe and appropriate
- Integrate network health and security telemetry using approved OT monitoring platforms (Nozomi, Claroty, Splunk, SolarWinds, ELK/Grafana)
- Develop crisp documentation, change‑control packages, and incident response materials