Network Engineer

POSITION SUMMARY

The Network Engineer is responsible for the design, implementation, security and lifecycle management of CVR Energy enterprise and SCADA network infrastructure across multiple datacenters and remote plant sites. This role requires deep expertise in Cisco based routing and switching, firewall administration, SCADA segmentation, and enterprise / industrial connectivity over LTE, VSAT, and private WAN circuits. The Network Engineer will support modernization efforts, including hardware refresh, vulnerability remediation, and secure network separation between corporation IT and SCADA environments.

The role requires a balance of technical knowledge, hands-on configuration skills, ability to coordinate with, and ability to create structured network documentation. The Network Engineer will also act as a subject matter expert in network security, compliance, and collaborating with cross-functional IT and operations teams. Must understand TCP/IP and be able to identify issues with tools such as Sniffer or Incumbent as well as knowledge of firewalls. The position is responsible for monthly monitoring of switches, routers and firewalls for errors and utilization and provide reports on findings; ensures the network is up to date for PCI compliance and providing end user training and documentation where required. The Network Engineer should be knowledgeable in routing and switching designs, networking and security standards.

EDUCATION REQUIREMENTS

• Bachelor's Degree in Information Systems, Information Technology, or other related scientific or technical discipline required.
• Computer Science, or related technical field; equivalent technical experience may be substituted, or demonstrated technical proficiency may be substituted for education requirements.
• Relevant certifications preferred like Cisco CCNP, Forescout FSCA, Wireless and Security or equivalent.

EXPERIENCE REQUIREMENTS

• 5 years of experience with degree or 6 years of experience in lieu of degree in broad network including some if not all the following: LAN/WLAN/SD-WAN experience and designing/implementing network infrastructure solutions in Windows and Linux/Unix environments; and networking with blade solutions and architectures, i.e. Cisco UCS, HP/Dell/IBM Blades.
• Working knowledge of cellular and/or satellite networks, cabling, racks, electricity/power, firewalls, TCP/IP, routing, switching, VLANS's, and SSL VPNs
• Experience with Windows Server platforms emphasizing DNS and DHCP; and knowledge of QoS, CAR, SSL, BGP, HSRP, MPLS, IPSEC, iSCSI, EIGRP, OTV, VRRP, VDC, vPC, VSAN, ACL's and VACL's, DMVPN, T1's, DS3's, OC3's, OSPF, IPv4, Layer 2/3 diagrams, and NTP.
• Experience in Cisco network access control solutions (ACS, NAC, Forescout) preferred
• Security: Cisco ASA, Firewalls, VPN/AnyConnect, ACL/TLS hardening, SNMPv3, SSHv2.
• Wireless: Cisco 9800 WLC, Catalyst 9100 APs, industrial wireless (IW9165E, 9130AXE in hazardous locations).
• SCADA/ICS Networking: Segmentation, DMZ design, redundant LTE/VSAT connectivity, vendor remote access.
• Vulnerability remediation (TLS cipher updates, IOS/ROMmon upgrades, ACL hardening, SSH/TLS enforcement).
• Lifecycle management: equipment refresh planning, SmartNet alignment, budget tracking annual hardware replacement projects.
• Experience with monitoring, troubleshooting, and packet analysis tools (Wireshark, NetFlow, SolarWinds, etc.).

• Strong Visio documentation and structured project/change management.

• Ability to multi-task and manage multiple priorities while working independently
• Interpersonal and relationship skills are necessary to work with an integrated team of project managers, developers, quality and other company engineers
• Ability to converse verbally and in writing with good presentation, communication, organization and time management skills and understanding of how change management affects others.
• Demonstrate initiative and strong organizational and communication skills and the ability to develop and maintain effective working relationships with IT staff and all levels of the organization
• Maintain established performance levels to achieve individual and group goals
• Provide directions to lower-level staff to develop necessary skills to succeed and advance.
• Experience in the Energy and Refining industry preferred
• Ability to adjust schedules to meet business needs
• Fluent in English, oral and written

MAJOR ACCOUNTABILITIES

• Implement, and maintain secure enterprise network and SCADA network infrastructure across datacenters and remote plant sites.
• Implement vulnerability remediation program across 100 devices, ensuring compliance with security baselines (TLS 1.2 , SSHv2, SNMP ACLs, etc.).
• Maintain and optimize SCADA/ICS network segmentation, DMZs, and secure vendor access.
• Serve as an escalation point for troubleshooting complex WAN/LAN/SCADA connectivity issues.
• Coordinate with vendors and carriers to resolve network incidents, negotiate contracts, and validate hardware/software upgrades.
• Develop and maintain detailed diagrams, change-control documents, risk/rollback/test plans, and SharePoint documentation repositories.
• Installs, and supports network communications, including LAN/WLAN/WAN/MAN systems, wireless networks and public ingress/egress points.
• Ensures stable operations within the production network including adhering to industry best practices such as change/incident management and information security policies and procedures
• Coordinates with vendors and common carriers to resolve network operating problems and installations. Validates procedure and infrastructure documentation relating to network configuration, network mapping, processes, service records, etc.
• Evaluate existing equipment, hardware and software upgrades; interacts with vendors, outsources and contractors to secure network, products and services.
• Acts as an escalation point to the Service Desk team, Systems team, or Network Administrator position
• Assist in the development and implementation of the network backup and recovery plans to ensure reliable network infrastructure.
• Maintains excellent communications with internal customers, IT resources, as well as external partners, consultants, and support teams.
• Updates job knowledge by participating in educational opportunities and professional organizations; reading professional publications, maintaining personal networks
• Regularly communicates with supervisor about work progress, concerns and questions.
• Available for on-call support from on-site and remote users at any time, if necessary.

EXPECTED RESULTS 

• Highly available, secure, and compliant enterprise and SCADA network infrastructure.
• Successful execution of planned hardware refreshes and network modernization initiatives within budget.
• Timely closure of vulnerability remediation tasks validated by internal/external scans.
• Clear and consistent documentation of network configurations, diagrams, and change plans.
• Effective collaboration with IT, operations, and external vendors to deliver reliable services.
• Continuous professional growth through training, certifications, and industry engagement.
• Travel to refinery and remote sites as needed.

• Configure networks to ensure reliable operation and monitors performance, troubleshooting and solutions while providing excellent customer support to all levels of employees, vendors, consultants and contract resources to ensure projects are successfully deployed with consistent reliability.
• Develop implementation schedules, detailed project plans and execution within the team and end users and ensure all communication is clear and concise.
• Complete at least one continuous education course during the year ensuring increased understanding of new principles of engineering/IS.
• Adherence to all company policies and procedures.
• Monitor day-to-day network activity to analyze and provide recommendations for changes to improve performance or correct issues as well as provide evaluation reports of current and network environment systems as well as reports on utilization, performance and outages.
• Display logical thought processes and communicate with team members, management, and non-technical customers on technical matters in decisive, timely, practical decisions, and take initiative. 

Applicants must be eligible to work in the United States. The Company will not sponsor immigration or work visas.

CVR Energy is an EEO and affirmative action employer. We encourage qualified minority, female, veteran, and disabled candidates to apply.